It's not clear if iCloud is exploitable. Just the DNS lookups do not prove that remote code execution via ldap is active. In fact, if they are using an up to da

It's not clear if iCloud is exploitable. Just the DNS lookups do not prove that remote code execution via ldap is active. In fact, if they are using an up to date JRE, it's not. I tried to exploit my own apps and could only get it to work when setting com.sun.jndi.ldap.object.trustURLCodebase to true