3 ms·

I wonder if the lockdown mode would have prevented this attack? Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tric

by aborsy 3y ago

I wonder if the lockdown mode would have prevented this attack? Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tricking the user to install a malicious program)?

s3p 3y ago
It does. The page even recommends lockdown mode as a mitigation for affected parties (people who aren't updated)
- onionisafruit 3y ago
  I think that is a general recommendation in the linked post, not specifically for this issue.
  - o1y32 3y ago
    There is an update just issued that is at the bottom of the page. It confirms that lockdown prevents this specific attack.
- Obscurity4340 3y ago
  Its super interesting to me how much its emphasized that you shouldn't use this (Lockdown Mode) unless you are a journalist or otherwise in direct danger. They really do try to talk you out of it. Its curious, because there's very little difference in functionality other than disabling a lot of Apple nonsense from running in the background expanding your attack surface.
  - UnicornsOnLSD 3y ago
    Blocking "most attachments", including links, from iMessage would be a very visible and annoying change
  - ramraj07 3y ago
    Apple doesn't want it's users to have an interior experience. It might be subtle so it makes sense that they don't want fully uninformed users from enabling it for no real reason. Currently it's not clear anyone who's not under risk of state sponsored monitoring should bother enabling it. Thus it's not clear why they should message it any other way.
nirav72 3y ago
Apparently it has before. Although not sure of this specific exploit. https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone-nso-pegasus/ https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone... CL link : https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returns-in-2022/ https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-ret...
plorg 3y ago
The post recommends using lockdown mode and cites an Apple representative saying it would have prevented this exploit.

by aborsy 3y ago

s3p 3y ago

It does. The page even recommends lockdown mode as a mitigation for affected parties (people who aren't updated)

onionisafruit 3y ago
I think that is a general recommendation in the linked post, not specifically for this issue.
- o1y32 3y ago
  There is an update just issued that is at the bottom of the page. It confirms that lockdown prevents this specific attack.
Obscurity4340 3y ago
Its super interesting to me how much its emphasized that you shouldn't use this (Lockdown Mode) unless you are a journalist or otherwise in direct danger. They really do try to talk you out of it. Its curious, because there's very little difference in functionality other than disabling a lot of Apple nonsense from running in the background expanding your attack surface.
- UnicornsOnLSD 3y ago
  Blocking "most attachments", including links, from iMessage would be a very visible and annoying change
- ramraj07 3y ago
  Apple doesn't want it's users to have an interior experience. It might be subtle so it makes sense that they don't want fully uninformed users from enabling it for no real reason. Currently it's not clear anyone who's not under risk of state sponsored monitoring should bother enabling it. Thus it's not clear why they should message it any other way.

nirav72 3y ago

Apparently it has before. Although not sure of this specific exploit. https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone-nso-pegasus/ https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone... CL link : https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returns-in-2022/ https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-ret...

plorg 3y ago

The post recommends using lockdown mode and cites an Apple representative saying it would have prevented this exploit.