5 ms·
Do we know if the phone was in lockdown mode? Anyone know how effective lockdown mode is in preventing most of these zero-days?
by tevon 3y ago
Do we know if the phone was in lockdown mode? Anyone know how effective lockdown mode is in preventing most of these zero-days?
- fh9302 3y agoThe phone was not in lockdown mode as it would have prevented the attack. https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/ https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer... > We believe, and Apple’s Security Engineering and Architecture team has confirmed to us, that Lockdown Mode blocks this particular attack. https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returns-in-2022/ https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-ret... > For a brief period, targets that had enabled iOS 16’s Lockdown Mode feature received real-time warnings when PWNYOURHOME exploitation was attempted against their devices. Although NSO Group may have later devised a workaround for this real-time warning, we have not seen PWNYOURHOME successfully used against any devices on which Lockdown Mode is enabled.
- pvg 3y agoThese are about different incidents though, right? Is there some other confirmation lockdown mode would have been effective in this case as well?
- fh9302 3y agoIt's the same vulnerability as in the article, PWNYOURHOME would have been avoided with lockdown mode. > Researchers believe Timchenko’s hackers used the so-called “PWNYOURHOME” vulnerability
- pvg 3y agoAh I see, thanks! Managed to miss it while ⌘-F'ing through the article for 'Citizen Lab'.