3 ms·
> That is simply impossible if an actual executable is installed on the device. There's one exception, if there's a vulnerability in the hard-coded ROM or the
by flangola7 3y ago
> That is simply impossible if an actual executable is installed on the device.
There's one exception, if there's a vulnerability in the hard-coded ROM or the silicon itself. One was found not long ago and enabled newer iPhones to be jailbroken. It lacks persistence and requires lightning port access, but it can't be patched.
A no-click remote ACE at the unpatchable physical level would be the mother of all zero days, and too valuable to use for all but the highest of targets.
- k9unit 3y agoIf such a no click ACE is the mother of all exploits, it could be a little harder to patch, especially for your average end user. If that's not the case, then maybe the advantage to it might be that it can run on the hardware you need it to for a specific use case, but that itself is a big disadvantage for most other use cases. If neither are true, then are they worth the same amount? What makes one ACE better than another? Let's say this exploit did exist, and it was better for some reason. Then maybe I shouldn't use it, instead I use a cheap one time use exploit on a target that would cause it to be patched anyway.