3 ms·
iOS has a reputation for having the best security, but how many times have Android/WhatsApp had these sorts of silent-instant-root exploits via invisible messag
by nvm0n2 3y ago
iOS has a reputation for having the best security, but how many times have Android/WhatsApp had these sorts of silent-instant-root exploits via invisible messages? I don't remember it happening. Maybe the strategy of writing lots of stuff in Java is paying off there.
- azinman2 3y agoWhat’sapp has had exploits. See https://gbhackers.com/new-whatsapp-0-day-vulnerabilities/amp/ https://gbhackers.com/new-whatsapp-0-day-vulnerabilities/amp...
- nvm0n2 3y agoYes, but that wasn't a zero day. WhatsApp's own team found that, and it wasn't a zero-click exploit, you had to be in a video call with the attacker.
- Brybry 3y agoAndroid has had zero click exploits. For example, Stagefright [1] And even better, there are plenty of old Android phones out which will be vulnerable to various exploits because of weak OTA update support policies. [1] https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)
- kernal 3y agoSigh…there has never been an 0day Stagefright exploit in the wild. And even if there was it wouldn’t have worked on all Android devices due to the OS differences among OEMs. Also, there are plenty of old iPhones that do not receive updates anymore and are just as vulnerable so I’m not sure why you needed to get that in.