42 ms·

It is absolutely abnormal for companies like Apple to release core security bugs this shallow that could have been easily discovered by straightforward unit tes

It is absolutely abnormal for companies like Apple to release core security bugs this shallow that could have been easily discovered by straightforward unit tests and static analysis tools. This is why it's a big deal.

f_salmon 13y ago
The other reason why this is no big deal (anymore) is that the Snowden leaks have shown that the NSA has total control over all iPhones. Why should we even bother talking about bugs like this anymore? Pure distraction.
- oneeyedpigeon 13y ago
  Which is worse: the NSA having total control over all iPhones (citation? I obviously haven't been paying enough attention), or the NSA and all the (other) bad guys in the world having total control ...? Sure, they're both terrible, but I'd take the former over the latter.
- kalleboo 13y ago
  > the Snowden leaks have shown that the NSA has total control over all iPhones You mean: had total control over all the original iPhones that they could get physical access to. (back when jailbreaking was extremely simple and common)
  - f_salmon 13y ago
    Where does the "physical access" part come from? And if that was the case, why would it be impossible now? One of the sources: http://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-reportedly-has-total-access-to-your-iphone/ http://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-repo...
    - kalleboo 13y ago
      From the slide on your very link: "The initial release of DROPOUTJEEP will focus on installing the implant via close access methods. A remote installation capability will be pursued in a future release." Basically how it worked was they jailbroke your iPhone and installed spyware on it. Is it quite likely that today, 7 years later, they have a remote 0day to do the same? Absolutely. But there's no proof that "the NSA has total control over all iPhones".

42 ms·

It is absolutely abnormal for companies like Apple to release core security bugs this shallow that could have been easily discovered by straightforward unit tes

by blazespin 13y ago

f_salmon 13y ago
The other reason why this is no big deal (anymore) is that the Snowden leaks have shown that the NSA has total control over all iPhones. Why should we even bother talking about bugs like this anymore? Pure distraction.
- oneeyedpigeon 13y ago
  Which is worse: the NSA having total control over all iPhones (citation? I obviously haven't been paying enough attention), or the NSA and all the (other) bad guys in the world having total control ...? Sure, they're both terrible, but I'd take the former over the latter.
- kalleboo 13y ago
  > the Snowden leaks have shown that the NSA has total control over all iPhones You mean: had total control over all the original iPhones that they could get physical access to. (back when jailbreaking was extremely simple and common)
  - f_salmon 13y ago
    Where does the "physical access" part come from? And if that was the case, why would it be impossible now? One of the sources: http://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-reportedly-has-total-access-to-your-iphone/ http://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-repo...
    - kalleboo 13y ago
      From the slide on your very link: "The initial release of DROPOUTJEEP will focus on installing the implant via close access methods. A remote installation capability will be pursued in a future release." Basically how it worked was they jailbroke your iPhone and installed spyware on it. Is it quite likely that today, 7 years later, they have a remote 0day to do the same? Absolutely. But there's no proof that "the NSA has total control over all iPhones".