3 ms·

I think you're assuming that a platform can detect a buffer overflow. How exactly is an iPhone or iPad going to detect a buffer overflow? I think we can all a

I think you're assuming that a platform can detect a buffer overflow. How exactly is an iPhone or iPad going to detect a buffer overflow? I think we can all agree that owning the entire platform on a device is far worse than a MITM attack on a session. Even if it's all the sessions on that platform using TLS/SSL. executing code on the box means you can do many other things on that box, such as setting up a pivot point and keeping access to the platform as long as you want. If you can root the platform, then all bets are off.

ivanr 13y ago
Yes, we can agree that owning the entire platform is worse. But my point is that you can't ever achieve that without someone noticing. Think millions of devices. The malware would have to work flawlessly across a number of versions, interacting with many components installed, and even on jailbroken devices. It is very risky and intrusive, which makes it much less likely. An attack against TLS connection authentication is so _clean_ in comparison, that I can easily imagine various parties jumping to the opportunity.