Re:iOS Privacy: Easily get a user's Apple ID password, just ...
by dx034 on Tuesday October 10, 2017 @10:54AM
(#15442283)
If someone has access to my unlocked phone, there are worse things they can do than installing a malicious app. First of all, apps are generally tested before they appear in the store. I don't think attackers would install an app if they can just steal the data directly.
[ Parent
| on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ...
by e12e on Tuesday October 10, 2017 @12:33PM
(#15443132)
If the data they want is a recording of your next client meeting, installing an app (possibly one that exploits a not-yet well-known bug, say a root exploit that only works from an app) might be one way to do it.
Remember [1]? Imagine an exploit not targeting safari, but somehow vulnerable via an app, a la [2].
[1] https://citizenlab.ca/2016/08/million-dollar-dissident-iphon...
[2] http://iphone.appleinsider.com/articles/16/08/29/apple-brief...