News for hackers. Stuff that matters.
Re:iPadOS by eugeniub on Tuesday September 24, 2019 @02:25PM (#21063160)
> But many of the exploit chains did use public jailbreak exploits and Semi-unthethered jailbreaks exist for 32-bit iOS devices running up to iOS 10.3.3.

Apple released iOS 10.3.4 on July 22, 2019 for iPhone 5 and iPad 4g.[1] So it's not completely unheard of for Apple to release iOS updates after officially dropping iOS support for old devices. From the Apple website:[2]

> iOS 10.3.4 addresses an issue that could impact GPS location performance and could cause system date and time to be incorrect. This update is recommended for all users.

I wonder if this update quietly fixed these exploit changes.

[1]: https://support.apple.com/en-us/HT201222 [2]: https://support.apple.com/en-us/HT208011#1034

Re:iPadOS by Abishek_Muthian on Tuesday September 24, 2019 @02:32PM (#21063218)
Unlikely, if it was a security update then iPhone5C should have received it as well. iPhone5C didn't receive 10.3.4 update because its GPS hardware supposedly was an updated one than the iPhone5.

Also, Google Project Zero article(link in parent comment) gives the clear timeline of the attacks and that the exploits were updated to mitigate patches with every new OS updates; so even if 10.3.4 had security patches older devices still might be vulnerable to later attacks.

Re:iPadOS by aNoob7000 on Tuesday September 24, 2019 @03:05PM (#21063507)
What Android phone released in 2013 is still getting security updates of any kind? You make it seem like Google and the manufacturers all update their phones consistently.
Re:iPadOS by 9HZZRfNlpR on Tuesday September 24, 2019 @03:17PM (#21063585)
Browsers do get the updates, that is what's been compared here. I can run extremely old Android with updated browser(s).
Re:iPadOS by vetinari on Tuesday September 24, 2019 @04:12PM (#21064122)
All Android phones from 2013 have current Chrome (or Firefox, if that's your preference).

In fact, I have a Nexus 7 (2013) nearby, so I know that firsthand.

Re:iPadOS by buildzr on Tuesday September 24, 2019 @03:42PM (#21063791)
Google still ships Chrome and updated WebView for devices older than that even.

If Windows desktops have shown us anything, it's that (given NAT) few vulnerabilities are easier and more profitable to attack than a browser.

Re:iPadOS by eugeniub on Thursday September 26, 2019 @03:54PM (#21084831)
Well it's listed under "Apple security updates".