News for hackers. Stuff that matters.
Re:Unc0ver Jailbreak for iOS 11.0 to 13.5 by saagarjha on Sunday May 24, 2020 @12:10PM (#23292485)
> Imagine writing a secure messaging app where someone could just replace all your crypto primitives. Wouldn't be easy, would it?

It’s kind of impossible, is it not? Why try futile efforts to “detect” this?

Re:Unc0ver Jailbreak for iOS 11.0 to 13.5 by Youden on Sunday May 24, 2020 @02:17PM (#23293399)
Theoretically, yes, it's impossible to detect this perfectly when the attacker can do whatever they want to your code and memory.

Practically though, it's exactly as we see here: a kind of arms race or cat and mouse game where the attackers circumvent the detection and the detection evades the circumvention.

So no, I don't think it's futile.

Re:Unc0ver Jailbreak for iOS 11.0 to 13.5 by AnthonyMouse on Monday May 25, 2020 @03:01AM (#23298724)
They're not detecting the thing malware does, they're detecting the thing ordinary users do when they want control over their phones. Malware is different code so it has a different signature -- purposefully, because it has a strong incentive to not have these naive jailbreak detection methods work against it.

So all they're doing is detecting false positives from innocent people and zero instances of real malware.

Re:Unc0ver Jailbreak for iOS 11.0 to 13.5 by wool_gather on Sunday May 24, 2020 @12:41PM (#23292682)
Why would that be impossible for malware with root privileges?
Re:Unc0ver Jailbreak for iOS 11.0 to 13.5 by saagarjha on Sunday May 24, 2020 @12:53PM (#23292791)
Impossible to detect.