Journalist’s phone hacked: all he had to do was visit any website

Re:Journalist’s phone hacked: all he had to do was visit any... by VWWHFSfQ on Tuesday June 23, 2020 @06:40PM (#23621286)

Also, does iOS have something similar to SELinux? I know it's not perfect, and there have been RCEs in Android as well. But I'm surprised there are still things out there like the original tiff jailbreak exploit that allows full root access to a person's device from just visiting a webpage.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by johncolanduoni on Tuesday June 23, 2020 @07:27PM (#23621739)

The iOS equivalent would be the app sandboxing mechanism, which very heavily restricts kernel access from most of Safari (most importantly the process that is JITing javascript). It’s structured differently than SELinux and has some complications like entitlements that have led to vulnerabilities in the past, but it largely allows iOS to apply the same sort of app-level access control.

[ Parent | on HN ]

Re:Journalist’s phone hacked: all he had to do was visit any... by saagarjha on Tuesday June 23, 2020 @08:59PM (#23622638)

iOS has a number of features that provide similar functionality; getting kernel level privileges on iOS requires multiple vulnerabilities to be chained together. It's not like RCE in the web browser process instantly compromises the entire system.

[ Parent | on HN ]