News for hackers. Stuff that matters.

A comment on Journalist’s phone hacked: all he had to do was visit any website. Parent comment

Re:Journalist’s phone hacked: all he had to do was visit any... by hn_throwaway_99 on Tuesday June 23, 2020 @11:33PM (#23623731)
Glad you fixed your comment with your edit, but this really isn't that hard to imagine at all: a privilege escalation in Safari is exactly how one of the original jailbreaks worked: https://en.wikipedia.org/wiki/JailbreakMe.

All you then have to do is network-inject on a user who visits a non-HSTS site by entering it in their address bar.

[ Parent | on HN ]
Re:Journalist’s phone hacked: all he had to do was visit any... by StavrosK on Wednesday June 24, 2020 @01:50AM (#23624512)
Sure, but we've come a long way from the original jailbreak, and what this hack is is essentially another full jailbreak from another Safari vulnerability, which is pretty scary.
[ Parent | on HN ]