Re:How to unc0ver a 0-day in 4 hours or less
by londons_explore on Thursday July 09, 2020 @03:38PM
(#23784177)
> Look at the attacks on various human rights activists
I believe all these begin with browser or existing-app based exploits.
None of them seem to rely on tricking the user into installing a new app. That would be too suspicious for the user, and would entail the attacker uploading their exploit code to apple, and giving apple a full list of users who they exploited...
Re:How to unc0ver a 0-day in 4 hours or less
by saagarjha on Thursday July 09, 2020 @03:50PM
(#23784314)
Not sure if this call is allowed through the new syscall filter in WebKit, but before it this was one JavaScriptCore bug away from achieving the same thing.
I believe all these begin with browser or existing-app based exploits.
None of them seem to rely on tricking the user into installing a new app. That would be too suspicious for the user, and would entail the attacker uploading their exploit code to apple, and giving apple a full list of users who they exploited...