How to unc0ver a 0-day in 4 hours or less

Re:How to unc0ver a 0-day in 4 hours or less by ehsankia on Thursday July 09, 2020 @04:41PM (#23784931)

The second paragraph of the article covers this:

> I wanted to find the vulnerability used in unc0ver and report it to Apple quickly in order to demonstrate that obfuscating an exploit does little to prevent the bug from winding up in the hands of bad actors.

[ Parent | on HN ]

Re:How to unc0ver a 0-day in 4 hours or less by stefan_ on Thursday July 09, 2020 @06:37PM (#23786063)

Maybe this should read "that obfuscating an exploit does little to prevent the bug from winding up in the hands of a talented full time security researcher".

Of course if he was this talented, surely he would routinely diff new kernel versions and realize the old bug had been reintroduced before having to rediscover it in a jailbreak?

[ Parent | on HN ]

Re:How to unc0ver a 0-day in 4 hours or less by ueouieodue on Thursday July 09, 2020 @09:55PM (#23787366)

I'd make sure I had a solid foundational basis before calling anyone on the PZ team untalented ;)

He abused the jailbreak to cause a crash. A talented researcher would try that before diffing kernel binaries.

[ Parent | on HN ]

Re:How to unc0ver a 0-day in 4 hours or less by ehsankia on Friday July 10, 2020 @01:15AM (#23788373)

> talented full time security researcher

If a single security researcher can de-obfuscate it in under a day, then a nation state with huge funding can too. Maybe not in a day, but eventually.

[ Parent | on HN ]