Zero click vulnerability in Apple’s macOS Mail

Re:Zero click vulnerability in Apple’s macOS Mail by viraptor on Thursday April 01, 2021 @06:28PM (#26667027)

I wouldn't call it extreme when there was a known public website allowing one-click jailbreak for good few months (not sure if it was actually ever patched or just the iOS version got eol)

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by nemothekid on Thursday April 01, 2021 @07:58PM (#26667758)

It's unsurprising that the main vector for iOS jailbreaks would be through the web engine. The FreeBSD-based PlayStation 4 was also jailbroken via it's browser.

If you have written a hardened, safe browser engine then you are free to share it to the world, otherwise I wouldn't downplay their efforts.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by ndqc on Friday April 02, 2021 @01:43AM (#26669257)

Chrome/Chromium has a better track record and it is shared with the world. The number of Safari-based iOS exploits found in the wild is embarrassing.

Not OP, but I'll stop complaining when Apple lets me use other browser engines.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by _underfl0w_ on Thursday April 01, 2021 @06:59PM (#26667331)

They then hired the guy creating those exploit chains.

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by Hnrobert42 on Friday April 02, 2021 @01:49AM (#26669286)

What would be an acceptable response from Apple?

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by ghughes on Thursday April 01, 2021 @06:42PM (#26667173)

10 years ago, yeah.

https://en.m.wikipedia.org/wiki/JailbreakMe

[ Parent | on HN ]

Re:Zero click vulnerability in Apple’s macOS Mail by Wowfunhappy on Friday April 02, 2021 @12:32AM (#26669036)

Actually, Safari has been used for exploits much more recently than that! https://totally-not.spyware.lol/ (iOS 10, 2018)

[ Parent | on HN ]