iOS 14.6 device hacked with a zero-click iMessage exploit to install Pegasus

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by fmajid on Sunday July 18, 2021 @07:06PM (#27877509)

Or fuzzing? Why is it that Google's Project Zero has to point out their mistakes for them? Apple's complacency on security is infuriating.

[ Parent | on HN ]

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by deregulateMed on Sunday July 18, 2021 @07:41PM (#27877745)

Apple doesn't admit wrong doing. Take their multi year long denial of butterfly keyboard issues.

The key to user satisfaction isn't security, it's consistent marketing reminders of "security".

Apple users here are often forced into the ecosystem due to iOS or safari dev, but the majority of Apple users care more about the name of the iPhone than performance. This is the nature of Veblen goods.

[ Parent | on HN ]

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by judge2020 on Sunday July 18, 2021 @09:48PM (#27878432)

> Apple doesn't admit wrong doing.

On the business end, sure.

But https://support.apple.com/en-us/HT201222#:~:text=the%20previ...

[ Parent | on HN ]

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by robin_reala on Monday July 19, 2021 @04:58AM (#27880513)

That’s a bit of a weird framing. Project Zero point out mistakes in Google’s products too. It’s just that they’re visible.

The assumption has to be that Apple quietly fixes minimum a hundred times more security bugs in their products, than the ones the occasional Project Zero blog post highlights.

[ Parent | on HN ]

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by fmajid on Tuesday July 20, 2021 @07:12AM (#27892327)

Given their lackadaisical approach to bug reports filed by external researchers, and their grudging payments on their own bug bounty program, I think you are giving them far more credit than they deserve.

[ Parent | on HN ]