News for hackers. Stuff that matters.

A comment on iOS 14.6 device hacked with a zero-click iMessage exploit to install Pegasus. Parent comment

Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by walrus01 on Monday July 19, 2021 @12:44AM (#27879338)
Anyone remember about 20 years ago, there was a remote code execution possible by simply getting outlook express (internet explorer) to load a custom crafted jpeg? Things haven't changed much.

I remain highly skeptical of any messaging app or communication chat program, email client that lets people "embed" arbitrary content in it.

[ Parent | on HN ]
Re:iOS 14.6 device hacked with a zero-click iMessage exploit... by hulitu on Monday July 19, 2021 @07:17AM (#27881291)
Things haven't change because there is a god like mindset in SW development. "I want my program to do everything". And the web browsers and messaging apps are the worst. They use a miriad of libraries to parse untrusted code and they have components which sometimes run with elevated privileges. What can go wrong ?
[ Parent | on HN ]