About the security content of iOS 14.7.1 and iPadOS 14.7.1

Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by radley on Monday July 26, 2021 @03:17PM (#27964015)

> it is unlikely Apple would publicly flag #2 of 2 bugs was fixed, but not #1

It's very possible Apple doesn't want to verify that Messages was compromised, particularly if they can blame everything on something obscure.

[ Parent | on HN ]

Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by ComputerGuru on Monday July 26, 2021 @03:24PM (#27964126)

There isn’t a separate “messages” from anything else, that’s an illusion Apple marketing encourages. iOS is a shared-tenancy, general-purpose operating system. A vulnerability in any of the core libraries can affect any of the apps (first party or otherwise) and a hostile or compromised application (first party or otherwise) can compromise the entirety of the device and its data.

Whether something is a Messages vulnerability or “something obscure” is just marketing spin.

[ Parent | on HN ]

Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by kall on Monday July 26, 2021 @05:51PM (#27965934)

I think the important part is any person can force data onto your device via messages. If that is exploitable, it‘s a huge oroblem. That‘s why people care.

[ Parent | on HN ]