News for hackers. Stuff that matters.

A comment on Meet Comex, The 19-Year-Old iPhone Uber-Hacker Who Keeps Outsmarting Apple. Parent comment

Re:Meet Comex, The 19-Year-Old iPhone Uber-Hacker Who Keeps ... by jonknee on Monday August 01, 2011 @08:56PM (#2835227)
> Also, even if JailbreakMe was malicious (or somebody used the same code or exploits in a malicious way), it could not "spread itself": it was a browser exploit (although it would be possible to run without the user knowing).

It could certainly spread. Maybe it could SMS a link to a malicious download to your most frequently contacted contacts? Being able to run arbitrary code on a device that knows how to contact all your friends certainly introduces some vectors for attack.

[ Parent | on HN ]
Re:Meet Comex, The 19-Year-Old iPhone Uber-Hacker Who Keeps ... by yuhong on Tuesday August 02, 2011 @03:07AM (#2836169)
FYI, it is a PDF-based exploit, meaning all users have to do is open a malicious PDF.
[ Parent | on HN ]
Re:Meet Comex, The 19-Year-Old iPhone Uber-Hacker Who Keeps ... by Xuzz on Tuesday August 02, 2011 @11:27AM (#2837446)
It's a font-based exploit, not PDF. The particular implementation on JailbreakMe used a PDF, but it could easily work in @font-face with CSS on any webpage (or, as we did on JailbreakMe, just hiding an <iframe> to the PDF).
[ Parent | on HN ]