‘Zero-click’ hacks are growing in popularity

Re:‘Zero-click’ hacks are growing in popularity by raesene9 on Saturday February 19, 2022 @11:34AM (#30398335)

That's a view of the world for sure :) Personally I don't think it's irrelevant. From a threat modelling perspective, exposed services are expected to be attacked.

Client services with zero interaction, have traditionally been regarded as safer, usually for client side attacks we'd expect a trigger from user action (e.g. a link being clicked, a PDF file being opened).

Just because you don't find something to be useful as a distinction in your line of work doesn't necessarily mean that it's not useful to anyone ...

[ Parent | on HN ]

Re:‘Zero-click’ hacks are growing in popularity by rosndo on Saturday February 19, 2022 @12:04PM (#30398564)

Client services like these are also expected to be attacked.

iMessage isn’t meaningfully different from Apache, instead of listening on a TCP number it listens on your Apple user id.

[ Parent | on HN ]

Re:‘Zero-click’ hacks are growing in popularity by IceDane on Sunday February 20, 2022 @04:29AM (#30404433)

This is really flyfucking of the worst kind: the kind that doesn't serve any useful purpose.

From any useful perspective, RCE and zero-click exploits are the same thing. The latter is just a fancy name for the moron journalists like the one who wrote this article to bandy about to lure in some readers.

[ Parent | on HN ]