News for hackers. Stuff that matters.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by aborsy on Thursday September 07, 2023 @04:37PM (#37425218)
I wonder if the lockdown mode would have prevented this attack?

Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tricking the user to install a malicious program)?

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by nirav72 on Thursday September 07, 2023 @04:41PM (#37425267)
Apparently it has before. Although not sure of this specific exploit.

https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone...

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by s3p on Thursday September 07, 2023 @04:39PM (#37425236)
[delayed]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by onionisafruit on Thursday September 07, 2023 @05:00PM (#37425512)
I think that is a general recommendation in the linked post, not specifically for this issue.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by o1y32 on Thursday September 07, 2023 @05:54PM (#37426128)
There is an update just issued that is at the bottom of the page. It confirms that lockdown prevents this specific attack.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by Obscurity4340 on Thursday September 07, 2023 @06:11PM (#37426318)
Its super interesting to me how much its emphasized that you shouldn't use this (Lockdown Mode) unless you are a journalist or otherwise in direct danger. They really do try to talk you out of it. Its curious, because there's very little difference in functionality other than disabling a lot of Apple nonsense from running in the background expanding your attack surface.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by ramraj07 on Thursday September 07, 2023 @11:55PM (#37429082)
Apple doesn't want it's users to have an interior experience. It might be subtle so it makes sense that they don't want fully uninformed users from enabling it for no real reason. Currently it's not clear anyone who's not under risk of state sponsored monitoring should bother enabling it. Thus it's not clear why they should message it any other way.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by UnicornsOnLSD on Friday September 08, 2023 @08:19PM (#37440935)
Blocking "most attachments", including links, from iMessage would be a very visible and annoying change
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by plorg on Thursday September 07, 2023 @09:20PM (#37428086)
The post recommends using lockdown mode and cites an Apple representative saying it would have prevented this exploit.