NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by hot_gril on Thursday September 07, 2023 @05:19PM (#37425747)

Or just slow. If you don't care about optimization and run things in really inefficient sandboxes, security becomes a lot easier.

[ Parent | on HN ]

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by Dylan16807 on Thursday September 07, 2023 @07:25PM (#37427071)

How fast does iMessage image decoding need to be?

And I mean this extremely rhetorically. The software launched along with the iPhone 4S. Going by geekbench, that CPU was 20-30 times weaker than a modern iPhone on a per-core basis.

I know the screens on the new phones are 5x bigger, but there is plenty of room for that sandbox.

[ Parent | on HN ]

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by hot_gril on Thursday September 07, 2023 @07:26PM (#37427089)

I'm guessing it's a shared systemwide decoder that happens to be exploitable in Message, but idk.

[ Parent | on HN ]

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by saagarjha on Thursday September 07, 2023 @08:08PM (#37427488)

That's correct, it's the WebP parser.

[ Parent | on HN ]