News for hackers. Stuff that matters.

A comment on NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild. Parent comment

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by otterley on Thursday September 07, 2023 @05:22PM (#37425778)
Apple, Google, etc. have whole teams of talented people dedicated to doing exactly these types of things, and they undoubtedly help prevent many vulnerabilities from escaping the labs. Yet vulnerabilities are still created and exploited despite their best efforts. As long as software is created by imperfect humans, it will reflect the imperfections of its creators.
[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by mensetmanusman on Thursday September 07, 2023 @06:31PM (#37426526)
Not only humans, the math says it’s not knowable whether any open ended hardware/software is inherently safe.
[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by sudosysgen on Thursday September 07, 2023 @07:01PM (#37426859)
It's not knowable for any, but it is knowable for some. You just have to build systems that are in the some and are inherently safe. Difficult, not impossible.
[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by PradeetPatel on Thursday September 07, 2023 @07:13PM (#37426962)
Difficult often implies additional resourcing and development related costs.

Something that many companies are not willing to invest in since it will have a negative impact on the shareholder values.

Often risks are accepted, and cybersecurity insurance is used to mitigate those risks.

[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by sudosysgen on Thursday September 07, 2023 @08:20PM (#37427592)
I agree, I just wanted to clarify that isn't mathematically impossible to make provably secure systems. It's just hard enough that it's not often done.
[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by 2OEH8eoCRo0 on Thursday September 07, 2023 @08:08PM (#37427490)
This is my take as well. If Apple and Google can't do it then what hope does anyone else have? The current paradigm is insecure and broken.
[ Parent | on HN ]