News for hackers. Stuff that matters.

A comment on NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild. Parent comment

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by Dylan16807 on Thursday September 07, 2023 @07:25PM (#37427071)
How fast does iMessage image decoding need to be?

And I mean this extremely rhetorically. The software launched along with the iPhone 4S. Going by geekbench, that CPU was 20-30 times weaker than a modern iPhone on a per-core basis.

I know the screens on the new phones are 5x bigger, but there is plenty of room for that sandbox.

[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by hot_gril on Thursday September 07, 2023 @07:26PM (#37427089)
I'm guessing it's a shared systemwide decoder that happens to be exploitable in Message, but idk.
[ Parent | on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by saagarjha on Thursday September 07, 2023 @08:08PM (#37427488)
That's correct, it's the WebP parser.
[ Parent | on HN ]