Re:Apple Confirms Zero-Day Attacks Hitting macOS Systems
by acdha on Wednesday November 20, 2024 @08:12AM
(#42193646)
> Do you expect sites you do visit, like "google.com" or such, are going to serve up malware?
With absolute certainty. Google ads has triggered downloads of Windows executables on NYtimes.com for me before and I am confident attackers will keep trying. The idea that advertisers get to run JavaScript on clients makes that problem effectively unwinnable even though they spend considerable amounts trying to make it hard to slip dodgy code into ads.
Re:Apple Confirms Zero-Day Attacks Hitting macOS Systems
by ceejayoz on Wednesday November 20, 2024 @07:09AM
(#42193156)
> Do you expect sites you do visit, like "google.com" or such, are going to serve up malware?
Absolutely. One of the main reasons to run an adblocker. Malicious ads slip through regularly onto entirely reputable sites.
Re:Apple Confirms Zero-Day Attacks Hitting macOS Systems
by TekMol on Wednesday November 20, 2024 @05:23AM
(#42192501)
You are implying that the web based exploits in the history of iOS were not publicly known but only available to very few.
If that holds true, that would be an importent addition to the discussion.
The comment I replied to was about a public website that could jailbreak an iPhone though.
Do you regularly visit "hot-iphone-porn-apps.info" and other untrusted sites? Do you expect sites you do visit, like "google.com" or such, are going to serve up malware?
Do you expect hackers who build these very labor-intensive exploit chains will want to try and hit as many low-value targets as possible, leading to apple patching the exploit quickly, or to try and hit high-value targets only so it's not noticed by apple as quickly and can be used against more high-value targets to make more money in total than doing a "spray and pray" with it?
What thought process do you think would lead to using the exploit against as many people as possible vs selling it to zerodium.com or a similar company for more money than you can get from spraying, and then zerodium reselling it to israel to hack into the iphones of a few key palestinians?