News for hackers. Stuff that matters.
Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by conradev on Thursday March 27, 2025 @06:47PM (#43499113)
No, it should be there. From the link:

> Lastly, in the final blog post we’ll explore the iPhone’s host isolation mechanisms, research the ways in which the Wi-Fi chip interacts with the host, and develop a fully-fledged exploit allowing attackers to gain complete control over the iOS kernel over-the-air, requiring no user interaction.

Which is referring to this link: https://googleprojectzero.blogspot.com/2017/10/over-air-vol-...

That link is the one I am summarizing:

> Sufficient isolation for DMA-capable components can be achieved by partitioning the visible memory space available to the peripheral using a dedicated hardware component - an I/O Memory Management Unit (IOMMU).

Apple uses Qualcomm chips for cellular modems, and they use Broadcom for Wi-Fi.

edit: I might have linked the original post incorrectly, there are many volumes and parts

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by bri3d on Thursday March 27, 2025 @07:02PM (#43499236)
Oh!

The ancient 2017 WiFi article - I see now; I thought you were referring to the OP's NSO group exploit.

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by ls612 on Thursday March 27, 2025 @07:53PM (#43499649)
These changes I’m describing occurred after 2017, likely at least in part due to this vulnerability.
Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by saagarjha on Friday March 28, 2025 @03:41AM (#43502618)
No.