Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by dfawcus on Friday March 28, 2025 @06:27AM (#43503630)

I've been using an iphone in lockdown mode for a while now, simply to disable a number of the poor security design choices Apple made.

One thing I just noticed this last week after upgrading to 18.x is that lockdown mode also disables RCS. I found I couldn't enable RCS, so turned lockdown mode off, found RCS now worked, then turned lockdown back on.

I can live without RCS mode.

For me, the one real annoyance of lockdown mode is that it disables 2G connectivity. Oh well, I guess one can carry a second 2G capable feature phone.

[ Parent | on HN ]

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by saagarjha on Friday March 28, 2025 @06:32AM (#43503677)

Note that 2G is generally considered to be insecure (hence why it's disabled).

[ Parent | on HN ]

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by dfawcus on Friday March 28, 2025 @05:03PM (#43509795)

Insecure how? The fact that someone could listen in to the phone call is (to me) largely irrelevant.

The real point being that it still has wider coverage in remote parts (of the UK), and draws less power.

[ Parent | on HN ]

Re:Blasting Past WebP - An analysis of the NSO BLASTPASS iMe... by saagarjha on Sunday March 30, 2025 @02:30AM (#43521855)

I don’t think most people would agree with your risk profile.

[ Parent | on HN ]