A 0-click exploit chain for the Pixel 10

Re:A 0-click exploit chain for the Pixel 10 by fg137 on Friday May 15, 2026 @04:49PM (#48153600)

I think it's simpler: don't touch untrusted content unless/until you need to.

[ Parent | on HN ]

Re:A 0-click exploit chain for the Pixel 10 by stavros on Friday May 15, 2026 @06:40PM (#48154880)

That's easy, and already done. Phones only touch untrusted content when they need to, it's just that they need to touch it immediately upon receipt

[ Parent | on HN ]

Re:A 0-click exploit chain for the Pixel 10 by saagarjha on Saturday May 16, 2026 @03:15AM (#48157630)

Alas, there are a lot of things that you need to touch that are untrusted.

[ Parent | on HN ]

Re:A 0-click exploit chain for the Pixel 10 by marysol5 on Saturday May 16, 2026 @04:44AM (#48158209)

But that just moves it from 0-touch, to 1-touch (which is of course better).

But users are morons.

We STILL NOW, have people getting phished and pwning their employers.

[ Parent | on HN ]

Re:A 0-click exploit chain for the Pixel 10 by olyjohn on Saturday May 16, 2026 @06:48PM (#48164442)

Let's think about why that happens though

We all go through that stupid phishing training. They give us a list of red flags to help determine if an email is legit.

Then the next day, the CTO sends out an email that says IMPORTANT and the only text body says PLEASE READ THE ATTACHED .DOCX FILE. This is exactly what we were just trained not to open, but its from some exempt C-level who didn't have time to take the training, and all he is now doing is training the employees to open mails that look like phishing.

[ Parent | on HN ]