Hacker News Reader

Comment by aborsy | Hacker News Reader

I wonder if the lockdown mode would have prevented this attack?

Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tricking the user to install a malicious program)?

View on HN

Apparently it has before. Although not sure of this specific exploit.

https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone...

CL link : https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-ret...

It does. The page even recommends lockdown mode as a mitigation for affected parties (people who aren't updated)

I think that is a general recommendation in the linked post, not specifically for this issue.

There is an update just issued that is at the bottom of the page. It confirms that lockdown prevents this specific attack.

Its super interesting to me how much its emphasized that you shouldn't use this (Lockdown Mode) unless you are a journalist or otherwise in direct danger. They really do try to talk you out of it. Its curious, because there's very little difference in functionality other than disabling a lot of Apple nonsense from running in the background expanding your attack surface.

Apple doesn't want it's users to have an interior experience. It might be subtle so it makes sense that they don't want fully uninformed users from enabling it for no real reason. Currently it's not clear anyone who's not under risk of state sponsored monitoring should bother enabling it. Thus it's not clear why they should message it any other way.

Blocking "most attachments", including links, from iMessage would be a very visible and annoying change

The post recommends using lockdown mode and cites an Apple representative saying it would have prevented this exploit.

Reply on news.ycombinator.com