Today, we hacked what we'd set out to hack: the iPhone
blog.calif.io
blog.calif.io
or am I misreading this conversation?
I’ll admit I thought you lost out on more by enabling.
Images being replaced with a missing image icon doesn't seem like a lot according to the description, and it's what you would set by default?
Like give me the list of what I can turn on and off, and then let me choose my lockdown sphere.
That’s the future, and it’s coming.
That's your own mistake, because you can collaborate on Notes while your iPhone is in Lockdown
To be explicitly clear.
in my experience like maybe <5% of the web break
Whoah don’t get personal now. I just prefer open source.
Still - maybe take another look? I think it should work. I'll turn lockdown mode on again and test. I can't remember why I turned it off anyway.
Quite annoying. I've tried to explain it to them, but to no avail.
But there are weirdnesses.
For example, you can't add a person to phone favorites.
To change the list just turn off lockdown, add/remove people, then turn it back on.
It seems as though it doesn't affect existing favourites in any way...
To add to favorites, turn off lockdown mode, favorite someone, then turn it back on.
Like we did on HTC G1s in 2008
I want the freedom to install the OS I want on my phone. Now if I install a proprietary OS, I get what the developers of that proprietary OS choose to do. And if that proprietary OS does not give me root access, well, that's life.
Of course you do. You can run GrapheneOS, or LineageOS, postmarketOS, or mobian, or many others. All of those are open source, you can modify them as you want before you flash them.
What is your goalpost for a "serious OS"?
What market share proves is popularity. Which is important in an OS, but ridiculing other people's choices on grounds of market share doesn't seem very convincing to me.
Doesn't make you right. PostmarketOS and LineageOS are very much NOT the same OS in a different shirt.
Don't try to be provocative just because you were wrong, it doesn't help.
And that I disagree with all the whining about having root everywhere. If you are able to install your preferred OS on the device you own, then you can install one that has root, or fork an open source one and add root, or write your own.
Stop expecting differently.
Did people used to get like this about pocket calculators or digital watches? “Why am I forced to be limited to only the manufacturer’s firmware?”
I guess it is more debatable for a pocket calculator or a digital watch, but IMO when I buy a smartphone, it should not be illegal for me to install whatever I want on it. And the manufacturer should not add technical measures to prevent me from doing it.
That does NOT mean that the manufacturer should implement the features I want (like root access) or go out of their way to give me tools to install my favourite OS. Just that they should not prevent me from doing it (say if I manage to reverse engineer the hardware). Because I own the hardware I buy. At least I should.
If I buy a device, I want to be able to install whatever I want on it, and I want it to be legal for somebody else to sell something that I can run on it.
Probably your problem is that you have no phones, only someone's thin clients.
I even have realtime watch complications which no shipping app can have because of apple restrictions - developer mode lets you push complication updates realtime if you want.
I'll probably consider something more open next time I buy but just pointing out that right now with a developer account you're not actually _that_ restricted on iOS, the experience is better than you might think if you're making an app you never intend to ship.
I am not arguing Apple's restrictions are a good thing, if I were in charge I would in fact make allowing installing your own software on your own device a legal requirement of selling hardware, yet here we are.
I still have my linux desktop when I want to tinker.
There is no single provider that does all of that combined as good as apple.
..."until I want to do something that the default Apple behavior does not do."
To oversimplify, it's like saying "you can do these 10 things and they're guaranteed to work". On some platforms, you can do things 11-20 as well, but there's a chance they may not work as desired. This may still be preferable to a total inability to go past the first 10 due to restrictions.
I find that a lot of computing devices work fine out of the box if you use them exactly the way the included first-party options were tested to work. It's gotten to the point where I'm less concerned about how nicely they succeed at the "common" things than how well I can deal with them when they "fail" (to do the thing I want them to do).
I appreciate easy and convenient as much as the next person, but if I have to choose between "must install app or change configuration to do what I need" and "nope, you can't do that", I'll take the former.
But for what it's worth I personally had a very good customer service experience with them. I had a laptop where I couldn't enable the TPM anymore and they asked me to ship it to them to look at it and replaced it with a newer model. That was in Germany though and just one case.
It's a night and day difference with mac.
https://projectzero.google/2022/03/forcedentry-sandbox-escap...
https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg...
Or just spend a few billion tokens rewriting the whole chain in a memory safe language. This nonsense is inexcusable in 2026
Re security, there are many pdf viewers, so the rewrites exist, and some of them do not have the js execution engine and all that jazz that opens up all sorts of potential exploits.
it's a feature. expect next exploit to also be pdf or image related.
PDFs may need to be further forwarded or edited on user's machine(s). Doing this in VM might save your device, only to pass the problem further down the road to a more vulnerable system.
The safe thing to do is to disarm the file - convert it in a blast proof VM. The conversion can and probably should be further tuned to explicitly disable some of the crazier, more moronic features of the format, sacrificing compatibility for safety. The same should be done with all other binary formats. It costs next to nothing, considering how crazy OP are today's phones. I wonder why it has not been done yet.
The other problem: I am not 100% sure if a clean rewrite would yield a safe viewer. As others have mentioned, PDFs can contain scripts. You'd always have to run them in VMs.
So pdf and images are the best vector for iPhones.
Once you escape the parser you have to reach and escape the sandbox and from there reach the kernel.
"~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues" - Microsoft [1]
"We adopted Rust for its security and are seeing a 1000x reduction in memory safety vulnerability density compared to Android’s C and C++ code." - Google on Android [2]
This is also worth looking: https://www.chromium.org/Home/chromium-security/memory-safet...
References: 1. https://www.microsoft.com/en-us/msrc/blog/2019/07/a-proactiv... 2. https://blog.google/security/rust-in-android-move-fast-fix-t...
They don’t seem convinced that that would be a meaningful use of time for them. (2025)
https://itsfoss.com/news/ffmpeg-swipe-at-rust/
And 6 months ago someone did a little experiment using Claude to rewrite FFmpeg in Rust. It was by the own description by the person that had the AI do it, significantly slower than FFmpeg even when incorporating assembly code from FFmpeg.
https://github.com/sharifhsn/wedeo
Maybe with further advancements it is now possible to get a better result, or soon.
But if you are going to copy their assembly code into the Rust protect how do you definitively prove that no memory unsafe operations are happening in those parts? Seems to me that either the whole thing should be safe Rust, if the point of the rewrite is memory safety.
On less powerful machines, dear Mutt+isync+msmtp users like me, please use AERC (written in Go) against these. It's slower, but far more secure than C. Also, SLRN needs a Go rewritten clone (able to point to slrn's caché) like nothing else. Comp.misc and comp.arch still are extremely valuable.
You certainly can still write security vulnerabilities that don't involve memory safety violations, and these languages always have unsafe escape hatches that you can use to shoot yourself in the foot. But as long as you don't just sprinkle unsafe on everything, using a safer language is going to make a ton of vulnerabilities just disappear.
Looking at the issues from this past week, safe languages won't stop you from using 4 as your private key, but they would have entirely prevented the PHP vulnerability.
The best solution would be ditching it completely for a simpler subset of features. But that will never happen.
Like the saying goes:
Everyone uses only 20% of the features, but it's a different 20% for different people.
Who am I kidding, I think the PDF format will outlive us.
if apple parsed pdf with (js, swift, rust) none of this would be possible. the problem is memory-unsafe code.
Interpreters and compilers can have bugs. Bugs can cause memory safety issues.
Rust is interesting because it’s a low-level language with strong memory safety. That makes it a good fit for projects like coreutils. I’d argue it makes it a bad fit for many other projects that get rewritten in it, though. Not everything actually needs to be in a low-level language with compile-time memory management.
They have the means, they have the motivation
Lately they have fewer and fewer excuses not to
We are running a service which collects documents from our consumers. We have a content disarm service which is basically a blast-proof container without any access rights, fed a stream of source bytes and outputting clean PDFs. Not a month passes without a burst of attempts at poisoning our systems with malicious PDFs. I don't remember when was the last time that we had attempts driven by malicious jpegs or pngs, just PDFs. Its one of those uber-shit Turing-complete file formats that should die long ago.
Who is saying this part?
Asking for an open device does not mean supporting malicious hacking of others. This is the single biggest false equivalence used by Apple and the rest of the industry to keep a closed ecosystem and restrict users' control over stuff they paid for. And people continue perpetuating it for some reason.
We're on the same side here. I daily a Pixel with LineageOS and root.
If I run software the OEM didn't authorize on a phone that I own and know the password for, that might be described as a "hack". Unless you're one of the horrible people trying to push OS-level DRM on everything, my doing that is a positive or neutral thing.
If a third party gets software that I didn't authorize to run on a phone that I own by tricking me into opening a malicious PDF, that's also a "hack". Almost everyone considers that a bad thing.
One does not imply the other.
With today’s hardware I might have a different take - the 18 has more than enough hardware to be a laptop so maybe I’d use it for a docking mode. But my gut is I’d probably still want a laptop even then.
To me the upshot is : billions of development, software and hardware, have gone into the platforms - it’s hard to quickly make them significantly better.
iOS has come a long way since those days so a lot of the most common use cases of the past are no longer necessary. But the principle is the same - the hardware is a general-purpose computer but the software is locked down unnecessarily in many ways. Jailbreaking lets you do things that are outside of Apple's box.
The value of general computing freedom is like any other freedom: it is needed when it people are trying to express you.
And not just you. Anyone! So evaluating whether a freedom is necessary turns into a much more nebulous question of “would anyone really need this at one point now or in the future? Is this a thing we should protect in general, even if it does seem like we need it exactly now?”
For example, could Apple/Google at one point be strong armed (by any government) into including spyware onto all devices? And listeners to make sure no one ever says bad things about $DEAR_LEADER?
If the probability of yes is anywhere around 10% over the next decade, maybe it’s a good freedom to have.
Just like most people don’t care about freedom of speech, since they don’t “utilize” it. It’s only utilized when you get sued, and then you can exercise that freedom in court.
IMO we, the techy people, have a responsibility to society to argue for this freedom. Since no one else cares or understands it. But without it it’s too easy for history (in this aspect) to go down a not so good path.
I think, if a deal was struck with Saurik/Cydia Team and Apple to explicitly not do that, there was a much better chance the jailbreaking community would have held.
The downside to jailbreaking was often the instability but that was also back when the phones were way less powerful. Today, armed with LLMs, I would love to have root on my iPhone again. I'd love to rip out Siri and replace it with Claude Code or something like that.
Watusi was great, it let you disable the blue checkmark on Whatsapp. (Since been added as a setting)
I also used a tweak that let me auto-block certain phone prefixes that spammers used. Quite useful.
Was also useful that it allowed you to install multiple copies of an app (such as whatsapp), though no longer a need for that either.
I used to have my home screens fully customized but that’s a lot of work creating icons for hundreds of apps. Or even dozens.
2. run linux
3. run emulators
4. run VMs
5. install steam
6. make it a media server
etc
I’ve seen and used terminal applications from the App Store that seem to run a Linux VM locally, which would check off items 2 and 4.
In the abstract I’m a strong supporter of the idea that you should be able to use and modify a device you own as you see fit…but in the real world “ownership” is a whole lot murkier than the mental model a lot of tech people have.
It seemed like a silly party trick with no practical purpose, and required the terminal to reset things back to normal so the phone was useful again. Why does anyone want this? Surely there are better uses than what was demoed?
I used to jailbreak during the first few years of iPhone. I remember being able to drag out from the bottom right corner of the screen to have a launcher, similar to the Dock, but with more stuff. But over time, the iOS got more features and the argument for jailbreaking became less compelling. This is especially true now that so much sensitive information is in our phones… so I trust all this stuff that effectively has root?
The evidence of hack is the feature.
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
I love these people and everything they're doing.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
[ Stage 1: Safari/WebKit ] ──> [ Stage 2: KASLR Bypass ] ──> [ Stage 3: Kernel Execution ]
(Memory Corruption/RCE) (Kernel Info Leak) (UAF Privilege Escalation)They do have good hardware, but surely the hacker in you is a little sad using an IPhone!
But to jailbreak you need to stay on an older iOS version (because Apple patches the bugs enabling the jailbreaks). And that means you don't get security updates.
To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.
My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
> My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
It is always interesting to me how people equate getting old with becoming dumb. I know there is definitely some age related decline that's inevitable, but if a person has grown up with computers, and maybe more importantly, has had a hacker and curious mindset while younger, it is not likely that they will suddenly become so naive and vulnerable, even when like 80.
What usually happens is that people lose interest in learning new things and keeping up. My own mom (who passed at 73) could never be convinced to use Whatsapp messaging, thinking it is something complicated for the young ones, and yet I currently know people in their mid 70s and even much older who are still as sharp as anything and use all the cool apps.
That’s for Eastern Europe. I heard a similar line of reasoning for banning rooted phones in Asia and it’s easy for me to relate to that. It seems as if first-world hackers here just don’t grasp how low criminals can and will go.
Perfect, I knew this would come up. It always does. "I don't want someone to convince my elderly relative to hack their phone and do something bad". It's such an infuriating argument - no, YOU can't have freedom to do whatever you want with the device you own, because MY elderly relative might get scammed.
>>I would prefer to just give them a device that can’t do that.
There are a number of phones available that can just do calls and nothing else. If your elderly relative cannot follow the most basic advice of "don't listen to people calling you and telling you to do something on your phone" then that's all they should use.
Like, honestly - if you think your elderly relative will follow a 20 step process to go to a dodgy site, run a bunch of commands to jailbreak their phone, then download an alternative store to MAYBE download a dodgy bank app....what stops them from just following instructions from a scammer to send their money urgently to this account they named because the bank is doing maintenance on their servers and the money needs to be moved now or be lost? I love these "elderly relatives" who simultaniously don't have 2 brain cells and will follow jailbreaking instructions but who won't fall for any much easier scam involving direct transfers, gift cards or even good old fashioned cash in an envelope.
That's the problem. There should be no restricted devices at all, not in the way currently presented by Apple and others.
>>It seems like you’re upset I want to buy an EV because you want to put gas in your car.
More like, you want to buy a car that's locked to only charging at Apple provided charging stations. I say every car sold should be able to charge anywhere from any station. But we're stretching the comparison thin.
Like they can try to lock some things down, and some of those barriers we may not be able to get around, but how much of enough of them will we be able to circumvent?
Ideally this would probably not affect newer hardened devices but could unlock a bunch of older otherwise "unusable" hardware that functionally is "e-waste" currently
iPhone is this phone. Easiest to use, customer-friendly, options for limiting apps, large icons etc.
But for some reason, despite the dominance of Android phones on the market, custom smartphones being released almost every month, you want the foolproof layer to be stripped from iPhone. Why?
And no one is forcing you or your elderly relative to jailbreak it.
>> you want the foolproof layer to be stripped from iPhone
No, I want you(and me) to have the ability to strip it.
>>Why?
Because I want to be able to jailbreak the device I own and run the code that I write without asking Apple for their blessing. It's not any more complicated than this.
The biggest risk is not elderly people but rather the owner giving their passcode to someone else, e.g. a repair shop, who then enables jailbroken mode without the owner's knowledge and installs malware.
You can mitigate this problem, and the elderly person problem, by requiring the phone to be factory reset. That way any jailbreak would be extremely obvious.
replacing my hn bookmark.
Also I'd happily jailbreak my iPhone and put an alternative OS on it to extend its lifespan. I'm a living human with nuanced opinions and I'm allowed to like more than one thing.
I'd love to have more control and customizability that the user can initiate, but random executables shouldn't be able to so much as sneeze without my permission. Third party software (yes, even the FLOSS variety due to issues such as supply chain compromises) must be treated as adversarial by default, anything less is foolishness.
Having some way to unlock an iPhone doesn’t at all imply it must be done in a way that reduces security, or trusts the average user with upholding it.
Use your imagination. They could require you to have an apple developer account. Or visit an apple store. Or even limit it to a special developer unlocked iPhone flavor.
10, 15 years from now the ability to run your own code will be a distant memory unless you constantly subscribe to an annual Developer Account with BigCorp. Oh no, you've coded something that violates the ToS; account terminated.
On Linux and Windows it doesn't make a huge difference to be admin or not on a single user system. If you have a process on windows running with your user rights it can access all your data, which means game over already. Same on Linux if you aren't using heavily sandboxed flatpaks or do not run all your apps inside jails using tools like landrun or firejail.
The only thing it mitigates really is how easy a malware can hide in the system once already present. But as said earlier once running under your username it is game over, your data is right here ready to be stolen, compromised, altered, destroyed or encrypted.
or does your xterm binary scans your contract list and recently opened apps and upload all that to Facebook servers? because most apps on your so secure phone do exactly that
I’m not one of those people.
> On a website called Hacker News.
But I still find that unfair. Being a hacker doesn’t mean you want to hack every aspect of your life. I’m perfectly content hacking away on a computer, but I have no desire to hack my toaster and risk burning down my house.
If I want to run arbitrary software, I have a computer. I am unsure why you care if I want a locked down reliable phone.
I bought my mom an iPad and got her over to an iPhone exactly because of this.
I'd not mind if there was an unlock option, as long as it was tedious enough, such as connecting to a PC to do it. The android option of a few clicks under settings is definitely something I can see someone/some site convincing her to do.
Again, the mythical mother who will follow a stranger's instructions to enable developer mode and then follow detailed instruction to install an app bypassing several warnings along the way, but not one that will simply send money from one account to the other because of some random excuse from a bank "support" agent.
The proof is in the pudding so to speak though - despite every android phone out there having developer mode, this attack almost never happens. And developer mode doesn't give you root access or ability to access other apps data - she would still have to log in into her bank, and if she's willing to do that because a random stranger told her so then it's game over anyway, no need for custom apks.
edit: it's like... just give us the same option for the ipads / iphones please?
We'll publish the technical details of these hacks over the coming weeks. Writing these articles takes time, and we've been busy with a PHP thing [1].
In the meantime, check out The Great Glyph Grift [2] for a glimpse of what can go wrong when iOS parses PDFs.
Just in case you wonder, we've disclosed most of the bugs in these exploit chains to Apple and will disclose the rest. So far in 2026, we've reported close to 100 bugs to Apple. We don't accept Apple bounties, and we're not being paid for this work. We don't sell bugs or exploits, and we have no sponsors funding this research.
We do this because it's fun, intellectually challenging, and we want to help make the iPhone safer. We also have a business to run, so we do need some marketing points.
On the cost side- How expensive is it to develop each of these demos w.r.t. inference cost? Are y'all purely using OAI/A\ cyber models or are there OSS models being used too?
Big fan!
Edit: hahaha you guys are funny. “The php hack” is what I meant!
"I don't know how to stop it [...] there was never any intent to write a programming language [...] I have absolutely no idea how to write a programming language [...] I just kept adding the next logical step on the way."
And 23 years later here we are with php2shell and it powering 70% of the internet’s websites
https://en.wikipedia.org/wiki/Chicken_(Scheme_implementation...
/ducks and runs
Hence Sam Altman's latest public comment: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs."
Now their "trusted cyber access" program is moat rather than safeguard.
if you have a way to turn $5 easily into exploitable vulns, let me know cause that'd be a first for me
> On the full benchmark of 31 audited revisions, GPT-5.6 Sol High reached a weighted recall of 38.27% and GLM-5.3 High reached 30.86%. On a common subset of 12 projects, Claude Fable 5.1 High reached 65.70%, against 42.98% for GPT and 35.54% for GLM.
[1] https://github.com/CoinFabrik/soroban-audit-harness/blob/mai...
PHP won exactly because it had a wonderful DX.
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware… I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
Two things:
a) Why the would you never want to update an OS in this day and age ?
b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:
- Increasing volumes of increasingly sneaky security exploits on one side
- A phone with your 2FA apps, your banking apps, your email apps, your kids photos on the other
If I want to be root, I can do so on my desktop or a cloud VM or whatever.
But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.
Or why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.
1) They of course lack the resources
2) Often lack professional displince across all skills required
3) Mostly make for themslves or whats interesting, not whats needed.
4) The release schedule is laughable at best.
Great for professionally administered servers or expert power users. Not for much else. Until recently, esoteric use-cases like playing audio were catastrophically unsolved. And then those got better around when screen sharing, accessibility devices, and remote-assistance tools all broke because of another OSS schism. Installing and running an ordinary program requires choosing among a handful of ways of doing that (container systems, package managers) even on the same distro. And then if a graphical program wants to do crazy stuff like "open a file", well, the permissioning situation is "fragmented" to put it generously.
Gaming? Gaming works great on Linux now! ...because a corporation with centralized planning, KPIs, and incentives spent hundreds of millions of dollars on it.
I like Linux. It's been my daily driver for years, on and off. I use it for a living, I use it for a hobby. But that doesn't mean it's not a perfect example of every single one of the OSS flaws that GP listed.
This is opinion. In my opinion, closed products are not good products. To me, openness and freedom trump subjectively better UX any day.
> as much as they enjoy self-righteously declaring their values.
Consider that in our society and software ecosystem, this is all but required to stave off the forces that would enclose the software commons that these "self-righteous" volunteers work so hard to maintain.
You’re literally proving my point. This is built for yourselves not others.
You shouldn’t have to use LLMs to run your software.
Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive.
Apple is too big for that. Hard regulation is the only way out right now. Maybe breaking them up too.
You can also vote with your wallet regarding banking. Put your deposits in another bank.
So a bank shutting down a website right now and the "forcing" some Google/Apple "verification" makes a lot of sense in that context.
SMS are an American thing. Only credit card companies are using them and they are American.
Edit: exiling not exhaling
Nor should those 1,000 people get to try to use the government to tell the other trillion what product they should have to buy.
It's the wrong way of thinking about the problem. The whole point is that they've gained too much market power for any individual to be able to stop them meaningfully, and that collective action using the power of government is the only way.
Any argument that tries to talk people out of that is on the same side as the tech oligarchs, in my opinion.
Of course we should, at a society level. This basic concept is called public policy.
There is no "viable third platform" because people don't vote against the two existing ones with their wallets.
Can you name an example where a government succeeded in breaking up a monopoly, and the result was better for consumers? AT&T, IBM, and Microsoft were all "broken up", but it didn't make a difference for consumers. In every case, a competitor forced them to change their ways.
Also 2 of those 3 companies were famously NOT broken up.
Even without flashing a new OS, one can install third party app stores (e.g. F-Droid) with open source apps and/or side-load modified versions of those apps.
It wouldn't be advised to buy the latest pixel now anyway, either get the previous one or wait a few months for Motorola Signature 27, where GrapheneOS will be first party OS, and not hated-by-the-vendor bolt-on.
If you insist on the latest pixel, go check the GrapheneOS discussion forum for all the details.
Instead I have to buy the shitiest locked full of crapware android phone and hack it with an LLM to make it usable because apparently that's what I deserve for wanting a headphone jack.
Best of both worlds.
The DACs/amps you linked are bigger than the Sony mp3 player I had in 2004. It had two jacks and a user replaceable battery. And it was water resistant.
I could go on and on.
Take care!
The responses to my rebuttal are honestly confusing to me; one person seems to think that I'm arguing against voting with your wallet (which seems bizarre, given that my comment was literally saying that's something I actively do), one person seems to think I introduced the idea that Apple should have a more open ecosystem to the conversation rather than inheriting it as a premise from the grandparent comment, and one person upvoted my comment. I have absolutely no clue how three different people managed to read something completely different from my comment when the context and content seems clear to me, but I guess I'm missing something here because the point that I thought would be apparent is not consistently being understood.
> this has done absolutely nothing to change how open the iPhone is.
And tell me how that doesn’t sound defeatist or come off as giving up on voting with your wallet.
I can only speak for my replies but you were too concise on your opinion that it spawned multiple interpretations. Brevity breeds misinterpretations or something or other.
"This" has done nothing doesn't imply "nothing will do anything". From my perspective, it sounds like you basically were assuming that anything I didn't explicitly repeat from the parent comments was no longer relevant, whereas I would have assumed that it would be noisy and annoying for me to repeat it directly.
I also think you might benefit from rereading the context here; someone said that government regulation is needed to make the iPhone ecosystem open, and someone else disagreed on the basis that voting with one's wallet is a viable alternative. I disagreed with that disagreement, arguing that voting with one's wallet doesn't produce the change that the original commenter said regulation was needed for; telling me "that's not what voting with your wallet does" is redundant, because that's literally what I was already saying. You're certainly entitled to disagree with my opinion that making the ecosystem more open is a desirable goal, but that's not a premise I introduced here, so if disagreeing with that is your intention, it's unclear to me why you picked out my comment as the one to express that when the original statement of that goal was several parent comments up from mine.
Buying a phone you like? Moral.
Trying to force every phone to be one you like? Immoral.
That's all it's about. Not a difference in definitions or confusing on his part, he's just saying you've got morality all wrong and need to reconsider your position.
My point in the comment you responded to is that if person A says "we need to eat more vegetables to be healthy", person B says "no, you will be healthy if you only eat meat", and person C says "I tried only eating meat and I was unhealthy, so I think that's evidence that meat alone might not make you healthy", it's a non-sequitur to respond to person C by saying "it's immoral for you to say someone else should eat vegetables". If you responded to person A saying that, it wouldn't be as weird, but to remain silent when person A and B are debating the health effects of vegetables but then suddenly take issue with person C trying to provide evidence about whether the claims for A and B are correct or when they didn't introduce the topic that you have moral opinions on is very weird.
For a society to function there needs to be balance. ‘You can do whatever you want as long as enough people pay you to cover your bills’ gets bleak fast.
It's a net benefit for society, even if you don't personally like it.
There are fewer viruses on Linux than on Windows, despite being far more open. I imagine your response will be that there are a lot more iPhone users than Linux ones, but my point is that there are a lot more factors than treating "open or closed" as a binary, and at best you can make a principled hypothesis about why something doesn't exist. For all you know, maybe making it more open would allow security researchers to find and report more potential attack vectors; extra attention from being more widely used cuts both ways.
There's a whole set of philosophies on this topic, for example the non-aggression principle. You can't just make an arbitrary comparison and then use it to argue for your position.
They want what Apple sells.
You're also going to benefit from European mandates to have accessible mobile apps anyways, it's coming for free to you.
- VoiceOver is notoriously non-customizable. It's good enough for blind users, and catastrophic for any motor issues. All of Apple's accessibility is entirely focused over on blind users. Your grandma with the shakes can go fuck herself however.
- VoiceOver is catastrophically unaware of context. I can't count the times it read "Walk fifteen em" instead of Walk 15 meters.
- Apple's solution to accessibility is to not care about their apps and to just make an "accessible" copy.
- Implementing accessibility properly in UIKit/SwiftUI is a kludgey piece of shit where it's extremely common to see people entirely modifying how text is being read, which in an accessibility nightmare and only considers basically blind users.
Source: the software I work on has to be 80%+ accessible, with regular accessibility audits and a panel of various users.
Not true, the EU tried to become a regulatory superpower and largely failed to export its rules to the rest of the world. Instead, Apple and Google just aren't bringing new features to the EU anymore.
The more common one is GDPR. Things like AI features come to Europe late, or don't come at all, because it's illegal to just record everyone all the time and transmit that information back to the mothership, which is what the feature does.
The EU accessibility mandates will be followed by apps, not by platforms. I don't care if Apple Music wants to keep being trash, Spotify, Deezer and Tidal will improve and lift everyone with it.
So you vote with your wallet for accessibility despite freedom and the rest of hacker news do the opposite and it all works itself out.
Pick your priorities. There will never exist enough products to check all of the boxes that all of the people say is important to them. There is someone out there who would much rather have a product cost some amount less at the cost of accessibility features but they think a device that 'just works' is important so they buy the iPhone anyway.
Support NGOs fighting for your freedom like https://eff.org.
I stopped buying Apple phones years ago.
its not particularly feasible to do for the end customer, similar to trying to buy EVs in the US when the upstream dealer decides whata available for you.
vote with your wallet is for the ultra-wealthy.
the rest of us can vote with our votes instead, and get much better results
Not sure where you live or what votes you are making, but "much better results" is hardly what I've seen or expect from US politics, politicians, and the uber wealthy that run the corporations that dominate many of the most important aspects of our daily lives.
You're kidding right? It seems like every other car around here is a Tesla or some other EV. It's mostly Teslas and trucks really.
No. Regulation is the answer. Hopefully everything changes in November. That’s when GTA VI comes out.
Guess who that benefits? Not you or me.
The tiny fraction of people willing to vote with their wallet has effectively a 0% chance of pushing big corporate to act right.
Apple is not 'too big' for savvy customers to choose differently but all the Mag 7 tech companies are too big for regulation to be a 'way out'. They now all have 'Regulatory Compliance' divisions which are about compliance as much as the 'Ministry of Truth' is about truth. Instead they are filled with highly-paid former regulators, lobbyists and lawyers who use their inside knowledge to avoid, skirt or nullify regulatory impact.
Company strategies are now purposely designed at conception to be almost impossibly difficult to prosecute or enforce. It's been working so well over the last decade that when the size of the prize is big enough, mega-tech corps are increasingly willing to just overtly violate regulations knowing they can fight in court for years until the govt settles for a reduced fine that's less than the profit already made.
Except that won't matter. The "savvy" user is such a tiny minority and only an even tinier minority will be willing to coordinate a boycott. Its a drop in the bucket even if you do get a boycott going.
If you’re downloading 200 mb pages every time because you’re loading desktop pages on your phone, it’ll be pretty slow and inefficient.
Also PWAs can use local storage.
I expect that the real problem with using a Linux phone would be WhatsApp, Google Maps (the navigation part), OSMAnd. Telegram desktop maybe works.
I also pushed back on claiming Apple is "too big" because it's another cop-out those neck-deep in the Apple plantation parrot as if it somehow makes it slightly more okay they're enabling the worst of the Mag7 rapacious abusers. Buy Apple if you want, it won't matter. Just own your choices and spare us the fig-leaf rationalizations.
> My main point was that regulation is no longer a reliable check on Mag7 mega-corp abuses.
It is a bad point that was not made at all. The fact that corporations are effectively, and often literally currently unregulated is not proof that regulation is not "a reliable check on" abuses any more than my not wearing an oven mitt and constantly being burned is proof that wearing an oven mitt is not reliable protection against being burned.
Apple is too big to choose differently. There are two choices. Both are horrible. Eventually you will need to make a choice between one or the other to participate in banking, paying your utilities, buying things in stores, logging onto any internet site, maybe paying tolls, maybe even driving (your license might be issued to your phone.) To some extent, some of these things are true now.
Why would anybody owe you a "fig-leaf" excuse? Nobody is trying to placate you. They're just telling you what they think and why they are doing what they're doing, you should be grateful.
I'm speaking as someone who uses Debian on everything, who went from N900 to Firefox's phone to a $20 Android stuck on 8 that I've never hooked to the Google Play store because I don't have (and have never had) a "Google Account," only F-Droid - a phone that I refuse to browse the internet on or connect to my email (I don't have any social media except HN.) It is nothing to brag about, it is stubbornness. It does not move the needle in any way, and I would not have to make an excuse for not doing it, especially to you.
Anyway, I don't use coreboot, don't have a Linux phone anymore, and accept binary blobs in some of my packages, so am I really doing anything?
There's nothing more annoying than this purist faux-radical attitude I hear from people so much dirtier than I am. Are you sure you're not using Apple just so you can lecture people who do? Is that the real sin that Android is committing by closing up and becoming indistinguishable from Apple on policy?
Nobody will cry for a second about you not using Apple or Android except for you. The only way to stop this is through regulation.
- early adopter
- trend setter
- tastemaker
- that one family member who understands tech so everyone else in the family goes to them for tech advice
In other words, yes "savvy" users are a minority ... but they influence many more users.
Connecting the world via the web was always gonna result in unbreakable monopolies. We screwed ourselves and, honestly, there’s no way back now.
This issue was on the ballot and will be again.
There is a legal, political, informational and economic system in place guaranteeing that those who have real power (big tech, finance, military-industrial compelx, etc) can not have that power challenged through the regular means that, formally, do exist to keep them in check. They are able to circumvent and rewrite rules, to manipulate public discourse and elections through lobbying, traditional media and the algorithm.
This system could only be broken through a very radical change akin to a revolution, I think.
I do not use proprietary software at all to live my life.
There are a few problems here. For example a huge number of stores and parking lots correlate how you show up to what you buy. So if you come in your car it doesn't matter if you use cash or not, your purchase can still be identified to your vehicle ID.
There are all your friend, well if you have any, that create a you shaped profile in their data.
There is also a U shaped hole in your actions that shows up pretty well depending on how many people around you use cards.
At the end of the day you're probably on more watchlists because you're an outlier.
You seem obsessed with conformity and your arguments read as "Just stop being weird!"
I have a family, active social life hanging out at events or with friends weekly. I travel the world often, been to 6 countries in the last year. I am also a serial tech founder, and security researcher with piles of finds that impact nearly every fortune 500 company.
If anything I live a much more active and successful life than most of my haters, and I do not need to agree to the terms of service of any corpo-tech to do any of it.
People should make decisions based on personal conviction, not crowd conformity.
I think you're wrong, but even if you're right, why wouldn't you vote with your wallet anyway?
You alone might not hurt Apple much, but it could certainly help whatever upstart competitor you choose to support.
The local inference threshold has been crossed already. Its possible to achieve big model like performance through agent harnesses with local models.
If Murican lobbying/corruption tries to snuff AI that threatens the Hutt cartels, China will accelerate it.
Easier said than done. Because, "Apple can do no wrong" is the general public perception. Look at any wrongdoing by Apple - whether they were caught slowing down the phones, degrading cameras on purpose or even the lawsuit where they were caught spying on people's voice recordings. There will always be some NPC defending them as if the billion dollar corporation gives a shit about them.
That or "Apple is the only pro-privacy company in the world" despite there being an active lawsuit against them for the exact opposite.
So, I say: Vote with your wallet. Fuck them...and the fanboys.
What's this about? I can't find anything, except some random Reddit posts.
I don't expect that to happen, but I do expect Apple et al to spend trillions of tokens hardening their platforms against users and red-teaming to find these sorts of holes before release.
The loss of your purchase is insignificant compared to the money Apple and Google make from their walled gardens.
Plus what other viable options are there in this duopoly?
Apparently there’s a popular 3rd option in Asia but is there any support for western apps? And how are you going to convince a million other people to switch?
But what are the options?
If that would work, I'd be writing this on my iPhone Mini.
These clearly anti-consumer practices should just be illegal.
Last I heard even EU policy was ways off of that target.
Also: EU policy is very shcceptible to political tides. Sure now we love to scream sovereignty from the rooftops but that is guaranteed to change eventually.
They operate the factories manufacturing the phones. They have total say about their phones, and you have no say. Your almighty powers within the Linux terminal doesn't extend beyond it.
Just like Apple with their products, the table manufacturer decides the exact measurements and materials of the table. You vote with your wallet and purchase the product you prefer, or make your own if you are capable.
Come on. You know very well what we're talking about. This whole discussion started about software. Can I can load any app I want? Can I remove any app I want? I can remove their ads from my phone?
No of course not. I can put my app on my phone only if they bless it. I can't sell an app to another iPhone user and have them use it without apple's blessing. I can't remove the ads they keep spamming me for iCloud, or whatever service they release this month.
And please don't tell me it's because I get a license rather than a purchase since that's exactly my point. You wouldn't accept a license agreement for your table, and there would be outrage and major public backlash if any they tried; "Here's your made in china table, you are not allowed to place an American flag on it".
But because it's sprinkled with magic software dust, we have people in comment threads simping for the right of companies to do this to their customers.
Would you buy a Honda Civic and cry that Honda is not permitting you to get the functions you wanted from it? If you have the skills, you can do whatever you want with your car physically and Honda won't stop you. If you don't have the skills, you have to buy a car that suits better your preferences. Whether that's hauling logs, having more horsepower, removing seatbelts, or whatever you like.
Note that earlier this year, a YouTuber did reverse engineer the Coca-Cola formula because nothing was actually stopping someone from doing it, all this time. You could be that guy for iPhones.
> Hacking isn't a human right.
Hacking is such a loaded term for "the right to use the thing I purchased how I see fit".
> Go buy a different phone if you don't like Apple's phones. There are a bunch to choose from.
This is beside the point (and may not always be true). The ability for the manufacturer of a thing I bought and ostensibly own to tell me how to use my property.
It's really not that hard to understand. The fact that it's a computer doesn't change anything.
Running local models is getting -cheaper- every month in spite of rising hardware costs due to intelligence compression innovations like Bonsai2.
I build operating systems for a living using only consumer GPUs at home.
I did actually discover a bug in iOS (related to photos which have failed to sync to icloud for the past four years) by investigating why there were over 23k empty folders in ~/Library/Containers/com.apple.photos.ImageConversionService/Data/tmp/, fwiw.
There are some orders of magnitude more iOS/iPadOS devices than macOS devices.
There's a bunch of ways we could debate ourselves about things Apple would or wouldn't do, but at the end of the day, Apple is going to do whatever is in it's best interest.
The only security risk for apple is a job security risk if the ecosystem lock-in is eroded.
For apple to entertain this idea is to create more problems for themselves in the long run.
If you understand this from my perspective, which is that these actions are motivated by a desire for more control. It begins to make more sense. If you can benefit from increased control, then these unreasonable expectations of security against your customers (held by other customers) are a desirable problem to have as opposed to an increasing burden.
Imagine the same being said of a car manufacturer. "We need to install security measures in place to prevent you from modifiying your car because other people may see that modified versions of our cars exist and that tarnishes our brand somehow".
As long there is no reason to allow companies to exert this control over consumers, it just allows the manufacturer to enforce a total monopoly on the post-market.
As someone who's been jailbreaking since the iPhone 3GS (and held onto a iOS 17.0 device for the longest time), Apple has never bothered to detect jailbreaks and lock people out of iCloud and iMessage.
If anything, it's those sleazy security framework providers that provide jailbreak detection to apps and cause them to either lock people out of accounts and features, or crash entirely.
Some government-mandated audit processes (at least, that's what I understand here in Singapore) also require jailbreak detection.
Not entirely true. It absolutely has in the case of the Hackintosh. In fact many a year ago that’s what inspired me to get my first Mac, because every release of macOS made it harder and harder with custom bootloader and kexts to get around Apple’s active efforts to ensure you couldn’t use those unless you were on an actual Apple device, not just running their OS.
An iOS jailbreak is trying to use an Apple device like a Linux device, with access to the filesystem and private APIs.
A Hackintosh is more like emulating the APIs (and an actual Apple serial number, which I guess they use to gate access to iCloud and iMessage) required to boot and run macOS on an Intel PC.
To be fair, Apple says the same thing about jailbreaking and how it may void warranty.
I bought a fp4 from murena because it is supported by postmarketOS, and the postmarketOS support has kept improving. I think the end goal is to run some sort of convergent linux that is as similar to desktop linux in environment as possible. That removes the requirement to completely re-write all the userspace tools for android.
grapheneOS is a dead end as long as it is android based and google and OEMs that are indifferent to open source plight lead android development. A very well written dead-end but a developmental dead end nonetheless.
GrapheneOS developers won't support other platforms because they don't have extensive enough trusted computing "security" features. Trusted computing the nail which seals its own coffin and locks anyone out of running their own OS.
Why is that? Android being open source, GrapheneOS could fork if it became big enough?
> GrapheneOS developers won't support other platforms
Official partnership with Motorola doesn't count as "other platforms" for you?
> "security" features
Your using quotes for "security" probably explains why you're fine with Murena.
> Trusted computing the nail which seals its own coffin and locks anyone out of running their own OS.
I don't understand that. Do you believe GrapheneOS locks you out of your own OS? GrapheneOS is open source, you know that?
Several vendors sell Android devices that allow bootloader unlocking, Pixels being the most known.
Once unlocked, Magisk is the current and most used rooting tool.
The procedure is quite straightforward.
Don't sign into any of Apple services then! Just use it as a pure developer playground or create an alternate ID. Can't be looking for everything everywhere :-)
Does this actually happen? They did not do that in the good old days.
I do know that some apps try to detect jailbreaks and annoyingly refuse to let people log in. Banking and such.
The unregulated market naturally coalesces into oligopolies or monopolies and doesn’t fix issues like this.
There was a glimmer of hope with the DMA but regulators are again asleep, emboldening Google to cripple app installation outside of their store and force developers to enter into a contract with Google to distribute from the developer's own website.
> we gave in to the “ecosystem”
There was a website jailbreakme you simple slid a slider and you were done.
From Wikipedia
August 1, 2010, exploited a vulnerability in the FreeType library used while rendering PDF files.
it is the users who will be in worse position with no real choice, and have to deal with both increasing price and higher risks.
This really blown my mind, and seem the 1/2 video is installed a app by click pdf link?
I guess and hope there will be update from apple quickly
More recently: iPhone Duo Jailbreak vid https://x.com/calif_io/status/2113570095549337977 (https://news.ycombinator.com/item?id=50206680)
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
Then just have a button for turning those on as needed on a case by case basis
One neat thing I've seen is a PDF that will ping an IP catcher when opened in Adobe, regardless of the security level. The same can be done with word docs, excel spreadsheets, and even SVGs.
That isn’t really true, it’s not hard for PDF viewers to block by default (or just not implement) the problematic features, which also aren’t critical for the vast majority of PDF files.
The exploitable bugs are typically the usual, some buffer overflow in an underlying image or font library or similar, but unrelated to PDFs being “executable”.
What do you mean by that?
> Beginning with PDF 1.1, a content stream can include PostScript language fragments. These fragments are used only when printing to a PostScript output device; they have no effect either when viewing the document on-screen or when printing it to a non-PostScript device. In addition, applications that understand PDF are unlikely to be able to interpret the PostScript fragments. Hence, this capability should be used with extreme caution and only if there is no other way to achieve the same result. Inappropriate use of PostScript XObjects can cause PDF files to print incorrectly.
> Note: Since PDF 1.4 encompasses all of the Adobe imaging model features of the PostScript language, there is no longer any reason to use PostScript XObjects. This feature is likely to be removed from PDF in a future version.
I don't think Apple's PDF renderer supports e.g. running JS, you'd need real Acrobat for that. Or are you talking about something else?
> they support decoding images which themselves have their own custom compressors that are also basically code themselves.
But this is fundamentally true for anything that displays images, right? Or are the PDF formats particularly bad for some reason?
Most people have some understanding that shady websites can give you malware, a drive-by exploit is pretty rare but it's good that most people think just visiting a site could infect your computer. But a PDF is just a document, right? Just thinking that a PDF is just words on a page is exactly why it's such an insidious threat. Or they'll get a PDF as an email attachment, see that it's not an exe or something weird, and open it because they think a document is safe.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
hell wasn't it what caused that Saudi journalist to get killed in the Saudi embasssy cz Israeli's sold the software to Saudis ?
We've also been working with closely with the Signal Foundation to help them reduce the attack surface.
It's not true that we don't want to make devices more secure. We do and it's why we do this research.
We also do want our name out there because we're having a lot of fun and want to share that with our friends and the rest of the world.
We're gonna publish more in the coming weeks. Writing these blog posts take time, and we've been busy with another PHP thing.
oh man...
The second video, the person who's shooting the video has his face mirrored onto the screen, anonymity is gone.
https://www.commerce.gov/news/press-releases/2021/11/commerc...
https://www.amnesty.org/en/latest/news/2025/05/ruling-agains...
I for one have experienced multiple lifetimes worth of internet madness and will be looking to airgap / disconnect as many devices as I can get away with.
Even of that were possible in the abstract, it would also have to be secure when running on hardware. I personally don’t believe that perfect security can exist or that we will reach that ideal of somehow being ahead of the curve. Patches will get better and faster, so will exploits. The stakes will grow. There will always be a human or budget issue.
The only way I see to mitigate the impact is to reduce our reliance on connected systems.
Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.
They can still hack your mind with ads.
Decade of people's purchases has been invested into safety and security. It's absolutely unthinkable that a $7t market cap company with an army of 200k workers will ever leave people high and dry. They proudly went public, so we know they have the public's interests at heart.
God I hope this is sarcasm.
Also, if reachability bothers you like it does me, you can disable it.
So stupid interface. No discoverability.
Terrible discoverability. I guess the genalpha kids know gestures like this, but stuff like this makes me feel like a boomer.
that's just not how it works at all though is it. Good luck writing the kernel, firmware etc in a completely memory-safe way. And even if that was accomplished, memory safety isn't the only class of vulnerabilities, it's just the most common.
> and the rest are found
If they kept a stable version with no updates or new features *ever*, only security patches, for decades, then maybe that could be possible, yeah. But Apple users aren't exactly the kind of people who would enjoy such stability and security anyways, it comes with the compromise of novelty. Stability and security aren't very fashionable either.
edit: Obviously a "memory-safe way" means no `unsafe` blocks in Rust, too.
edit#2: This is all assuming we don't get true AGI. I hope my assumption is right
Sometimes I wonder if OpenAI and Anthropic and friends have deployed bots on this platform to make propaganda for their products.
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
Absolutely crazy how PDF parsing and image rendering are still exploitable.
1) All parsing of hostile input happens in micro VM's
2) Re-write as fast as possible the core in a memory safe languageJust as a reminder for some folks here: During their WeWorm research in July–September 2026, Calif didn't stop at proving RCE to Tencent—they spent an extra week using AI to build a fully functional, self-propagating zero-click worm across three live phones, triggering temporary account bans from Tencent during testing.
Just last Black hat there was a "glimpse disclosure" that was later followed with proper fixes and details. I gave my AI agent the details that were supposed to be "useless", before the patch was out, and it found the vulnerability in less than an hour.
We shouldn't even enter this game. And with the track record of this specific group, I didn't exactly get the impression that their incentive is to help fix things, but rather to promote their brand while others be damned.
They're of course also doing it for internet kudos, but attracting attention like this will help encourage people to update. Thanks to this article, I'm going to apply the next iOS security update ASAP, and tell everyone I know to do this the same. (hopefully it comes out soon)
I do wish they clearly stated the vulns have had been reported to Apple and when.
>Just as a reminder for some folks here: During their WeWorm research in July–September 2026, Calif didn't stop at proving RCE to Tencent—they spent an extra week using AI to build a fully functional, self-propagating zero-click worm across three live phones, triggering temporary account bans from Tencent during testing.
Not sure what exactly your point is. The WeWorm demo was done in a controlled environment.
Also we do this for free. We don't charge neither Tencent nor Apple. We don't even take their bounties. Why can't we have some fun?
If you're so upset about how we do it, my suggestion is go find your own bugs.
As for your suggestion, I was an infosec researcher, I worked for 3 years with vendors to help them patch before I can even tweet anything about my research. I even flew to their HQ to assist in patching when needed. After Covid I transitioned to a development role, and now I'm on the other end, handling security reports from researchers.
Based on this dual point of view, let me tell you that for a security engineer in Apple that will learn from your video about vuln your company did not even disclose yet, this karma harvesting is as far from "coordinated disclosure" as possible. Their managers will be fuming, and the stress they will be in given the media frenzy will be off the charts.
When they hacked the M5 (one week after release!), they used a data-only attack, which is outside the scope of MIE. That could be the case here, or something else entirely. We don't know.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
Which would make sense because these attacks seem to exploit the same weakness.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
Hope you understand the difference.
This "there will be literally no difference between apple and Google in 70 days" is great propaganda for Apple.
But, hey, when we interview them for a job lets be sure to spend 2 weeks sending them take home projects, reverse a string on the white board, reject them and talk about how they can't code, right? /rant
Seriously, California has a cathedral problem, may the vault dweller succeed.
I think we have a right to know.
Second fuck Apple. Fuck all tech companies. And seriously fuck late stage capitalism. Foss or nothing. There should be a rule if you pay for it it has to be foss. This way people can still make proprietary but they just can’t charge for it.
We have zero privacy, zero security, all our politicians and all the corporations are against us.
Media parsing is an endless exploit vector. Like fuck. At some point you have to be like they (not just Apple) keep it broken
An yea I know foss gets these issues too. But if the only option was foss, then at least the whole world’s focus would be on it
god fucking damn it, they really turned hackers into exactly what they wanted.
one can't help but manically lough at the ridiculous deformed minds of these people.
and it feeds corporations in such a perfect manner. if you don't want to be at the whims of disgusting private people that constantly escape law enforcement, all you can do is join a corpo and their VPNs so you have an admin team with faces and names that you can rely on and who know you do your part in the company. law enforcement is fucking worthless. I can't believe this. staying anonymous all the time, never letting any normal people with normal lives know when they are in danger or being watched.
god fucking damn it, these fucking lying lefty fucking fucks