Update as of September 3, 2021: Previously we announced plans for features intended to help protect children from predators who use communication tools to recruit and exploit them and to help limit the spread of Child Sexual Abuse Material. Based on feedback from customers, advocacy groups, researchers, and others, we have decided to take additionalweiterlesen

„9 Monate, nicht 3 Monate“, wie er selbst korrigiert. Die Aussage ändert es nicht. Es ist das gerne gespielte Spiel: „Wir geben Tims Geld aus!“ Apple könnte tatsächlich Sicherheitsforscher mit Geld überschütten und damit den Exploit-Handel grundlegend eindämmen. Exploit-Broker, wie die NSO Group, würden höhere Bug-Bounty-Prämien plus eine unkomplizierte (!) Abwicklung das Wasser abgraben. Ganzweiterlesen

Google’s post, issued six months after iOS patches were released, creates the false impression of “mass exploitation” to “monitor the private activities of entire populations in real time,” stoking fear among all iPhone users that their devices had been compromised. This was never the case. Second, all evidence indicates that these website attacks were onlyweiterlesen

Apple äußert sich in einem PR-Statement zu den Bedenken über den (zu freizügigen) Umgang mit iOS-Nutzerdaten von Sicherheitsforscher Jonathan Zdziarski. „We have designed iOS so that its diagnostic functions do not compromise user privacy and security, but still provides needed information to enterprise IT departments, developers and Apple for troubleshooting technical issues,“ Apple told iMore.weiterlesen

Braden Thomas schlüsselt die technischen Einzelheiten zum gestern veröffentlichten Jailbreak evasi0n auf. Evasi0n is interesting because it escalates privileges and has full access to the system partition all without any memory corruption. It does this by exploiting the /var/db/timezone vulnerability to gain access to the root user’s launchd socket. via Accuvant LABS Blog Das letzteweiterlesen