this post was submitted on 30 Dec 2023
104 points (76.0% liked)

Technology

59385 readers
932 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s@lemmy.world
L3s@fry.gs
L4s@fry.gs
L4s@lemmy.world
enu@lemmy.world
104
They Found The iPhone Backdoor (odysee.com)
submitted 10 months ago by PoseidonsWake@lemmy.world to c/technology@lemmy.world
17 comments fedilink hide all child comments
 

In this video he discusses the TriangleDB attack chain that allowed hackers to completely compromise iPhones starting with a zero click exploit and ending with a bypass of Apples hardware based memory protection.

Read more about it from Kaspersky: https://securelist.com/triangledb-triangulation-implant/110050/

top 17 comments
sorted by: hot top controversial new old
[–] solrize@lemmy.world 75 points 10 months ago (3 children)

This is an astonishing attack but it has been all over the tech news already and is explained pretty well in the securelist post. I don't have any desire to watch a video.

[–] ElderReflections@kbin.social 61 points 10 months ago

To summarise the video for you: "Yada, yada, yada... there's a blog post that covers this better, you should check it out"

[–] poopkins@lemmy.world 0 points 10 months ago

The video doesn't go into the technical details about TriangleDB; that is left as a reference to the securelist article. Instead, the video discusses the background of the exploit, what has been done by others, what has been done since, and calls out some curiosities about the perpetrators.

I found the video to be a great summary and quite insightful.

[–] TCB13@lemmy.world 33 points 10 months ago

So… can we now have decent untethered jailbreaks again?

[–] jet@hackertalks.com 6 points 10 months ago

Thank you for the video summary. That's very helpful

[–] narc0tic_bird@lemm.ee 4 points 10 months ago (1 children)

For those wondering: multiple security flaws that this actively exploited were fixed in iOS 16.5.1 and 17.

[–] tsonfeir@lemm.ee 1 points 10 months ago

Stay updated. Reboot daily.

[–] jet@hackertalks.com 1 points 10 months ago (1 children)

A... They found A iphone backdoor. There are others as surely as there are faults with all complicated systems.

[–] vrighter@discuss.tchncs.de 6 points 10 months ago (1 children)

you're talking about bugs, not backdoors. A backdoor is something intentional

[–] jet@hackertalks.com 7 points 10 months ago

The distinction between an accidental bug, and the deliberate back door with plausible deniability is minuscule.

Unless you find the smoking gun document stating the reason for the code being written this way, there's always going to be deniability, it's always going to be pointed out as a bug.

But I think it's immaterial, even if every back door starts off as a genuine bug, code is so large and complex that there's going to be back doors to be harvested. And cataloged. And kept in reserve for advanced persistent threat actors