254
0-Day Remote iPhone Full Access Being Abused, Update Immediately
(citizenlab.ca)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 08 Sep 2023
254 points (98.8% liked)
Privacy
31609 readers
512 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Couldn't think of a better title, TL;DR via receiving an iMessage with a specially crafted image, an attacker can get full access to your device. Update iOS immediately to resolve the issue
PSA: Android just published a patch for a very similar vulnerability in their September Security release. You should update your Android devices ASAP.
Which CVE is that and where can i read a description of how this vulnerability is being used?
CVE-2023-35674 No real details published yet but Google discussed it in their September security bulletin.
Get off that high horse.
How do you block MMS from unknown senders on iOS?
Settings > Messages > SMS/MMS > MMS Messaging (uncheck)
And/Or
Message Filtering > Filter Unknown Senders (checked)
Those seem to be the likely options, but I’ve zero idea if those will work.
at this point most iphone users are very much used to reicive images within imessage and have already forgotten that mms existed or are too young to actually ever had to deal with it, so to them it's just yet another picture.
lol, even if people went through to change their defaults, why would they expect an image to be able to hijack their device?
There’s so many automated things on smart phones nowadays, should we disable everything to ensure avoiding future exploits?
They would expect an image to hijack their device because they've been warned about downloading attachments in basically every Internet safety anything. We should disable things like nfc and other security vulnerabilities when not in use, it doesn't take a genius to figure out which can be dangerous.
I'd never get random dick pictures that way though.