It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-(
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware…
I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
> I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated.
Several vendors sell Android devices that allow bootloader unlocking, Pixels being the most known.
Once unlocked, Magisk is the current and most used rooting tool.
Oh man, those early days of XDA forums and SenseUI roms on my NexusOne. Those were truly a thing of beauty. We still haven't gotten back to that level. I'm with you though, I stopped playing and moved to a stock device. Then I moved back to an iPhone and have been completely stock ever since. I haven't been excited about an iPhone since the 10 released. After that I think, "oh cool, another rectangle". "A grid of icons"... "The best camera Apple's ever put in a phone.... how wonderful".
> Apple is too big for that. Hard regulation is the only way out
Apple is not 'too big' for savvy customers to choose differently but all the Mag 7 tech companies are too big for regulation to be a 'way out'. They now all have 'Regulatory Compliance' divisions which are about compliance as much as the 'Ministry of Truth' is about truth. Instead they are filled with highly-paid former regulators, lobbyists and lawyers who use their inside knowledge to avoid, skirt or nullify regulatory impact.
Company strategies are now purposely designed at conception to be almost impossibly difficult to prosecute or enforce. It's been working so well over the last decade that when the size of the prize is big enough, mega-tech corps are increasingly willing to just overtly violate regulations knowing they can fight in court for years until the govt settles for a reduced fine that's less than the profit already made.
I'm blind. Apple has explicitly said they wouldn't consider the "bloody ROI" of accessibility (will fund it no matter what). This is important to me. Software freedom is also important to me. What am I to do?
Perhaps what allows Apple is to be better at certain things like that or security for average consumer is indeed at odds with some aspirations? At least in practice, not utopian dreams, that seems to be the case.
So you vote with your wallet for accessibility despite freedom and the rest if hacker news do the opposite and it all works itself out.
You grab an Android phone anyways because Android accessibility is very much on par or even better than whatever slop Apple is putting out with VoiceOver these days, and developers also somewhat care about it more on Android.
You're also going to benefit from European mandates to have accessible mobile apps anyways, it's coming for free to you.
> You're also going to benefit from European mandates to have accessible mobile apps anyways, it's coming for free to you.
Not true, the EU tried to become a regulatory superpower and largely failed to export its rules to the rest of the world. Instead, Apple and Google just aren't bringing new features to the EU anymore.
What banking business? Use a web browser, or just bank in person like everyone did not long ago. Carry a credit card instead of Apple/Google Pay. That's what degoogled Android users do and it's a very minor inconvenience anyone with a little bit of maturity should be able to accept. Also, cash is much better for your privacy.
And if you require a one-time SMS code for purchase (which can be adjusted via their website, most likely), then you still have an option that is not Apple and Google. I use a dumbphone for "banking" (SMS)... and a credit card, and the website. Those are really all the 3 things I need to do banking, as you have said so correctly.
vote with your wallet here is to make a new phone company that uses only these user owned devices.
its not particularly feasible to do for the end customer, similar to trying to buy EVs in the US when the upstream dealer decides whata available for you.
vote with your wallet is for the ultra-wealthy.
the rest of us can vote with our votes instead, and get much better results
> the rest of us can vote with our votes instead, and get much better results
Not sure where you live or what votes you are making, but "much better results" is hardly what I've seen or expect from US politics, politicians, and the uber wealthy that run the corporations that dominate many of the most important aspects of our daily lives.
Yeah, I don't understand the parent comment, buying EV's in the US is even easier than ICE vehicles in most states. Now if they are talking about BYD being blocked in the US, so access to extremely cheap EVs, much of Europe is doing the same thing.
Yes, I can vote with my wallet, but no, it doesn't make a difference. I've been voting with my wallet since day 1 by never buying an iPhone because of how closed it is, and unsurprisingly, this has done absolutely nothing to change how open the iPhone is.
You and I have very different definitions of "take away".
I also think you might benefit from rereading the context here; someone said that government regulation is needed to make the iPhone ecosystem open, and someone else disagreed on the basis that voting with one's wallet is a viable alternative. I disagreed with that disagreement, arguing that voting with one's wallet doesn't produce the change that the original commenter said regulation was needed for; telling me "that's not what voting with your wallet does" is redundant, because that's literally what I was already saying. You're certainly entitled to disagree with my opinion that making the ecosystem more open is a desirable goal, but that's not a premise I introduced here, so if disagreeing with that is your intention, it's unclear to me why you picked out my comment as the one to express that when the original statement of that goal was several parent comments up from mine.
It's not redundant and he isn't disagreeing with your opinion about openness. He's saying that it's immoral to want to force your personal preferences about phone design on other people.
Buying a phone you like? Moral.
Trying to force every phone to be one you like? Immoral.
That's all it's about. Not a difference in definitions or confusing on his part, he's just saying you've got morality all wrong and need to reconsider your position.
Again, my comment that he responded to literally was just making a claim that the iPhone ecosystem is not going to become more open due to voting with one's wallet. Yes, I obviously also think it should be more open, and that's an opinion that someone can strongly disagree with, but that's not what I was saying in the comment he responded to, because whether an action is moral or not is irrelevant to the question of whether it would produce a certain effect.
My point in the comment you responded to is that if person A says "we need to eat more vegetables to be healthy", person B says "no, you will be healthy if you only eat meat", and person C says "I tried only eating meat and I was unhealthy, so I think that's evidence that meat alone might not make you healthy", it's a non-sequitur to respond to person C by saying "it's immoral for you to say someone else should eat vegetables". If you responded to person A saying that, it wouldn't be as weird, but to remain silent when person A and B are debating the health effects of vegetables but then suddenly take issue with person C trying to provide evidence about whether the claims for A and B are correct or when they didn't introduce the topic that you have moral opinions on is very weird.
If you did that then you probably made clear your reasons which probably created mindshare with others which probably has helped the EU open up the iPhone. Don’t be so defeatist because the outcome isn’t immediately apparent.
I'm not being defeatist; I'm pretty much arguing for what you're saying, which is that I think government intervention is needed. The parent comment I was responding to said that regulation isn't needed because voting with our wallets is sufficient, and I was disagreeing.
Convincing people to vote with their wallets is much easier than convincing them to write their pols to make laws. The latter is much harder while the former allows a message to be spread. Should people do both? Yes.
Sure, I just don't see how you read my comments as inconsistent with that viewpoint though. Literally the only point I was trying to make was that when a parent comment said regulation is necessary, and someone responded "No it's not. You can vote with your wallet right now.", I thought that was a very weak counterargument to the idea that we needed regulation.
The responses to my rebuttal are honestly confusing to me; one person seems to think that I'm arguing against voting with your wallet (which seems bizarre, given that my comment was literally saying that's something I actively do), one person seems to think I introduced the idea that Apple should have a more open ecosystem to the conversation rather than inheriting it as a premise from the grandparent comment, and one person upvoted my comment. I have absolutely no clue how three different people managed to read something completely different from my comment when the context and content seems clear to me, but I guess I'm missing something here because the point that I thought would be apparent is not consistently being understood.
Pixel phones have an unlocked bootloader. One can load GrapheneOS onto those phones without needing to jailbreak them.
Even without flashing a new OS, one can install third party app stores (e.g. F-Droid) with open source apps and/or side-load modified versions of those apps.
There is no "viable third platform" because people don't vote against the two existing ones with their wallets.
Can you name an example where a government succeeded in breaking up a monopoly, and the result was better for consumers? AT&T, IBM, and Microsoft were all "broken up", but it didn't make a difference for consumers. In every case, a competitor forced them to change their ways.
I mean, breaking up Standard Oil wasn't exactly great for consumers either. And those companies eventually re-merged anyways. But ole Rockefeller sure did make out well due to the breakup.
Since part of what I'm purposely purchasing from Google or Apple is a more secure by default system I'm probably the wrong person to ask. My wallet vote is effectively for something different than yours.
Not that many. The differences are trivial and 99%+ of people don't care, not even on forums like HN. But... how is that relevant? If you have very niche tastes then it'll be harder for you to satisfy them, whether that be in art, music or tech. Go more mainstream and you'll have plenty of options. The free market can deliver, you just may not like the level of effort the size of your market justifies.
Yesno. Not fully because a functionality is not enabled yet.
It wouldn't be advised to buy the latest pixel now anyway, either get the previous one or wait a few months for Motorola Signature 27, where GrapheneOS will be first party OS, and not hated-by-the-vendor bolt-on.
If you insist on the latest pixel, go check the GrapheneOS discussion forum for all the details.
If only the Motorola Signature 27 had a headphone jack, so that I could listen to high quality music with my quality headphones.
Instead I have to buy the shitiest locked full of crapware android phone and hack it with an LLM to make it usable because apparently that's what I deserve for wanting a headphone jack.
True. But so long as only 1% of people care enough to do this, and they can make >1% more profit per customer with their crap - then it's more profitable for them to continue the crap.
Many things are stopping you. I see this response all the time as a counter to inappropriate behavior by monopolistic giant entities.
It's the wrong way of thinking about the problem. The whole point is that they've gained too much market power for any individual to be able to stop them meaningfully, and that collective action using the power of government is the only way.
Any argument that tries to talk people out of that is on the same side as the tech oligarchs, in my opinion.
I don't personally want them to stop. I like what they produce and how they produce it. As long as there are enough people like me there will be a market for this.
Voting with your wallet doesn’t mean stopping them. That isn’t what it is about. You shouldn’t get to choose to stop them because you don’t like their actions any more than I should be able to choose banning you from carriers because I don’t like your choices.
Yes, some of us simply don't give a damn. I'll continue buying Apple products because they work and I don't have to do much of anything to keep them working. Just because I like tinkering or customizing other computers/devices, doesn't mean I want to be a sysadmin to my phone lol
I’ll vote with my vote thank you. My table’s manufacturer shouldn’t get a say in what I put on my table, and Apple shouldn’t get a say about my phone either.
These clearly anti-consumer practices should just be illegal.
Last I heard even EU policy was ways off of that target.
Also: EU policy is very shcceptible to political tides. Sure now we love to scream sovereignty from the rooftops but that is guaranteed to change eventually.
The loss of your purchase is insignificant compared to the money Apple and Google make from their walled gardens.
Plus what other viable options are there in this duopoly?
Apparently there’s a popular 3rd option in Asia but is there any support for western apps? And how are you going to convince a million other people to switch?
Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive
I don't expect that to happen, but I do expect Apple et al to spend trillions of tokens hardening their platforms against users and red-teaming to find these sorts of holes before release.
Easier said than done. Because, "Apple can do no wrong" is the general public perception. Look at any wrongdoing by Apple - whether they were caught slowing down the phones, degrading cameras on purpose or even the lawsuit where they were caught spying on people's voice recordings. There will always be some NPC defending them as if the billion dollar corporation gives a shit about them.
That or "Apple is the only pro-privacy company in the world" despite there being an active lawsuit against them for the exact opposite.
So, I say: Vote with your wallet. Fuck them...and the fanboys.
This. The only mainstream alternative is Android, and I'm already "voting with my wallet" against Samsung, Google, and the rest for violating user privacy even more than Apple does.
How are running local ones going to become cost prohibitive? Indications are that Nvidia has been channel stuffing (artificially inflating perceived demand), which suggests massive oversupply of GPUs.
> even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such.
As someone who's been jailbreaking since the iPhone 3GS (and held onto a iOS 17.0 device for the longest time), Apple has never bothered to detect jailbreaks and lock people out of iCloud and iMessage.
If anything, it's those sleazy security framework providers that provide jailbreak detection to apps and cause them to either lock people out of accounts and features, or crash entirely.
Some government-mandated audit processes (at least, that's what I understand here in Singapore) also require jailbreak detection.
> Apple has never bothered to detect jailbreaks and lock people out of iCloud and iMessage.
Not entirely true. It absolutely has in the case of the Hackintosh. In fact many a year ago that’s what inspired me to get my first Mac, because every release of macOS made it harder and harder with custom bootloader and kexts to get around Apple’s active efforts to ensure you couldn’t use those unless you were on an actual Apple device, not just running their OS.
> even if I jailbreak my iOS and never let it update.
Two things:
a) Why the would you never want to update an OS in this day and age ?
b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:
- Increasing volumes of increasingly sneaky security exploits on one side
- A phone with your 2FA apps, your banking apps, your email apps, your kids photos on the other
Frankly. I want Apple to lock down my iPhone as much as possible in that context.
If I want to be root, I can do so on my desktop or a cloud VM or whatever.
But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.
> a) Why the would you never want to update an OS in this day and age ?
Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.
> Maybe your phone doesn't have banking and stuff on it
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
We gave in because open source and hobbiests do not design good products and even worse shared systems, as much as they enjoy self-righteously declaring their values. And shared systems require trust, planning, and goal setting in a way no open system would ever build.
1) They of course lack the resources
2) Often lack professional displince across all skills required
3) Mostly make for themslves or whats interesting, not whats needed.
This seems more correlated with big vs. small organizations, not closed vs. open organizations. There are open projects (e.g., Debian, Blender) that tick all four of your boxes in my opinion.
You do understand the reasons right? iCloud, iMessages etc are an interplay of software in your device, software in cloud and some networking. They have to work together. A jailbroken phone can have a tinkered iMessage app. Supporting tinkered / unsupported versions is more overhead / possible security risk. Why would you expect them to take on that?
I agree with your point, though I can easily modify ~/Library/Messages/Attachments or ~/Library/Containers/com.apple.MobileSMS/Data on macOS, which is a platform similarly secure to an iPhone when you take sandboxing, sip, etc. into account. So Apple already supports macOS, which can be tinkered, no? I guess the argument is that by locking down iOS, a platform which was never open, they just never needed to handle that class of security risks which are introduced when customers have more freedom.
I did actually discover a bug in iOS (related to photos which have failed to sync to icloud for the past four years) by investigating why there were over 23k empty folders in ~/Library/Containers/com.apple.photos.ImageConversionService/Data/tmp/, fwiw.
You're right, but I could see Apple acting on iOS alone, just because of scale.
There are some orders of magnitude more iOS/iPadOS devices than macOS devices.
There's a bunch of ways we could debate ourselves about things Apple would or wouldn't do, but at the end of the day, Apple is going to do whatever is in it's best interest.
It does not make sense for someone to lose faith in apple because someone else was able to run a modified imessage app.
For apple to entertain this idea is to create more problems for themselves in the long run.
If you understand this from my perspective, which is that these actions are motivated by a desire for more control. It begins to make more sense. If you can benefit from increased control, then these unreasonable expectations of security against your customers (held by other customers) are a desirable problem to have as opposed to an increasing burden.
Imagine the same being said of a car manufacturer. "We need to install security measures in place to prevent you from modifiying your car because other people may see that modified versions of our cars exist and that tarnishes our brand somehow".
As long there is no reason to allow companies to exert this control over consumers, it just allows the manufacturer to enforce a total monopoly on the post-market.
Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness.
These are still 1-click, not zero click. So the best protection you can have is not opening unknown files that were sent to you. That being said, lockdown mode blocks all sorts of message attachments. From the videos it look like they are using pdfs in the messaging vector, which would get blocked too. So you would be safe-ish. But lockdown mode is so restrictive that it doesn't really make sense for most users. Or at least it doesn't make sense to buy a $1500 phone and then limit yourself to something you could have gotten for $50.
You don’t know what lockdown is do you? I’ve had my phone in lockdown for a year. I can’t: collaborate on notes, and it does not automatically open links in chat. Other than that my experience is identical to non lockdown.
some sites don't work (you can explicitly whitelist them tho) but generally it's been fine. i would honestly prefer a phone that doesn't allow any comms to any non-contact list parties at this point.
I wouldn’t do that lol. Send the url to menu. Not a hard problem to figure out. Sending pdfs as attachments is boomer level lack of understanding of technology.
I use Lockdown Mode and the functionality I get is nothing like a $50 device. If you're being serious can you link to some $50 devices for sale that are on par with a recent iPhone Pro running in Lockdown Mode?
My favourite part from the first video is how much effort it took to drag up from the bottom of the screen to get back to the home-screen. This reflects my experience with how iOS handles touch gestures in general.. also super easy to accidentally activate "Reachability" mode!
You say this, but have you tried an old iPhone recently? I did, and it was actually pretty terrible. The quick little swipes to switch between apps is so much more natural now.
It might not be a magic security wand, but so many critical vulnerabilities in software trace their origins to memory unsafe code and things like "use after free".
"~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues" - Microsoft [1]
"We adopted Rust for its security and are seeing a 1000x reduction in memory safety vulnerability density compared to Android’s C and C++ code." - Google on Android [2]
If I were Google I'd try to rewrite Chromium in Rust. The FFMPEG folks should try porting the whole codebase to Rust too. They can always keep the legacy versions for legacy computers (my old n270 netbook can barely play 720p@30FPS anyway, and it's too slow to downsize 4k video to 720 or 480p...), so a bigger amd64 machine will always be -reallistically- needed for anything else than <=720p consumption.
It cuts down most of the crap trying to trash your machine's RAM (virtual memory in the end, but today it's almost as if you didn't have a MMU). It's good enough.
On less powerful machines, dear Mutt+isync+msmtp users like me, please use AERC (written in Go) against these. It's slower, but far more secure than C.
Also, SLRN needs a Go rewritten clone (able to point to slrn's caché) like nothing else. Comp.misc and comp.arch still are extremely valuable.
LLM and full rewrite are a recipe for cooking something that still has flaws but also doesn't work that well. The root cause is that PDF is an old format from a more innocent era. A new document standard that keeps up with the technical and security advances, learns about the lessons PDF taught us, and allows for easy conversion from old PDFs, would be the ideal solution.
Who am I kidding, I think the PDF format will outlive us.
Subverting the secure boot/upgrade chain would require a SecureROM exploit and presumably a compromise of the Secure Enclave, so the answer is almost certainly "no" (even prior major exploits from recent memory like usbliter8 are tethered and don't exploit the enclave; the last true untethered Jailbreak was iOS 9 or something.) An upgrade would fix it. The internet reporting claims this break they are showing in this video is untethered though, which is extremely rare on its own.
The videos sort of imply that these are userland rather than bootrom, whatever payload they have running is getting hit before first unlock, which isn't a lot of surface. They specifically say to not update which pretty much confirms where the attack surface is. Somewhere after the kernel starts but before the main user space is unlocked with the passcode.
Anything you can find with an LLM to break into a locked device/ecosystem, the operators of that ecosystem can find with an LLM too, and fix it. Right?
Only if it's in updateable software. Hardware takes longer to correct.
Hence Sam Altman's latest public comment: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs."
This is true for things other than LLMs. Outside contributors have been credited with hundreds of security fixes to macOS and iOS that were found with fuzzers and sanitizers. Just off the top of my head CVE-2019-8605. Clearly, Apple has access to AddressSanitizer and libfuzzer, but outsiders still find these things. Not only Apple: Google can find flaws in iOS but outsiders also find flaws in Chrome, so the phenomenon is widespread.
It’s a mix - for years I wanted root on my iPhones, just like you got on android. In practice, once I had it…? I never did much beyond installing Cydia.
With today’s hardware I might have a different take - the 18 has more than enough hardware to be a laptop so maybe I’d use it for a docking mode. But my gut is I’d probably still want a laptop even then.
To me the upshot is : billions of development, software and hardware, have gone into the platforms - it’s hard to quickly make them significantly better.
When I owned an iPod touch, the advantage of jailbreaking was to give your device certain features that the OS just didn't support. (Hell, I remember early days when iOS didn't even have a concept of wallpaper, the background was just black.)
iOS has come a long way since those days so a lot of the most common use cases of the past are no longer necessary. But the principle is the same - the hardware is a general-purpose computer but the software is locked down unnecessarily in many ways. Jailbreaking lets you do things that are outside of Apple's box.
I agree, and, if you have a developer certificate from Apple, the list of wants I have is ... not that long? zero? I'd love to be pitched on it. In practice, I wanted freedom, but didn't really want to do anything with it.
I'm for being able to hack your own device to do whatever you like with it, preferably without active resistance from its manufacturer. I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
The point the parent commenter is making is that they want Apple to allow people the freedom to intentionally mod the functionality of their device. Not that they literally want single-click PDF exploits to be a thing.
> I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
Who is saying this part?
Asking for an open device does not mean supporting malicious hacking of others. This is the single biggest false equivalence used by Apple and the rest of the industry to keep a closed ecosystem and restrict users' control over stuff they paid for. And people continue perpetuating it for some reason.
Nobody said exactly that, but your first comment pointed out how cool the capability is without acknowledging that it is trivial to exploit maliciously.
We're on the same side here. I daily a Pixel with LineageOS and root.
If you phone is hackable by you, what stops someone else from hacking it? Ultimately, it's a trade off between security and openness, and I think it's good that there are choices on both sides.
What in these videos is so much cooler than what you can do on an Apple approved one? Other than, "As a programmer, I can do anything", I just personally don't see any capabilities unlocked that I can't have with an app or whatever. But I might be missing something.
The only thing I really miss from my jailbreak days is an app that could talk to the cellular baseband and display all cell towers nearby on a map and showed which you were using.
I used to have my home screens fully customized but that’s a lot of work creating icons for hundreds of apps. Or even dozens.
I can 100% guarantee that we'll have comments from people saying they buy iPhones specifically because of the walled garden and the last thing they want is a jail broken device. On a website called Hacker News.
I'm glad to confirm your suspicion. I like to have both a walled-garden phone and several open-platform computers. They do two completely different things for me.
To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.
I want the same kind of phone. But I reject the premise that it's impossible to have a deeply nested "De-wall this device yes I know what I am doing yes I confirm I'm about to really open myself to issues if I don't understand the implications" settings option without compromising the walled mode security.
The point is that no one forces you to jailbreak your iPhone. If you like the walled garden - great! Keep using it! But I've been in plenty of discussions where iPhone users are literally against jailbreaks at all and in any form.
I want a device I can give the elderly in my family that they cannot be easily induced into doing insecure things on. If there were an unlockable iPhone and a locked iPhone I want to give them the latter. It’s not enough for me to tell them not to scroll to General and click seven times on About to activate developer mode. I would prefer to just give them a device that can’t do that.
My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
> My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
It is always interesting to me how people equate getting old with becoming dumb. I know there is definitely some age related decline that's inevitable, but if a person has grown up with computers, and maybe more importantly, has had a hacker and curious mindset while younger, it is not likely that they will suddenly become so naive and vulnerable, even when like 80.
What usually happens is that people lose interest in learning new things and keeping up. My own mom (who passed at 73) could never be convinced to use Whatsapp messaging, thinking it is something complicated for the young ones, and yet I currently know people in their mid 70s and even much older who are still as sharp as anything and use all the cool apps.
Earlier today on the thread about the google play store apocalypse I posted a comment saying that I like some things about life in Apple's walled garden. But I still upvoted the parent comment because it's true and it's funny.
Also I'd happily jailbreak my iPhone and put an alternative OS on it to extend its lifespan. I'm a living human with nuanced opinions and I'm allowed to like more than one thing.
I got curious when you mentioned "google play store apocalypse", but I can't seem to find a comment of yours on the topic today. Would you be willing to post a link?
I can root my Android phone and have in the past, but I have absolutely no desire to do so now because it adds almost no functionality in exchange for a very large security risk. I consider rooting my phone in the past quite a foolish move by someone who didn't know better.
People are trading the future of personal computing just so they can run a banking app and justify it with "but I want my phone to be locked down for security." Not even sleepwalking into corporate-controlled-computing, but actively promoting it.
10, 15 years from now the ability to run your own code will be a distant memory unless you constantly subscribe to an annual Developer Account with BigCorp. Oh no, you've coded something that violates the ToS; account terminated.
I converted to an iphone 13 mini (from the S24 Ultra) after being on Android since the release of the HTC Desire in 2010. I used to install custom roms and tweak everything on all of my Android phones which actually lead me to the iphone because I realized I wanted a phone without all the OE clutter and Google crap. The only clutter on the iphone is icloud which stays out of the way and doesn't annoy me with subscription messages. Also I don't have time to fuck around with modifying my phone. I just want everything to work without user intervention.
"No one forces you..." is an interesting line to go down in the comments of an article that focuses on using messaging apps to deliver exploits to a cellphone. It's pretty malware adjacent. Isn't that sort of thing how Jamal Khashoggi and his friends, family, and coworkers were hacked before his murder/execution?
Uhh, what? Clearly nobody is arguing that "arbitrary remote execution is good." Apple could easily satisfy everyone by simply allowing users to unlock their own bootloader.
How would that help anyone? The unlocked bootloader on the Apple Silicon Macbooks still hasn’t resulted in a truly viable alternative to macOS. The iPhone is much, much harder. And why would carriers trust the result?
You’re missing the point. Hackers (in the tinkerer sense) just want to program their own devices, with full access to the capabilities of the underlying hardware. Apple could obviously allow that if they wanted to, in a convenient way that doesn’t increase the attack surface for malware.
Having control over one's device and allowing anything and everything to have free reign on said device are two different things.
I'd love to have more control and customizability that the user can initiate, but random executables shouldn't be able to so much as sneeze without my permission. Third party software (yes, even the FLOSS variety due to issues such as supply chain compromises) must be treated as adversarial by default, anything less is foolishness.
But to jailbreak you need to stay on an older iOS version (because Apple patches the bugs enabling the jailbreaks). And that means you don't get security updates.
I’m fine with a locked down iPhone. All of my financial account credentials are on there, personal photographs, etc. Since I’ve owned an iPhone, I’ve never had a non-working phone. Security and reliability are the two most important items to me when it comes to a phone.
If I want to run arbitrary software, I have a computer. I am unsure why you care if I want a locked down reliable phone.
> people saying they buy iPhones specifically because of the walled garden and the last thing they want is a jail broken device.
I’m not one of those people.
> On a website called Hacker News.
But I still find that unfair. Being a hacker doesn’t mean you want to hack every aspect of your life. I’m perfectly content hacking away on a computer, but I have no desire to hack my toaster and risk burning down my house.
These are the same people that caused this situation. A close platform is only closed until it's busted right open and then everyone is screwed because there were no eyes on it the entire time.
Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
Craziest part is it was never even intended to be a programming language. From the Wikipedia page, the founder Rasmus Lerdorf is quoted as saying:
"I don't know how to stop it [...] there was never any intent to write a programming language [...] I have absolutely no idea how to write a programming language [...] I just kept adding the next logical step on the way."
And 23 years later here we are with php2shell and it powering 70% of the internet’s websites
There are loads of these exploits which exist in the hands of private hacking groups and state organisations which have not been made public. Always assume your device is able to be compromised from those who have the motivation and dedication.
Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone).
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
PDFs are basically executables, that's why it's hard. They support running code, they support decoding images which themselves have their own custom compressors that are basically code. Anything to do with image formats is rife for bad decoders, insane compression algorithms from the 90s, and a PDF is basically 1000 formats inside many different container types with executable code plastered on everywhere. If you want to make a compatible PDF viewer you'll need to be able to implement an image decoder algorithm for a fax machine that was specific to Japan in the late 80s, which was somehow ratified into a standard and is used today by all the top legal firms, or something absurd like that. When you open a PDF on your computer, depending on how it is being parsed, it can even make outbound network connections without you knowing. To safely open a PDF you need one of those bomb proof suits, a disposable laptop, and even then you might be going home without eyebrows.
Willing to bet that a default "treat PDFs/documents/spreadsheets as dumb" option in operating systems would eliminate the majority of common one-click vulnerabilies out there. And exactly 0.001% of actual use cases would be affected.
This is one of the things iOS's Lockdown Mode does. I wish the features of Lockdown Mode were able to be enabled individually instead of a single all or none option.
Your link doesn’t say anything about PDFs. And if I remember correctly it only disables PDF previews in Messages. This means if you have a zero-click exploit now it becomes a one-click exploit. I fail to see how that’s relevant given the article is already demonstrating a one-click exploit.
PDFs are just absurdly complicated in general. Dumbing down the parser might be the right idea. I wonder what consequences that would have with how intertwined PostScript and PDF in general are with macOS/iOS; maybe that's why the PostScript engine was removed with macOS Sonoma/iOS 17? I don't know if that was only user facing behavior and Apple is still working to remove the internal usages.
That's kind of what Adobe does with downloaded PDFs, you have to click the Enable button to turn on more document features. My schematic capture app will output a PDF that has links that will take you to specific spots on a page and also some JavaScript where you can right click on a part and see it's BOM information. None of that stuff works until you click the Enable button. I've also seen some vendors offer not only normal 3D model files and 2D drawings but a PDF that has an interactive 3D model inside. It's kinda cool how much random shit can go into a PDF but it's clearly a massive malware vector.
One neat thing I've seen is a PDF that will ping an IP catcher when opened in Adobe, regardless of the security level. The same can be done with word docs, excel spreadsheets, and even SVGs.
I read it more as "don't implement JS, 3D object rendering, slideshow transitions, sound annotations and the other 999 insane features that I'm not even aware exist"
I think he just means disable any of the "advanced" features mentioned above like accessing web content, running custom scripts, etc etc. You might still be vulnerable to any dependencies they use for image rendering itself but I bet it would make it drastically more safe.
Then just have a button for turning those on as needed on a case by case basis
That isn’t really true, it’s not hard for PDF viewers to block by default (or just not implement) the problematic features, which also aren’t critical for the vast majority of PDF files.
The exploitable bugs are typically the usual, some buffer overflow in an underlying image or font library or similar, but unrelated to PDFs being “executable”.
What a sleight of hand. PDF's are obviously not executable, any more than text files are. Decoders are executable and they can choose to unsafely handle input. Even plain text editors can have exploits. It's no different than any piece of complex software.
The characterization of the PDF format specifically being “basically code” in any substantial manner is simply incorrect. The only PDF-specific features that reasonably meet that description is the PostScript support, which has fallen out of use decades ago and was completely removed in PDF 2.0, and the JavaScript support, which is optional, prohibited in PDF/A, and can easily be limited or omitted by a PDF viewer.
Yeah a lot of those fancy PDF features are Adobe-only. It's not that other apps can't support those features, it's that no one in their right mind wants to spend endless amounts of money and time trying to sandbox it.
Most people have some understanding that shady websites can give you malware, a drive-by exploit is pretty rare but it's good that most people think just visiting a site could infect your computer. But a PDF is just a document, right? Just thinking that a PDF is just words on a page is exactly why it's such an insidious threat. Or they'll get a PDF as an email attachment, see that it's not an exe or something weird, and open it because they think a document is safe.
I think it's more the image formats PDF supports? I could be wrong, but there was that forcedentry vulnerability (which was insanely cool, even if really bad)
From the standpoint of a layman it looks like there's a lot of overlap between writing safe web browsers/engines and writing safe PDF readers/engines. There just hasn't been anywhere near as much of an impetus to push PDF readers/engines in that direction because most of us aren't interacting with PDFs nearly as often as we interact with the web (and things built on web tech).
I'm pretty sure not even the safe languages would help you here. PDF allows you to pretty much run arbitrary code since it supports javascript, images, and a bunch of other things I'm forgetting, and you can't not implement javascript support or otherwise be selective about what you support with it because then all the end-users will complain when they get that one PDF that they need to fill out but it needs JS because... Nobody knows.
A reminder for people who don't follow this, Calif is Thai Duong's firm. Thai discovered the BEAST and CRIME TLS attacks (with Juliano Rizzo), and then worked at Google for a bunch of years, including on Wycheproof with Daniel Bleichenbacher. The team at Calif includes lcamtuf, Dion Blazakis, Tavis Ormandy, and Stefan Esser (among many others).
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
It would make me so happy if this would allow running UTM.app with Hypervisor support on iPadOS. I don't want to travel with two devices, the would be enough, but sometimes I need a real desktop. Apple, of course, wants you to buy two devices. I do have UTM with Jit Linux running on my iPad, via altstore and entitlements and so on, but it is all a bit complex and still fairly slow.
I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.
If this continues I'll argue that you have to be absolutely insane to allow network connected electronics into your home in the future. This is Apple, known for locking down their device to the extreme, and yes some people would love to use this for jailbreaking their phones, other organisations want to root your phone for .... other purposes.
Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.
People have been paying a premium to companies like Apple for a reason. You've got nothing to worry about.
Decade of people's purchases has been invested into safety and security. It's absolutely unthinkable that a $7t market cap company with an army of 200k workers will ever leave people high and dry. They proudly went public, so we know they have the public's interests at heart.
There's every incentive for nation states and other espionage outfits to keep these types of exploits under wraps. This has probably been the new normal for some time ..
I for one have experienced multiple lifetimes worth of internet madness and will be looking to airgap / disconnect as many devices as I can get away with.
I think in time (a few years) the gap will close a bit. As AI is used to harden software, it will be harder to break. Software not validated by AI will continue to be vulnerable to it.
So what happens if AI becomes something that you need to actually pay real money for? Then only Apple, Google and Microsoft can affort to do network exposed software. Smaller companies and solo developers are just f-ed if the price of running LLMs goes up as investor money dries up.
> They are going to run out of vulns eventually when the code is rewritten in a memory safe lang
that's just not how it works at all though is it. Good luck writing the kernel, firmware etc in a completely memory-safe way. And even if that was accomplished, memory safety isn't the only class of vulnerabilities, it's just the most common.
> and the rest are found
If they kept a stable version with no updates or new features *ever*, only security patches, for decades, then maybe that could be possible, yeah. But Apple users aren't exactly the kind of people who would enjoy such stability and security anyways, it comes with the compromise of novelty. Stability and security aren't very fashionable either.
edit: Obviously a "memory-safe way" means no `unsafe` blocks in Rust, too.
edit#2: This is all assuming we don't get true AGI. I hope my assumption is right
A couple of PDF exploits from iMessage and Signal leading to code execution, and an app that roots the phone. Also, they seem to have managed to make their malware survive a reboot, which is difficult. That's another reason why automatic reboots are considered a security feature: exploits leaving malware in-memory are a lot easier to build than malware that survives a full reboot, passing all stages of signature checks and validation.
Yes, why don't they just say it instead of posting videos. Opening a sinister PDF in iOS can give them access to what exactly? anything/everything? What iOS versions or devices, etc?
When they hacked the M5 (one week after release!), they used a data-only attack, which is outside the scope of MIE. That could be the case here, or something else entirely. We don't know.
Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
iOS does sandbox their processes really well, that's why this hack was as difficult as it was. The Safari thing you're talking about is JIT - iOS disables all runtime code generation across the system except in Safari (for JavaScript), but this is a completely separate thing from sandboxing.
Actually, no, I now remember this was about iMessage specifically and how it isn't completely isolated/runs as system service or sth? Or about the renderer?
Which would make sense because these attacks seem to exploit the same weakness.
why do we see pdf viewer exploits on ios when we have sandboxing mechanisms nowadays like wasm? Or is this exploit accounting for the sandbox breakage?
This made me miss Cydia and the old jailbreaking days so much. Was such an exciting time to have an iPhone with the tinkering. Anyone still remember iDitDahText https://iditdahtext.com/iDitDahText.html?
Slightly offtopic but I find it slightly funny that they have accomplished to hack the iPhone yet the name of the third video is: Can you iPhone do this?
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
Too bad this will be patched instead of allowing the device owner to control their own device.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
If the current frontier allows for this, we can probably expect alternative models to reach the same spot in a matter of months as well. The cat's out of the bag, for better of worse.
The paradox is that if the models are restricted, more exposed software will exist. I'm not convinced you can make a model that allows you to build secure software without it also being able to build exploits.
My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."
It's better to use 0-day exploits to install legitimate software by now. It saves everyone from a lot of hassle. Or, more realistically for most, make a web app and forget about native apps.
I guess I've never really understood why people who don't like the way the iPhone and apple ecosystem work buy apple products. There are plenty of other options out there. Every time articles about this and the App Store pop up it seems as if the comments are filled with a whole lot of android users that are upset that iPhone's aren't like androids. That's not to say those are all of the comments and there aren't clearly iPhone users who want these options but again, why buy a product that doesn't support these things if they're so important to you in the first place.
It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-(
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware… I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
> I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated.
Several vendors sell Android devices that allow bootloader unlocking, Pixels being the most known.
Once unlocked, Magisk is the current and most used rooting tool.
The procedure is quite straightforward.
https://github.com/topjohnwu/magisk
https://magiskmanager.com/
Oh man, those early days of XDA forums and SenseUI roms on my NexusOne. Those were truly a thing of beauty. We still haven't gotten back to that level. I'm with you though, I stopped playing and moved to a stock device. Then I moved back to an iPhone and have been completely stock ever since. I haven't been excited about an iPhone since the 10 released. After that I think, "oh cool, another rectangle". "A grid of icons"... "The best camera Apple's ever put in a phone.... how wonderful".
Vote with your wallet. Fuck them.
You shouldn’t have to use LLMs to run your software.
Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive.
> Vote with your wallet.
Apple is too big for that. Hard regulation is the only way out right now. Maybe breaking them up too.
> Apple is too big for that. Hard regulation is the only way out
Apple is not 'too big' for savvy customers to choose differently but all the Mag 7 tech companies are too big for regulation to be a 'way out'. They now all have 'Regulatory Compliance' divisions which are about compliance as much as the 'Ministry of Truth' is about truth. Instead they are filled with highly-paid former regulators, lobbyists and lawyers who use their inside knowledge to avoid, skirt or nullify regulatory impact.
Company strategies are now purposely designed at conception to be almost impossibly difficult to prosecute or enforce. It's been working so well over the last decade that when the size of the prize is big enough, mega-tech corps are increasingly willing to just overtly violate regulations knowing they can fight in court for years until the govt settles for a reduced fine that's less than the profit already made.
No it's not. You can vote with your wallet right now. Nothing is stopping you.
I'm blind. Apple has explicitly said they wouldn't consider the "bloody ROI" of accessibility (will fund it no matter what). This is important to me. Software freedom is also important to me. What am I to do?
Perhaps what allows Apple is to be better at certain things like that or security for average consumer is indeed at odds with some aspirations? At least in practice, not utopian dreams, that seems to be the case.
So you vote with your wallet for accessibility despite freedom and the rest if hacker news do the opposite and it all works itself out.
You grab an Android phone anyways because Android accessibility is very much on par or even better than whatever slop Apple is putting out with VoiceOver these days, and developers also somewhat care about it more on Android.
You're also going to benefit from European mandates to have accessible mobile apps anyways, it's coming for free to you.
Nope - iPhone accessibility is much better than any alternative.
> You're also going to benefit from European mandates to have accessible mobile apps anyways, it's coming for free to you.
Not true, the EU tried to become a regulatory superpower and largely failed to export its rules to the rest of the world. Instead, Apple and Google just aren't bringing new features to the EU anymore.
What if I want to vote against both Apple and Google but still be able to do my banking business?
What banking business? Use a web browser, or just bank in person like everyone did not long ago. Carry a credit card instead of Apple/Google Pay. That's what degoogled Android users do and it's a very minor inconvenience anyone with a little bit of maturity should be able to accept. Also, cash is much better for your privacy.
And if you require a one-time SMS code for purchase (which can be adjusted via their website, most likely), then you still have an option that is not Apple and Google. I use a dumbphone for "banking" (SMS)... and a credit card, and the website. Those are really all the 3 things I need to do banking, as you have said so correctly.
It’s not possible. Logging in to a banking website is becoming strictly speaking impossible w/o a phone.
I've never really experienced that. Which banks?
You can bank without Apple iOS/macOS or Google Android/Chrome.
You can also vote with your wallet regarding banking. Put your deposits in another bank.
Use a laptop
When one party has a trillion votes and you have like 1000 or so, that is not voting. That is just exiling yourself.
Edit: exiling not exhaling
Why should your bank trust you?
[dead]
vote with your wallet here is to make a new phone company that uses only these user owned devices.
its not particularly feasible to do for the end customer, similar to trying to buy EVs in the US when the upstream dealer decides whata available for you.
vote with your wallet is for the ultra-wealthy.
the rest of us can vote with our votes instead, and get much better results
> the rest of us can vote with our votes instead, and get much better results
Not sure where you live or what votes you are making, but "much better results" is hardly what I've seen or expect from US politics, politicians, and the uber wealthy that run the corporations that dominate many of the most important aspects of our daily lives.
Target has been losing a lot of money with people deciding to ship elsewhere, it wiry, it just takes a lot of people to get together and do it
> similar to trying to buy EVs in the US
You're kidding right? It seems like every other car around here is a Tesla or some other EV. It's mostly Teslas and trucks really.
Yeah, I don't understand the parent comment, buying EV's in the US is even easier than ICE vehicles in most states. Now if they are talking about BYD being blocked in the US, so access to extremely cheap EVs, much of Europe is doing the same thing.
Yes, I can vote with my wallet, but no, it doesn't make a difference. I've been voting with my wallet since day 1 by never buying an iPhone because of how closed it is, and unsurprisingly, this has done absolutely nothing to change how open the iPhone is.
Voting with your wallet doesn’t mean you get to take away from others. It means choosing companies you want to support.
You and I have very different definitions of "take away".
I also think you might benefit from rereading the context here; someone said that government regulation is needed to make the iPhone ecosystem open, and someone else disagreed on the basis that voting with one's wallet is a viable alternative. I disagreed with that disagreement, arguing that voting with one's wallet doesn't produce the change that the original commenter said regulation was needed for; telling me "that's not what voting with your wallet does" is redundant, because that's literally what I was already saying. You're certainly entitled to disagree with my opinion that making the ecosystem more open is a desirable goal, but that's not a premise I introduced here, so if disagreeing with that is your intention, it's unclear to me why you picked out my comment as the one to express that when the original statement of that goal was several parent comments up from mine.
It's not redundant and he isn't disagreeing with your opinion about openness. He's saying that it's immoral to want to force your personal preferences about phone design on other people.
Buying a phone you like? Moral.
Trying to force every phone to be one you like? Immoral.
That's all it's about. Not a difference in definitions or confusing on his part, he's just saying you've got morality all wrong and need to reconsider your position.
Again, my comment that he responded to literally was just making a claim that the iPhone ecosystem is not going to become more open due to voting with one's wallet. Yes, I obviously also think it should be more open, and that's an opinion that someone can strongly disagree with, but that's not what I was saying in the comment he responded to, because whether an action is moral or not is irrelevant to the question of whether it would produce a certain effect.
My point in the comment you responded to is that if person A says "we need to eat more vegetables to be healthy", person B says "no, you will be healthy if you only eat meat", and person C says "I tried only eating meat and I was unhealthy, so I think that's evidence that meat alone might not make you healthy", it's a non-sequitur to respond to person C by saying "it's immoral for you to say someone else should eat vegetables". If you responded to person A saying that, it wouldn't be as weird, but to remain silent when person A and B are debating the health effects of vegetables but then suddenly take issue with person C trying to provide evidence about whether the claims for A and B are correct or when they didn't introduce the topic that you have moral opinions on is very weird.
If you did that then you probably made clear your reasons which probably created mindshare with others which probably has helped the EU open up the iPhone. Don’t be so defeatist because the outcome isn’t immediately apparent.
I'm not being defeatist; I'm pretty much arguing for what you're saying, which is that I think government intervention is needed. The parent comment I was responding to said that regulation isn't needed because voting with our wallets is sufficient, and I was disagreeing.
Convincing people to vote with their wallets is much easier than convincing them to write their pols to make laws. The latter is much harder while the former allows a message to be spread. Should people do both? Yes.
Sure, I just don't see how you read my comments as inconsistent with that viewpoint though. Literally the only point I was trying to make was that when a parent comment said regulation is necessary, and someone responded "No it's not. You can vote with your wallet right now.", I thought that was a very weak counterargument to the idea that we needed regulation.
The responses to my rebuttal are honestly confusing to me; one person seems to think that I'm arguing against voting with your wallet (which seems bizarre, given that my comment was literally saying that's something I actively do), one person seems to think I introduced the idea that Apple should have a more open ecosystem to the conversation rather than inheriting it as a premise from the grandparent comment, and one person upvoted my comment. I have absolutely no clue how three different people managed to read something completely different from my comment when the context and content seems clear to me, but I guess I'm missing something here because the point that I thought would be apparent is not consistently being understood.
But the alternative is another monopolistic tech giant. There is no viable third platform. So I agree with OP, the answer is breaking them up.
Pixel phones have an unlocked bootloader. One can load GrapheneOS onto those phones without needing to jailbreak them.
Even without flashing a new OS, one can install third party app stores (e.g. F-Droid) with open source apps and/or side-load modified versions of those apps.
> There is no viable third platform.
There is no "viable third platform" because people don't vote against the two existing ones with their wallets.
Can you name an example where a government succeeded in breaking up a monopoly, and the result was better for consumers? AT&T, IBM, and Microsoft were all "broken up", but it didn't make a difference for consumers. In every case, a competitor forced them to change their ways.
Standard Oil.
Also 2 of those 3 companies were famously NOT broken up.
I mean, breaking up Standard Oil wasn't exactly great for consumers either. And those companies eventually re-merged anyways. But ole Rockefeller sure did make out well due to the breakup.
https://en.wikipedia.org/wiki/Collective_action_problem
Serious question: What alternative phones do you suggest? I've tried PinePhone and PinePhone Pro and it was painful.
Since part of what I'm purposely purchasing from Google or Apple is a more secure by default system I'm probably the wrong person to ask. My wallet vote is effectively for something different than yours.
Painful is the price you can choose to pay. Everyone has different priorities.
Yeah, but who is using a pinephone as their daily driver?
Not that many. The differences are trivial and 99%+ of people don't care, not even on forums like HN. But... how is that relevant? If you have very niche tastes then it'll be harder for you to satisfy them, whether that be in art, music or tech. Go more mainstream and you'll have plenty of options. The free market can deliver, you just may not like the level of effort the size of your market justifies.
Google Pixel + GrapheneOS
Isn’t the latest Google Pixel not supported by GrapheneOS?
Yesno. Not fully because a functionality is not enabled yet.
It wouldn't be advised to buy the latest pixel now anyway, either get the previous one or wait a few months for Motorola Signature 27, where GrapheneOS will be first party OS, and not hated-by-the-vendor bolt-on.
If you insist on the latest pixel, go check the GrapheneOS discussion forum for all the details.
If only the Motorola Signature 27 had a headphone jack, so that I could listen to high quality music with my quality headphones.
Instead I have to buy the shitiest locked full of crapware android phone and hack it with an LLM to make it usable because apparently that's what I deserve for wanting a headphone jack.
True. But so long as only 1% of people care enough to do this, and they can make >1% more profit per customer with their crap - then it's more profitable for them to continue the crap.
I think Corey Doctorow has the best retort to this. They want you to vote with your wallet because they have thicker wallets than you.
No. Regulation is the answer. Hopefully everything changes in November. That’s when GTA VI comes out.
Many things are stopping you. I see this response all the time as a counter to inappropriate behavior by monopolistic giant entities.
It's the wrong way of thinking about the problem. The whole point is that they've gained too much market power for any individual to be able to stop them meaningfully, and that collective action using the power of government is the only way.
Any argument that tries to talk people out of that is on the same side as the tech oligarchs, in my opinion.
I don't personally want them to stop. I like what they produce and how they produce it. As long as there are enough people like me there will be a market for this.
Voting with your wallet doesn’t mean stopping them. That isn’t what it is about. You shouldn’t get to choose to stop them because you don’t like their actions any more than I should be able to choose banning you from carriers because I don’t like your choices.
Yes, some of us simply don't give a damn. I'll continue buying Apple products because they work and I don't have to do much of anything to keep them working. Just because I like tinkering or customizing other computers/devices, doesn't mean I want to be a sysadmin to my phone lol
I’ll vote with my vote thank you. My table’s manufacturer shouldn’t get a say in what I put on my table, and Apple shouldn’t get a say about my phone either.
These clearly anti-consumer practices should just be illegal.
Which country does this vote happen in?
Last I heard even EU policy was ways off of that target.
Also: EU policy is very shcceptible to political tides. Sure now we love to scream sovereignty from the rooftops but that is guaranteed to change eventually.
> Vote with your wallet
The loss of your purchase is insignificant compared to the money Apple and Google make from their walled gardens.
Plus what other viable options are there in this duopoly?
Apparently there’s a popular 3rd option in Asia but is there any support for western apps? And how are you going to convince a million other people to switch?
Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive
I don't expect that to happen, but I do expect Apple et al to spend trillions of tokens hardening their platforms against users and red-teaming to find these sorts of holes before release.
Fair point. The megacorps probably are able to outspend pretty much any grassroots mmovement bar maybe a government led one.
> Vote with your wallet
If that would work, I'd be writing this on my iPhone Mini.
What is your current phone?
It did work. You're just a very small minority of users, as are most people here.
There are already open weight models that are quite capable and can use any provider.
>Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive.
The local inference threshold has been crossed already. Its possible to achieve big model like performance through agent harnesses with local models.
> Vote with your wallet. Fuck them.
Easier said than done. Because, "Apple can do no wrong" is the general public perception. Look at any wrongdoing by Apple - whether they were caught slowing down the phones, degrading cameras on purpose or even the lawsuit where they were caught spying on people's voice recordings. There will always be some NPC defending them as if the billion dollar corporation gives a shit about them.
That or "Apple is the only pro-privacy company in the world" despite there being an active lawsuit against them for the exact opposite.
So, I say: Vote with your wallet. Fuck them...and the fanboys.
> degrading cameras on purpose
What's this about? I can't find anything, except some random Reddit posts.
> Vote with your wallet.
But what are the options?
This. The only mainstream alternative is Android, and I'm already "voting with my wallet" against Samsung, Google, and the rest for violating user privacy even more than Apple does.
And while you're at it, make real change happen in the US national elections by voting for a third party! That'll show them!
How are running local ones going to become cost prohibitive? Indications are that Nvidia has been channel stuffing (artificially inflating perceived demand), which suggests massive oversupply of GPUs.
> Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive.
If Murican lobbying/corruption tries to snuff AI that threatens the Hutt cartels, China will accelerate it.
That's why my next phone will be an unlocked Android device (Shiftphone 8), but murena[0] has also other nice devices that are unlocked.
[0]https://murena.com/products/smartphones/
> even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such.
As someone who's been jailbreaking since the iPhone 3GS (and held onto a iOS 17.0 device for the longest time), Apple has never bothered to detect jailbreaks and lock people out of iCloud and iMessage.
If anything, it's those sleazy security framework providers that provide jailbreak detection to apps and cause them to either lock people out of accounts and features, or crash entirely.
Some government-mandated audit processes (at least, that's what I understand here in Singapore) also require jailbreak detection.
> Apple has never bothered to detect jailbreaks and lock people out of iCloud and iMessage.
Not entirely true. It absolutely has in the case of the Hackintosh. In fact many a year ago that’s what inspired me to get my first Mac, because every release of macOS made it harder and harder with custom bootloader and kexts to get around Apple’s active efforts to ensure you couldn’t use those unless you were on an actual Apple device, not just running their OS.
Can't anyone customize the source of grapheneOS and simultaneously get a phone that is not trying to disable itself?
> even if I jailbreak my iOS and never let it update.
Two things:
a) Why the would you never want to update an OS in this day and age ?
b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:
Frankly. I want Apple to lock down my iPhone as much as possible in that context.If I want to be root, I can do so on my desktop or a cloud VM or whatever.
But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.
> a) Why the would you never want to update an OS in this day and age ?
Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.
Updates slow down your phone, eg Liquid Ass. Lots of people follow the rule of only running the OS that came with your iPhone.
If I'm happy with how it's working, an update can only break things.
Maybe your phone doesn't have banking and stuff on it
> Maybe your phone doesn't have banking and stuff on it
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
Passkeys are the standardized version of the bank's proprietary app. Well, except for the device attestation part, that won't happen on iPhones.
I think you meant to say TOTP.
I get why TOTP is the better standard, but nothing uses that because the UX in most implementations was horrendous for like 6 years.
USA, Chase lets me set a passkey
If your phone does not have any important or sensitive on it, why even secure it?
> If your phone does not have any important or sensitive on it, why even secure it?
Or why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
Did it have access to your email?
Not my important one
We gave in because open source and hobbiests do not design good products and even worse shared systems, as much as they enjoy self-righteously declaring their values. And shared systems require trust, planning, and goal setting in a way no open system would ever build.
1) They of course lack the resources
2) Often lack professional displince across all skills required
3) Mostly make for themslves or whats interesting, not whats needed.
4) The release schedule is laughable at best.
This seems more correlated with big vs. small organizations, not closed vs. open organizations. There are open projects (e.g., Debian, Blender) that tick all four of your boxes in my opinion.
this must be nailed to the wall somewhere at autodesk
linux?
You do understand the reasons right? iCloud, iMessages etc are an interplay of software in your device, software in cloud and some networking. They have to work together. A jailbroken phone can have a tinkered iMessage app. Supporting tinkered / unsupported versions is more overhead / possible security risk. Why would you expect them to take on that?
I agree with your point, though I can easily modify ~/Library/Messages/Attachments or ~/Library/Containers/com.apple.MobileSMS/Data on macOS, which is a platform similarly secure to an iPhone when you take sandboxing, sip, etc. into account. So Apple already supports macOS, which can be tinkered, no? I guess the argument is that by locking down iOS, a platform which was never open, they just never needed to handle that class of security risks which are introduced when customers have more freedom.
I did actually discover a bug in iOS (related to photos which have failed to sync to icloud for the past four years) by investigating why there were over 23k empty folders in ~/Library/Containers/com.apple.photos.ImageConversionService/Data/tmp/, fwiw.
You're right, but I could see Apple acting on iOS alone, just because of scale.
There are some orders of magnitude more iOS/iPadOS devices than macOS devices.
There's a bunch of ways we could debate ourselves about things Apple would or wouldn't do, but at the end of the day, Apple is going to do whatever is in it's best interest.
My computer is jailbroken, I have sip disabled yet icloud and imessage work. So what makes my computer different from my phone?
Who bears the security risk? The user.
The only security risk for apple is a job security risk if the ecosystem lock-in is eroded.
The risk to Apple is everyone else’s trust being eroded by having their ecosystem compromised. Why risk it?
It does not make sense for someone to lose faith in apple because someone else was able to run a modified imessage app.
For apple to entertain this idea is to create more problems for themselves in the long run.
If you understand this from my perspective, which is that these actions are motivated by a desire for more control. It begins to make more sense. If you can benefit from increased control, then these unreasonable expectations of security against your customers (held by other customers) are a desirable problem to have as opposed to an increasing burden.
Imagine the same being said of a car manufacturer. "We need to install security measures in place to prevent you from modifiying your car because other people may see that modified versions of our cars exist and that tarnishes our brand somehow".
As long there is no reason to allow companies to exert this control over consumers, it just allows the manufacturer to enforce a total monopoly on the post-market.
Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness.
yes for PDFs in iMessage where would be blocked, not sure in Signal though. No idea for 3rd one.
It only blocks auto loading. Clicking on the PDF will have the same effect.
These are still 1-click, not zero click. So the best protection you can have is not opening unknown files that were sent to you. That being said, lockdown mode blocks all sorts of message attachments. From the videos it look like they are using pdfs in the messaging vector, which would get blocked too. So you would be safe-ish. But lockdown mode is so restrictive that it doesn't really make sense for most users. Or at least it doesn't make sense to buy a $1500 phone and then limit yourself to something you could have gotten for $50.
You don’t know what lockdown is do you? I’ve had my phone in lockdown for a year. I can’t: collaborate on notes, and it does not automatically open links in chat. Other than that my experience is identical to non lockdown.
You lose a lot: https://support.apple.com/en-us/105120
“You lose a lot”
I just told you what I lost. Almost nothing. I don’t use any of those features.
some sites don't work (you can explicitly whitelist them tho) but generally it's been fine. i would honestly prefer a phone that doesn't allow any comms to any non-contact list parties at this point.
I can send my friends a PDF of a restaurant's menu over iMessage. I think that wouldn't work for you?
I wouldn’t do that lol. Send the url to menu. Not a hard problem to figure out. Sending pdfs as attachments is boomer level lack of understanding of technology.
I use Lockdown Mode and the functionality I get is nothing like a $50 device. If you're being serious can you link to some $50 devices for sale that are on par with a recent iPhone Pro running in Lockdown Mode?
the videos just don't hit the same without the dancing anime girl and the electronic dance music.
My favourite part from the first video is how much effort it took to drag up from the bottom of the screen to get back to the home-screen. This reflects my experience with how iOS handles touch gestures in general.. also super easy to accidentally activate "Reachability" mode!
The reason they're having trouble is because they're in the simulator.
Also, if reachability bothers you like it does me, you can disable it.
Seriously I want a physical home button again
You say this, but have you tried an old iPhone recently? I did, and it was actually pretty terrible. The quick little swipes to switch between apps is so much more natural now.
Yes, my wife has an iPhone 6, I wish I had that. Though half of that is the jack.
I will keep my SE 3rd gen a looong time for that specific reason
https://x.com/calif_io/status/2113570095549337977
We peaked in the early 00s with warez key generators featuring banger synth tracks.
Here you go… https://lnkd.in/p/g9_uh79c
So true.
What's with iOS and pdfs pwning them? Reminds me of the ForcedEntry in Pegasus.
https://projectzero.google/2022/03/forcedentry-sandbox-escap...
https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg...
PDF has been an entry point since forever, it is extremely complex and can in some cases even run javascript, it has a huge attack surface.
Too huge attack surface. Good candidate for victim trust (who would not open a pdf file on an iPhone?).
So pdf and images are the best vector for iPhones.
Once you escape the parser you have to reach and escape the sandbox and from there reach the kernel.
That's why you need Rust in any image decoder. FFMPEG too.
Rust is not a magic security wand.
It might not be a magic security wand, but so many critical vulnerabilities in software trace their origins to memory unsafe code and things like "use after free".
"~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues" - Microsoft [1]
"We adopted Rust for its security and are seeing a 1000x reduction in memory safety vulnerability density compared to Android’s C and C++ code." - Google on Android [2]
This is also worth looking: https://www.chromium.org/Home/chromium-security/memory-safet...
References: 1. https://www.microsoft.com/en-us/msrc/blog/2019/07/a-proactiv... 2. https://blog.google/security/rust-in-android-move-fast-fix-t...
If I were Google I'd try to rewrite Chromium in Rust. The FFMPEG folks should try porting the whole codebase to Rust too. They can always keep the legacy versions for legacy computers (my old n270 netbook can barely play 720p@30FPS anyway, and it's too slow to downsize 4k video to 720 or 480p...), so a bigger amd64 machine will always be -reallistically- needed for anything else than <=720p consumption.
It cuts down most of the crap trying to trash your machine's RAM (virtual memory in the end, but today it's almost as if you didn't have a MMU). It's good enough.
On less powerful machines, dear Mutt+isync+msmtp users like me, please use AERC (written in Go) against these. It's slower, but far more secure than C. Also, SLRN needs a Go rewritten clone (able to point to slrn's caché) like nothing else. Comp.misc and comp.arch still are extremely valuable.
Apple has been propagating Swift for more than a decade now and at least in theory, it should be on par with Rust in terms of safety I'd say.
It mostly is. Has pretty much caught up with all of rust actually (while being much more readable).
Never mind - that only applied to origins PDF 1.x.
Maybe with LLMs a full rewrite that’s more secure could be done
LLM and full rewrite are a recipe for cooking something that still has flaws but also doesn't work that well. The root cause is that PDF is an old format from a more innocent era. A new document standard that keeps up with the technical and security advances, learns about the lessons PDF taught us, and allows for easy conversion from old PDFs, would be the ideal solution.
Who am I kidding, I think the PDF format will outlive us.
> PDF is an old format from a more innocent era
if apple parsed pdf with (js, swift, rust) none of this would be possible. the problem is memory-unsafe code.
A full rewrite of what? iOS? I hope you’re kidding
Apple can rewrite the media and PDF libraries in no time in Swift/Rust, they have tons of money to waste.
Well it was TIFF one time
#3 is so nice, I want root access to my phone. Does anyone know if doing this can lock Apple out from updating/removing it?
Subverting the secure boot/upgrade chain would require a SecureROM exploit and presumably a compromise of the Secure Enclave, so the answer is almost certainly "no" (even prior major exploits from recent memory like usbliter8 are tethered and don't exploit the enclave; the last true untethered Jailbreak was iOS 9 or something.) An upgrade would fix it. The internet reporting claims this break they are showing in this video is untethered though, which is extremely rare on its own.
The videos sort of imply that these are userland rather than bootrom, whatever payload they have running is getting hit before first unlock, which isn't a lot of surface. They specifically say to not update which pretty much confirms where the attack surface is. Somewhere after the kernel starts but before the main user space is unlocked with the passcode.
Well the governments and supranational bodies who want to read your messages would be aghast at you having root on your phone.
Like we did on HTC G1s in 2008
Anything you can find with an LLM to break into a locked device/ecosystem, the operators of that ecosystem can find with an LLM too, and fix it. Right?
Only if it's in updateable software. Hardware takes longer to correct.
Hence Sam Altman's latest public comment: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs."
This is true for things other than LLMs. Outside contributors have been credited with hundreds of security fixes to macOS and iOS that were found with fuzzers and sanitizers. Just off the top of my head CVE-2019-8605. Clearly, Apple has access to AddressSanitizer and libfuzzer, but outsiders still find these things. Not only Apple: Google can find flaws in iOS but outsiders also find flaws in Chrome, so the phenomenon is widespread.
Man, sucks to see these "hacked" iPhones doing so many cooler things than my Apple-approved one.
It’s a mix - for years I wanted root on my iPhones, just like you got on android. In practice, once I had it…? I never did much beyond installing Cydia.
With today’s hardware I might have a different take - the 18 has more than enough hardware to be a laptop so maybe I’d use it for a docking mode. But my gut is I’d probably still want a laptop even then.
To me the upshot is : billions of development, software and hardware, have gone into the platforms - it’s hard to quickly make them significantly better.
When I owned an iPod touch, the advantage of jailbreaking was to give your device certain features that the OS just didn't support. (Hell, I remember early days when iOS didn't even have a concept of wallpaper, the background was just black.)
iOS has come a long way since those days so a lot of the most common use cases of the past are no longer necessary. But the principle is the same - the hardware is a general-purpose computer but the software is locked down unnecessarily in many ways. Jailbreaking lets you do things that are outside of Apple's box.
I agree, and, if you have a developer certificate from Apple, the list of wants I have is ... not that long? zero? I'd love to be pitched on it. In practice, I wanted freedom, but didn't really want to do anything with it.
I'm for being able to hack your own device to do whatever you like with it, preferably without active resistance from its manufacturer. I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
The point the parent commenter is making is that they want Apple to allow people the freedom to intentionally mod the functionality of their device. Not that they literally want single-click PDF exploits to be a thing.
Who is saying this?
The link here demonstrates an exploit which runs arbitrary code on an iPhone when the user opens a PDF.
> I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
Who is saying this part?
Asking for an open device does not mean supporting malicious hacking of others. This is the single biggest false equivalence used by Apple and the rest of the industry to keep a closed ecosystem and restrict users' control over stuff they paid for. And people continue perpetuating it for some reason.
Nobody said exactly that, but your first comment pointed out how cool the capability is without acknowledging that it is trivial to exploit maliciously.
We're on the same side here. I daily a Pixel with LineageOS and root.
If you phone is hackable by you, what stops someone else from hacking it? Ultimately, it's a trade off between security and openness, and I think it's good that there are choices on both sides.
iOS has enough zero-click exploits that you don't exactly get a choice between the two.
You don't get that choice on any mobile platform.
What in these videos is so much cooler than what you can do on an Apple approved one? Other than, "As a programmer, I can do anything", I just personally don't see any capabilities unlocked that I can't have with an app or whatever. But I might be missing something.
The only thing I really miss from my jailbreak days is an app that could talk to the cellular baseband and display all cell towers nearby on a map and showed which you were using.
I used to have my home screens fully customized but that’s a lot of work creating icons for hundreds of apps. Or even dozens.
1. install apps without the app store so we dont ahve to pay 100 bucks yearly for it to apple
2. run linux
3. run emulators
4. run VMs
5. install steam
6. make it a media server
etc
Hoping more "unsupported" older "iDevices" can be made usable with newer software with something like "jailbreaking"
It's a felony to subvert the natural order of disposable tech consumerism.
I can 100% guarantee that we'll have comments from people saying they buy iPhones specifically because of the walled garden and the last thing they want is a jail broken device. On a website called Hacker News.
I'm glad to confirm your suspicion. I like to have both a walled-garden phone and several open-platform computers. They do two completely different things for me.
To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.
I want the same kind of phone. But I reject the premise that it's impossible to have a deeply nested "De-wall this device yes I know what I am doing yes I confirm I'm about to really open myself to issues if I don't understand the implications" settings option without compromising the walled mode security.
The point is that no one forces you to jailbreak your iPhone. If you like the walled garden - great! Keep using it! But I've been in plenty of discussions where iPhone users are literally against jailbreaks at all and in any form.
I want a device I can give the elderly in my family that they cannot be easily induced into doing insecure things on. If there were an unlockable iPhone and a locked iPhone I want to give them the latter. It’s not enough for me to tell them not to scroll to General and click seven times on About to activate developer mode. I would prefer to just give them a device that can’t do that.
My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
Mostly agree with you, but:
> My own parents are still relatively young and my in-laws are sceptical enough of other people that it’s currently safe but it won’t be so forever.
It is always interesting to me how people equate getting old with becoming dumb. I know there is definitely some age related decline that's inevitable, but if a person has grown up with computers, and maybe more importantly, has had a hacker and curious mindset while younger, it is not likely that they will suddenly become so naive and vulnerable, even when like 80.
What usually happens is that people lose interest in learning new things and keeping up. My own mom (who passed at 73) could never be convinced to use Whatsapp messaging, thinking it is something complicated for the young ones, and yet I currently know people in their mid 70s and even much older who are still as sharp as anything and use all the cool apps.
Sadly there’s also dementia where a gradual decline occurs. And I’m pretty sure learning gets harder.
Windows malware that says stuff like click Yes on the warning bar or box shows how well that works.
Earlier today on the thread about the google play store apocalypse I posted a comment saying that I like some things about life in Apple's walled garden. But I still upvoted the parent comment because it's true and it's funny.
Also I'd happily jailbreak my iPhone and put an alternative OS on it to extend its lifespan. I'm a living human with nuanced opinions and I'm allowed to like more than one thing.
I got curious when you mentioned "google play store apocalypse", but I can't seem to find a comment of yours on the topic today. Would you be willing to post a link?
https://news.ycombinator.com/item?id=50209087
thanks
The meaning of Hacker here is VC Startup Founder
You said what I was thinking. If anyone has links for _hacker_ news drop them here ;)
Can't, I'd be autobanned, but this one is allowed at least: https://unslop.news/
https://news.ycombinator.com/item?id=49660783#49663549
I can root my Android phone and have in the past, but I have absolutely no desire to do so now because it adds almost no functionality in exchange for a very large security risk. I consider rooting my phone in the past quite a foolish move by someone who didn't know better.
People are trading the future of personal computing just so they can run a banking app and justify it with "but I want my phone to be locked down for security." Not even sleepwalking into corporate-controlled-computing, but actively promoting it.
10, 15 years from now the ability to run your own code will be a distant memory unless you constantly subscribe to an annual Developer Account with BigCorp. Oh no, you've coded something that violates the ToS; account terminated.
I converted to an iphone 13 mini (from the S24 Ultra) after being on Android since the release of the HTC Desire in 2010. I used to install custom roms and tweak everything on all of my Android phones which actually lead me to the iphone because I realized I wanted a phone without all the OE clutter and Google crap. The only clutter on the iphone is icloud which stays out of the way and doesn't annoy me with subscription messages. Also I don't have time to fuck around with modifying my phone. I just want everything to work without user intervention.
And you can keep doing that, no once forces you to jailbreak.
"No one forces you..." is an interesting line to go down in the comments of an article that focuses on using messaging apps to deliver exploits to a cellphone. It's pretty malware adjacent. Isn't that sort of thing how Jamal Khashoggi and his friends, family, and coworkers were hacked before his murder/execution?
Uhh, what? Clearly nobody is arguing that "arbitrary remote execution is good." Apple could easily satisfy everyone by simply allowing users to unlock their own bootloader.
How would that help anyone? The unlocked bootloader on the Apple Silicon Macbooks still hasn’t resulted in a truly viable alternative to macOS. The iPhone is much, much harder. And why would carriers trust the result?
You’re missing the point. Hackers (in the tinkerer sense) just want to program their own devices, with full access to the capabilities of the underlying hardware. Apple could obviously allow that if they wanted to, in a convenient way that doesn’t increase the attack surface for malware.
Having control over one's device and allowing anything and everything to have free reign on said device are two different things.
I'd love to have more control and customizability that the user can initiate, but random executables shouldn't be able to so much as sneeze without my permission. Third party software (yes, even the FLOSS variety due to issues such as supply chain compromises) must be treated as adversarial by default, anything less is foolishness.
Why would you trust the user with their own security. Have you not seen the ten most common passwords?
Yeah, this gives a new meaning to demanding your password at the border.
I like jailbreaks.
But to jailbreak you need to stay on an older iOS version (because Apple patches the bugs enabling the jailbreaks). And that means you don't get security updates.
Except for the good old days when jailbreaks included patching the exploit :)
I’m fine with a locked down iPhone. All of my financial account credentials are on there, personal photographs, etc. Since I’ve owned an iPhone, I’ve never had a non-working phone. Security and reliability are the two most important items to me when it comes to a phone.
If I want to run arbitrary software, I have a computer. I am unsure why you care if I want a locked down reliable phone.
> people saying they buy iPhones specifically because of the walled garden and the last thing they want is a jail broken device.
I’m not one of those people.
> On a website called Hacker News.
But I still find that unfair. Being a hacker doesn’t mean you want to hack every aspect of your life. I’m perfectly content hacking away on a computer, but I have no desire to hack my toaster and risk burning down my house.
These are the same people that caused this situation. A close platform is only closed until it's busted right open and then everyone is screwed because there were no eyes on it the entire time.
It’s reasonable to like to hack things, but to want a phone that just works.
Not sure what your definition of "hack" is but apple seems to be "anti hack" on all fronts.
They do have good hardware, but surely the hacker in you is a little sad using an IPhone!
Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
Same guys who found the PHP.
Edit: hahaha you guys are funny. “The php hack” is what I meant!
They found the PHP?
Yes, actually PHP was not invented but discovered in nature. That’s why it’s a bit wild sometimes, because it still remembers its origins.
PHP was born as a templating language, but mutated into a programming language, and then grew organically from there.
Craziest part is it was never even intended to be a programming language. From the Wikipedia page, the founder Rasmus Lerdorf is quoted as saying:
"I don't know how to stop it [...] there was never any intent to write a programming language [...] I have absolutely no idea how to write a programming language [...] I just kept adding the next logical step on the way."
And 23 years later here we are with php2shell and it powering 70% of the internet’s websites
Everything becomes a programming language in due time. At work we have YAML files with #if and #include statements…
Does that mean eventually a programming language becomes a crab or a crab becomes a programming language?
Is that before or after it evolves to read mail?
But that only raises the question: what bore PHP? A bit of a C(hicken) and an egg situation.
I am reasonably certain PHP is not written in Chicken.
https://en.wikipedia.org/wiki/Chicken_(Scheme_implementation...
I mean there's no way there was any intelligent design behind it
/ducks and runs
Didn't know that the PHP was lost, thanks for pointing that out.
They found the PHP vulnerability that has upended the world, or so it seems.
The Princely Hippopotamus Parlor in this case.
Video 3 get a root shell agains 27.0.1 which is the latest iOS version installed on my lovely se3.
This really blown my mind, and seem the 1/2 video is installed a app by click pdf link?
I guess and hope there will be update from apple quickly
There are loads of these exploits which exist in the hands of private hacking groups and state organisations which have not been made public. Always assume your device is able to be compromised from those who have the motivation and dedication.
Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone).
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
PDFs are basically executables, that's why it's hard. They support running code, they support decoding images which themselves have their own custom compressors that are basically code. Anything to do with image formats is rife for bad decoders, insane compression algorithms from the 90s, and a PDF is basically 1000 formats inside many different container types with executable code plastered on everywhere. If you want to make a compatible PDF viewer you'll need to be able to implement an image decoder algorithm for a fax machine that was specific to Japan in the late 80s, which was somehow ratified into a standard and is used today by all the top legal firms, or something absurd like that. When you open a PDF on your computer, depending on how it is being parsed, it can even make outbound network connections without you knowing. To safely open a PDF you need one of those bomb proof suits, a disposable laptop, and even then you might be going home without eyebrows.
Willing to bet that a default "treat PDFs/documents/spreadsheets as dumb" option in operating systems would eliminate the majority of common one-click vulnerabilies out there. And exactly 0.001% of actual use cases would be affected.
This is one of the things iOS's Lockdown Mode does. I wish the features of Lockdown Mode were able to be enabled individually instead of a single all or none option.
https://support.apple.com/en-us/105120
Your link doesn’t say anything about PDFs. And if I remember correctly it only disables PDF previews in Messages. This means if you have a zero-click exploit now it becomes a one-click exploit. I fail to see how that’s relevant given the article is already demonstrating a one-click exploit.
PDFs are just absurdly complicated in general. Dumbing down the parser might be the right idea. I wonder what consequences that would have with how intertwined PostScript and PDF in general are with macOS/iOS; maybe that's why the PostScript engine was removed with macOS Sonoma/iOS 17? I don't know if that was only user facing behavior and Apple is still working to remove the internal usages.
That's kind of what Adobe does with downloaded PDFs, you have to click the Enable button to turn on more document features. My schematic capture app will output a PDF that has links that will take you to specific spots on a page and also some JavaScript where you can right click on a part and see it's BOM information. None of that stuff works until you click the Enable button. I've also seen some vendors offer not only normal 3D model files and 2D drawings but a PDF that has an interactive 3D model inside. It's kinda cool how much random shit can go into a PDF but it's clearly a massive malware vector.
One neat thing I've seen is a PDF that will ping an IP catcher when opened in Adobe, regardless of the security level. The same can be done with word docs, excel spreadsheets, and even SVGs.
No. Very few PDF exploits come from the officially sanctioned way of running code (JavaScript) inside PDF. Most are just plain old parser bugs.
Did we do that with Excel spreadsheets so that macros are disabled by default?
"dumb" isn't a real thing in computer science though. You mean render them to bitmaps in a sandbox?
I read it more as "don't implement JS, 3D object rendering, slideshow transitions, sound annotations and the other 999 insane features that I'm not even aware exist"
Would require defining what features are needed. "Require PDF/A" is probably a reasonable approximation, though it would break most PDFs
I think he just means disable any of the "advanced" features mentioned above like accessing web content, running custom scripts, etc etc. You might still be vulnerable to any dependencies they use for image rendering itself but I bet it would make it drastically more safe.
Then just have a button for turning those on as needed on a case by case basis
If you disable features then people will see important documents as white rectangles and complain and you'll get a reputation as not working.
"It's for security, honey."
"Okay. If you aren't going to sign this rental agreement, you have five minutes to move your stuff out of my house."
> PDFs are executables, that's why it's hard.
That isn’t really true, it’s not hard for PDF viewers to block by default (or just not implement) the problematic features, which also aren’t critical for the vast majority of PDF files.
The exploitable bugs are typically the usual, some buffer overflow in an underlying image or font library or similar, but unrelated to PDFs being “executable”.
What a sleight of hand. PDF's are obviously not executable, any more than text files are. Decoders are executable and they can choose to unsafely handle input. Even plain text editors can have exploits. It's no different than any piece of complex software.
The characterization of the PDF format specifically being “basically code” in any substantial manner is simply incorrect. The only PDF-specific features that reasonably meet that description is the PostScript support, which has fallen out of use decades ago and was completely removed in PDF 2.0, and the JavaScript support, which is optional, prohibited in PDF/A, and can easily be limited or omitted by a PDF viewer.
> the PostScript support
What do you mean by that?
> PDFs are executables, that's why it's hard. They support running code
I don't think Apple's PDF renderer supports e.g. running JS, you'd need real Acrobat for that. Or are you talking about something else?
> they support decoding images which themselves have their own custom compressors that are also basically code themselves.
But this is fundamentally true for anything that displays images, right? Or are the PDF formats particularly bad for some reason?
Yeah a lot of those fancy PDF features are Adobe-only. It's not that other apps can't support those features, it's that no one in their right mind wants to spend endless amounts of money and time trying to sandbox it.
Most people have some understanding that shady websites can give you malware, a drive-by exploit is pretty rare but it's good that most people think just visiting a site could infect your computer. But a PDF is just a document, right? Just thinking that a PDF is just words on a page is exactly why it's such an insidious threat. Or they'll get a PDF as an email attachment, see that it's not an exe or something weird, and open it because they think a document is safe.
I think it's more the image formats PDF supports? I could be wrong, but there was that forcedentry vulnerability (which was insanely cool, even if really bad)
From the standpoint of a layman it looks like there's a lot of overlap between writing safe web browsers/engines and writing safe PDF readers/engines. There just hasn't been anywhere near as much of an impetus to push PDF readers/engines in that direction because most of us aren't interacting with PDFs nearly as often as we interact with the web (and things built on web tech).
Most web browsers actually make decent PDF viewers by default don't they ?
I'm pretty sure not even the safe languages would help you here. PDF allows you to pretty much run arbitrary code since it supports javascript, images, and a bunch of other things I'm forgetting, and you can't not implement javascript support or otherwise be selective about what you support with it because then all the end-users will complain when they get that one PDF that they need to fill out but it needs JS because... Nobody knows.
In this thread. Apple Acolytes Anonymous.
Seriously, California has a cathedral problem, may the vault dweller succeed.
A reminder for people who don't follow this, Calif is Thai Duong's firm. Thai discovered the BEAST and CRIME TLS attacks (with Juliano Rizzo), and then worked at Google for a bunch of years, including on Wycheproof with Daniel Bleichenbacher. The team at Calif includes lcamtuf, Dion Blazakis, Tavis Ormandy, and Stefan Esser (among many others).
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
I love these people and everything they're doing.
This brings back lots of memory of jail-breaking iPhone era and cydia the alternative jailbroken iPhone app store.
The second video, the person who's shooting the video has his face mirrored onto the screen, anonymity is gone.
Oh boy, what a week. Must be great working in cybersec right now.
It is rapidly becoming cyber only (assuming it is not already there under the hood).
More details: https://onejailbreak.com/blog/iphone-duo-ios-27-1-jailbreak-...
It would make me so happy if this would allow running UTM.app with Hypervisor support on iPadOS. I don't want to travel with two devices, the would be enough, but sometimes I need a real desktop. Apple, of course, wants you to buy two devices. I do have UTM with Jit Linux running on my iPad, via altstore and entitlements and so on, but it is all a bit complex and still fairly slow.
I want to boot linux in a vm at full-speed. is that too much to ask?
I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.
It's a minuscule part of the new normal.
If this continues I'll argue that you have to be absolutely insane to allow network connected electronics into your home in the future. This is Apple, known for locking down their device to the extreme, and yes some people would love to use this for jailbreaking their phones, other organisations want to root your phone for .... other purposes.
Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.
> You shouldn't have anything more connected than an FM radio at this point.
They can still hack your mind with ads.
People have been paying a premium to companies like Apple for a reason. You've got nothing to worry about.
Decade of people's purchases has been invested into safety and security. It's absolutely unthinkable that a $7t market cap company with an army of 200k workers will ever leave people high and dry. They proudly went public, so we know they have the public's interests at heart.
> They proudly went public, so we know they have the public's interests at heart.
God I hope this is sarcasm.
I assuming there is a /s missing from the end of your post.
There's every incentive for nation states and other espionage outfits to keep these types of exploits under wraps. This has probably been the new normal for some time ..
I for one have experienced multiple lifetimes worth of internet madness and will be looking to airgap / disconnect as many devices as I can get away with.
I think in time (a few years) the gap will close a bit. As AI is used to harden software, it will be harder to break. Software not validated by AI will continue to be vulnerable to it.
So what happens if AI becomes something that you need to actually pay real money for? Then only Apple, Google and Microsoft can affort to do network exposed software. Smaller companies and solo developers are just f-ed if the price of running LLMs goes up as investor money dries up.
Please let this be real. I need my 17 Pro to be jailbroken. I may keep my 13 Mini if it works for it too. This will be bliss.
Just let me know when I can install an alternate OS to my junk drawer of 6-10 year old iPhones. That's the holy grail.
They are going to run out of vulns eventually when the code is rewritten in memory safe lang & the rest are found.
> They are going to run out of vulns eventually when the code is rewritten in a memory safe lang
that's just not how it works at all though is it. Good luck writing the kernel, firmware etc in a completely memory-safe way. And even if that was accomplished, memory safety isn't the only class of vulnerabilities, it's just the most common.
> and the rest are found
If they kept a stable version with no updates or new features *ever*, only security patches, for decades, then maybe that could be possible, yeah. But Apple users aren't exactly the kind of people who would enjoy such stability and security anyways, it comes with the compromise of novelty. Stability and security aren't very fashionable either.
edit: Obviously a "memory-safe way" means no `unsafe` blocks in Rust, too.
edit#2: This is all assuming we don't get true AGI. I hope my assumption is right
He's right though. We'll run out of vulnerabilities eventually.
Im pretty sure more vulnerabilities are being created in new code all the time.
What are these videos actually demonstrating?
A couple of PDF exploits from iMessage and Signal leading to code execution, and an app that roots the phone. Also, they seem to have managed to make their malware survive a reboot, which is difficult. That's another reason why automatic reboots are considered a security feature: exploits leaving malware in-memory are a lot easier to build than malware that survives a full reboot, passing all stages of signature checks and validation.
Yes, why don't they just say it instead of posting videos. Opening a sinister PDF in iOS can give them access to what exactly? anything/everything? What iOS versions or devices, etc?
Rooting, pretty much. Aka, executing code which shows their flying logo, but could also be exfiltrating data without displaying anything.
#4 is very interesting. Truly untethered (persistent) jailbreaks haven't been a thing for 10 years.
How did they bypass MTE? Wasn't it suppose to make such exploits basically impossible?
We don't know if Calif bypassed MIE.
When they hacked the M5 (one week after release!), they used a data-only attack, which is outside the scope of MIE. That could be the case here, or something else entirely. We don't know.
https://news.ycombinator.com/item?id=48139219
Stay on 27.0 or upgrade to 27.0.1?
so i see we're still going with the apocalypse today too
Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
iOS does sandbox their processes really well, that's why this hack was as difficult as it was. The Safari thing you're talking about is JIT - iOS disables all runtime code generation across the system except in Safari (for JavaScript), but this is a completely separate thing from sandboxing.
Actually, no, I now remember this was about iMessage specifically and how it isn't completely isolated/runs as system service or sth? Or about the renderer?
Which would make sense because these attacks seem to exploit the same weakness.
No anime girl videos. Progress!
why do we see pdf viewer exploits on ios when we have sandboxing mechanisms nowadays like wasm? Or is this exploit accounting for the sandbox breakage?
I'm tired, boss
BASED
Right that does it. I'm fucking off to the pub and drinking myself under the table after this week.
Ok so you became "root", but who knows, Apple might have "superroot" and if that is not enough "god-mode".
Apple does have that and generally you need to break it to do the kinds of things demonstrated here
guess who put themselves on the must-hack list of every single national intelligence agency
Apple doesn't use AI to vibecode and/or pentest their software?
I think we have a right to know.
Well, surely you know that “AI” is just pattern matching and useless for Real Engineering work by Real Engineers.
Oct 16th post;
More recently: iPhone Duo Jailbreak vid https://x.com/calif_io/status/2113570095549337977 (https://news.ycombinator.com/item?id=50206680)
This made me miss Cydia and the old jailbreaking days so much. Was such an exciting time to have an iPhone with the tinkering. Anyone still remember iDitDahText https://iditdahtext.com/iDitDahText.html?
Man... PDF is such an unfortunate file format.
Slightly offtopic but I find it slightly funny that they have accomplished to hack the iPhone yet the name of the third video is: Can you iPhone do this?
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
Now - does the Signal 1-click work on Graphene?
Too bad this will be patched instead of allowing the device owner to control their own device.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
In principle it should be possible to jailbreak-patch the OS so that it will patch any patches to your liking.
So you think they will release the full exploit?
I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
Apple doesn't want security researchers to find bugs? Then why do they have a $2m bug bounty?
Awarding security researcher != Average Joe being able to jailbreak your device.
Hope you understand the difference.
If the current frontier allows for this, we can probably expect alternative models to reach the same spot in a matter of months as well. The cat's out of the bag, for better of worse.
The paradox is that if the models are restricted, more exposed software will exist. I'm not convinced you can make a model that allows you to build secure software without it also being able to build exploits.
Bro rewrite IOS in Rust :)
My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."
You can do this on Android
Not for long now...
Still, but with a one-time 24-hour delay, at least until Google pulls a future Xiaomi.
This "there will be literally no difference between apple and Google in 70 days" is great propaganda for Apple.
It's better to use 0-day exploits to install legitimate software by now. It saves everyone from a lot of hassle. Or, more realistically for most, make a web app and forget about native apps.
Eli5 the iMessage video? They open a file that calls their webapp?
Curious to see how many tokens was spent
I guess I've never really understood why people who don't like the way the iPhone and apple ecosystem work buy apple products. There are plenty of other options out there. Every time articles about this and the App Store pop up it seems as if the comments are filled with a whole lot of android users that are upset that iPhone's aren't like androids. That's not to say those are all of the comments and there aren't clearly iPhone users who want these options but again, why buy a product that doesn't support these things if they're so important to you in the first place.