This was an interesting series of shorts. The bouncing screen edge overlay and the use of PDF made me chuckle. Very nostalgic.

Thirty-odd years after it was first ejaculated into the world, PDF still remains the demon threat vector for payloads that just won't die.

fucking embedded pdfs.
Is there any tool that can detect this shit in advance, idk like Kaspersky but for iphones.

Holy shit. I’ve been waiting for this for so long. I really hope this is real and not faked somehow

Article is a set of videos. For those unfamiliar with what iPhones cannot do ootb, this one's probably most impressive:

https://www.youtube.com/watch?v=_GJVKVNMczM

Week old substack with “details to follow soon”. This is getting tiring.

How is this new? This has been possible on jailbroken phones for years.

I mean, following proper disclosure procedure requires giving the manufacturer adequate time to patch the vulnerabilities before they are released. Would you prefer they just publish the full how-to right up front, and create a zero-day for anyone (from script kiddies to state-sponsored hackers) to use as they see fit?

tl;dw?

That response doesn't sound very anarchist of you

Do you think “anarchy” means you actively try to give zero-day methods to state-sponsored hackers?

It's a series of <1min videos of demonstrating different method to hack an iPhone 18. At the end, they get the phone to do things normal iphones can't do.

Oh so it's a jailbreak?

Yeah, the day after launch

What are the benefits of jailbreaking, would I be able to run an alternative OS?

I’m so keen to get away from Apple.

And, importantly, it's not a decision that's compelled by some sort of hierarchical power structure. Responsible disclosure rules exist to protect everyone who uses the software. Like FOSS it's a system that benefits everyone which makes it worth participating in voluntarily.

Capitalism sometimes gives a cash prize as well, because of course they do.

Step One: be a cop...

I know next to nothing about iPhones but I assume they've been notoriously hard to jailbreak?

I mean, you could just not buy apple? 🤔

That's my solution.

Isn't Kaspersky Russian malware? Or am I just imagining that?

No, that would be a bootloader exploit. It’s happened before, but not for many years now sadly.

Please don’t use Kaspersky.

Also, no app would be able to do something like this unless it comes from Apple. Apps are sandboxed, they can’t peer into a different app, or the system itself.

Maybe they already have an iphone and are trying to make good use of it.

That’s exactly it.

That kind of foreground painting outside the app shouldn’t be possible on iOS. This is quite impressive.

Doesn't the PDF contain a sandbox escape capable software? if so, any apps could do it.

If that is in fact how this works (I haven’t dug in too far) then technically yes. The problem is, these are one off zero days. You can’t exactly test that this problem exists unless you know it exists, and if you know it exists then Apple knows it exists (in the case of a mainstream antivirus app at least) so there’s no point in actually attempting to exploit it, just throw in a check for vulnerable versions.

There’s no one size fits all “all pdf exploits that ever will exist” solution because there are exploits that will likely not exist for a time.