Tweet

Zuk

4 May, 3 tweets, 2 min read

iOS 14.5 came out with this option 👇

*seven* actively exploited zero-days were discovered in iOS in 2021 but we do not have "Allow Apps to access entire filesystem & memory" option. Priorities.

Tell me more about how privacy is a fundamental human right.

#FreeTheSandbox now!

2 0days just patched... so if you're using iOS it's worth to update to the latest version.

Of course this is only the browser vulnerabilities: it does not fix additional kernel bugs that were most likely chained to these: arstechnica.com/gadgets/2021/0…

https://twitter.com/ihackbanme/status/1389959255906680832

https://twitter.com/ihackbanme/status/1389959255906680832

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @ihackbanme

Zuk

@ihackbanme

18 Jul

https://twitter.com/ZecOps/status/1416794337153720322

[Important thread 1/N]: Let that sink in for a second: almost all respected publications were under espionage.

All the sources of journalists, were exposed. If you ever spoke to a journalist (even with "Signal"/"Whatsapp") you are exposed.

THIS IS A MAJOR THREAT TO DEMOCRACY!

https://twitter.com/ZecOps/status/1416794337153720322

[2/N] If we needed another proof that we have to fix the broken mobile security permission model, here it is.

NSO's software is actually super easy to catch, but due to the lack of permissions it becomes almost impossible at scale, and NSO only has a single vendor to avoid.

[3/N] This was easy to do for NSO: they simply blocked telemetry, communications, and updates to Apple/Google: and viola! They were set. The vendors had no visibility.

Read 8 tweets

Share this page!

Zuk

Try unrolling a thread yourself!

More from @ihackbanme

Zuk

Did Thread Reader help you today?

Like this author's thread?