Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> But many of the exploit chains did use public jailbreak exploits and Semi-unthethered jailbreaks exist for 32-bit iOS devices running up to iOS 10.3.3.

Apple released iOS 10.3.4 on July 22, 2019 for iPhone 5 and iPad 4g.[1] So it's not completely unheard of for Apple to release iOS updates after officially dropping iOS support for old devices. From the Apple website:[2]

> iOS 10.3.4 addresses an issue that could impact GPS location performance and could cause system date and time to be incorrect. This update is recommended for all users.

I wonder if this update quietly fixed these exploit changes.

[1]: https://support.apple.com/en-us/HT201222 [2]: https://support.apple.com/en-us/HT208011#1034



Unlikely, if it was a security update then iPhone5C should have received it as well. iPhone5C didn't receive 10.3.4 update because its GPS hardware supposedly was an updated one than the iPhone5.

Also, Google Project Zero article(link in parent comment) gives the clear timeline of the attacks and that the exploits were updated to mitigate patches with every new OS updates; so even if 10.3.4 had security patches older devices still might be vulnerable to later attacks.


What Android phone released in 2013 is still getting security updates of any kind? You make it seem like Google and the manufacturers all update their phones consistently.


Browsers do get the updates, that is what's been compared here. I can run extremely old Android with updated browser(s).


All Android phones from 2013 have current Chrome (or Firefox, if that's your preference).

In fact, I have a Nexus 7 (2013) nearby, so I know that firsthand.


Google still ships Chrome and updated WebView for devices older than that even.

If Windows desktops have shown us anything, it's that (given NAT) few vulnerabilities are easier and more profitable to attack than a browser.


Well it's listed under "Apple security updates".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: