←back to thread

About the security content of iOS 15.8.5 and iPadOS 15.8.5

(support.apple.com)
328 points jerlam | 4 comments | 17 Sep 25 00:34 UTC | HN request time: 0.908s | source
Show context
varenc ◴[17 Sep 25 03:47 UTC] No.45271442[source]▶
It's interesting Apple is doing this specifically to protect old devices from seemingly nation state sponsored attacks:

> Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

replies(2): >>45271964 #>>45272154 #
1. testdelacc1 ◴[17 Sep 25 05:40 UTC] No.45272154[source]▶
People who might be targeted by nation state actors should really be running a phone that’s on the latest OS. It wouldn’t cost that much to not use a 9 year old phone. If you’re remotely afraid of your government, you can afford a phone released within the last 5 years. It’s worth it!
replies(2): >>45272341 #>>45274140 #
2. handsclean ◴[17 Sep 25 06:10 UTC] No.45272341[source]▶
> If you’re remotely afraid of your government, you can afford a phone released within the last 5 years.

Why in the world would you think that? Who do you think governments target, Bond villains?

replies(1): >>45273368 #
3. SSLy ◴[17 Sep 25 08:40 UTC] No.45273368[source]▶
Journalists mostly. Also prosecutors, judges, opposition party members.
4. jeroenhd ◴[17 Sep 25 10:47 UTC] No.45274140[source]▶
These attacks are also applied against all manners of enemies of certain regimes, as well as law enforcement with hacking warrants.

There are plenty of people who get hacked by governments. A smattering of targets got leaked here: https://www.occrp.org/interactives/project-p/#/

I wouldn't expect a Kazakh artist/activist to have the money for the latest and greatest iPhone. Nor would I expect an activist against an industrial plant on the US side of the Mexican border to need to worry about nation-state level malware.

And frankly, my PC has been used safely since much longer than iOS has been supported, and I don't know why I shouldn't expect my phone to last that long. The rate at which phones got performance improvements has stagnated into gimmick-level power increases (like "AI accelerators") a long time ago.