You don’t need PAC if you disable scripts in Safari. Besides, baseband/browser/i... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ryacko on Aug 30, 2019 \| parent \| context \| favorite \| on: A deep dive into iOS Exploit chains found in the w... You don’t need PAC if you disable scripts in Safari. Besides, baseband/browser/iMessage vulnerabilities are in the same price range. [i] It also isn’t difficult to infer what a “code signing bypass” is, so I guess being arrested is a good excuse to buy a new phone? (Assuming we’re talking about a state based actor, in control of the territory you live in) i. https://zerodium.com/program.html

saagarjha on Aug 30, 2019 [–]

> You don’t need PAC if you disable scripts in Safari.

Safari has multiple JITs. For example, aside from the JavaScriptCore compiler, there’s also a CSS selector JIT.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact