New lawsuit alleges unpatchable Apple chip exploit was developed using stolen trade secrets
Magnet claims former engineer disclosed proprietary exploit research Last month, researchers at Paradigm Shift published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code execution on devices powered by Apple’s A12 and A13 chips. The bug, which affects the A12, S4, S5, and A13 SoCs, relies on specially crafted data that confuses the device’s USB controller, and gives an attacker physical access to the device and control over its startup process. From there, the attacker can run their own code before iOS loads, bypass signature checks, and boot modified system software.
- ▪Magnet claims former engineer disclosed proprietary exploit research Last month, researchers at Paradigm Shift published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code executio
- ▪The bug, which affects the A12, S4, S5, and A13 SoCs, relies on specially crafted data that confuses the device’s USB controller, and gives an attacker physical access to the device and control over its startup process.
- ▪From there, the attacker can run their own code before iOS loads, bypass signature checks, and boot modified system software.
9to5Mac files mainly under tech. We currently carry 298 of its stories.
Opening excerpt (first ~120 words) tap to expand
// Make sure that nineto5ads exists, it will load ad once google tag exists window.nineto5ads = window.nineto5ads|| []; if (typeof adSizes === 'undefined') { var adSizes = {"leaderboard":{"mobile":[[320,50],[320,100]],"tablet":[[728,90],[320,100]],"desktop":[[970,250],[728,90],[970,70],[970,90]]},"sidebar":{"mobile":[300,250],"desktop":[[300,600],[300,250]]}}; } function getLeaderboardApstagSlotsSizes() { if ( window.innerWidth < 768 ) { return adSizes.leaderboard.mobile; } else if ( window.innerWidth < 1024 ) { return adSizes.leaderboard.tablet; } else { return adSizes.leaderboard.desktop; } } window.nineto5ads.push(function() { apstag.fetchBids({ slots: [{ slotID: "div-gpt-ad-1436850350386-0", slotName: "\/1049447\/9to5mac-Top", sizes: getLeaderboardApstagSlotsSizes() }], timeout: 2e3…
Excerpt limited to ~120 words for fair-use compliance. The full article is at 9to5Mac.
Discussion
0 commentsMore from 9to5Mac
