Welp, time to update all of your iDevices again...
Seems there's a WebKit RCE, local privilege escalation, and signature bypass attack, all of which are being actively exploited and seem like they can probably be chained together into at least a remote root exploit.
@bascule
These updates seem to be more frequent now.
Is the software getting worse or is the bug finding and patching getting better?
@railmeat they've added all sorts of memory protections and mitigations including hardware stack protection and yet the remote root RCEs keep coming.
I think if anything it's a testament to how software written in memory unsafe languages will always be ridden with vulnerabilities, no matter how many mitigations you throw at it.
@bascule
Rust FTW, maybe.