“Typically, they require some user interaction, such as installing a malicious application. “This makes the vulnerability different from a lot of other mobile issues,” says security researcher Sean Wright. One of the biggest concerns about the Apple iPhone vulnerability reported by Google is that it doesn’t require any interaction from the user to exploit. How bad is the vulnerability and how can I protect my iPhone?

This should make similar exploits “significantly harder,” from now on, he said.

Remote code execution could be achieved through abuse of the “Receipts” feature that lets people know their iMessages have been delivered.Īs a result of the research, Groß has recommended new security measures to Apple, some of which the iPhone maker has already implemented. He demonstrated how an attacker could set up a side communications channel to interact with a user’s device. In the blog, Groß showed how a data randomising security feature called ASLR, which is meant to protect against exploits, is “not as strong in practice.” The video of Groß’s talk is available for those of you who like a visual accompaniment. It’s part of a three part series, which the more technical among you might enjoy delving into. The Google Project Zero blog reveals more details about Groß’s research, which was first unveiled at a hacking conference in December. What does Google’s blog tell us about the iPhone hack?

Also in July, a vulnerability was discovered that could enable an attacker to read the files on an iPhone without having physical access to it.

Hack into iphone remotely