Viewing a single comment thread. View all comments

Creative_Addition736 t1_j0hzhco wrote

Reply to comment by inno7 in So my iPhone 14 Pro Max and MacBook Pro was stolen in Hong Kong a week ago, and they are going far now.. by BZXY741

Depends what device your using. iPhone, definitely not (unless you click something on the website), Mac, probably not, Android, potentially, Windows, highly likely

2

AbhishMuk t1_j0iigsw wrote

I get that this is an iPhone subreddit, but fyi Android exploits go for much higher than iOS ones. Iirc zerodium has a “periodic” table with the reward money for every level.

Edit: see https://www.wired.com/story/android-zero-day-more-than-ios-zerodium/

>Quote: “The zero-day market is so flooded by iOS exploits that we've recently started refusing some them," Zerodium's founder Chaouki Bekrar wrote

And this has been so for a while - the article is from 2019, but current top payouts are still 2 & 2.5 mil for iOS/android on https://zerodium.com/program.html.

Re-edit: ofc I was downvoted for giving detailed information, why am I not surprised

7

Creative_Addition736 t1_j0iv4na wrote

Thanks, I don’t have time yet to read them, but I assume these are text vulnerabilities? The closed architecture of iOS makes it very hard to exploit, which may be the reason for the cheaper iPhone Vulnerability prices? It might not work against the System Architecture

1

AbhishMuk t1_j0jgoev wrote

Unfortunately I’m not familiar with what you mean by system architecture or text vulnerabilities in this context. The wired article talked about iOS having memory vulnerabilities.

2

rust-crate-helper t1_j0ibe40 wrote

This isn’t really accurate. Not only would a zero day not require clicking, but windows zero days are really not that common. I doubt a phone thief would have one. Maybe a certain Israeli security company.

6