Comment by highwaylights

3 years ago

Would be interested to know if by 15.7 they mean that it's currently a zero-day for 15.7.X devices, or if it's since been patched in security updates. Also not clear if any 16.X software is vulnerable.

Obviously not a good thing either way, but the most important part of this from the user perspective is whether or not up-to-date devices are vulnerable.

IMO it's a persistent zero-day for 15.7.X devices. Even the latest webkit vulnerability was fixed for iOS 16, but not iOS 15[1].

Additionally, I know this latest update did not happen on iOS 15 because (1) my phone did not receive an update, and (2) I am still seeing the sudden shut down and reboot activity when my battery is between 20-30% (as described by the webkit vulnerabilities as indication of an exploit).

However, according to Apple, iOS 16 is on 81% of all iPhones[2]. So I guess that means only 20% of mobile devices users are "targetable"? Lucky me...

Also, I will suggest that US Government officials NOT have older iPhones which do not support iOS 16. Seriously.

[1]https://news.ycombinator.com/item?id=36156233