Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

DurltazorOSXPower

macrumors member
Original poster
Hello ladies and gentlemen, first I would like to apologize for my English.. Is there a way to improve internet browsing in iOS 6? Both Safari and Opera Mini are terrible to navigate, when the site doesn't enter due to certificate error, it gets all crooked. I know that in snow leopard and onwards we have the proxy of @Wowfunhappy + browsers that have an outline for the recent webkit, but there is nothing like this in iOS 6?
 
Given the age of the OS, you're pretty much limited and in all honesty there's way too many vulnerabilities in such an old and unsupported operating system
Unfortunately, vulnerabilities exist in any operating system, whether new or old. jailbreaking in iOS 6 works wonders for just about everything but web browsing.
 
  • Like
Reactions: Isamilis
Unfortunately, vulnerabilities exist in any operating system, whether new or old. jailbreaking in iOS 6 works wonders for just about everything but web browsing.
Yes, that's why Apple, Google, Microsoft actively patches their respective operating systems and applications. The problem you're facing is that iOS 6 has been out for support for many years and has a number of un-patched and fairly significant vulnerabilities.
 
Here's what I found in researching the vulnerabilities

1. WebKit Remote Code Execution (Multiple CVEs) - Severity: Critical and consumer impacted/infection risk: Very High
2. SSL/TLS "gotofail" Bug — CVE-2014-1266 - Severity: Critical and consumer impacted/infection risk: High
3. Kernel Privilege Escalation (Multiple CVEs) - Severity: Critical and consumer impacted/infection risk: High
4. Data Isolation / Sandbox Escapes - Severity: High and consumer impacted/infection risk:: Moderate
5. Passive Network Interception / MITM Attacks - Severity: High and consumer impacted/infection risk:: High
6. Lock Screen Bypasses (Multiple CVEs) - Severity: Medium and consumer impacted/infection risk:: Moderate
7. iMessage / SMS Parsing Vulnerabilities - Severity: High and consumer impacted/infection risk:: Moderate
8. Location and Privacy Data Leakage - Severity: Medium and cconsumer impacted/infection risk: Moderate

Summary
I would say that one should consider iOS 6 compromised and avoid its use at all costs. financial apps, like banking, credit cards are starting to refuse older versions, not sure where iOS 6 sits, but they're clamping down. For consumers using such a device for general usage, i.e., email, browsing or any app that connects to the internet is a realistic threat is not hypothetical.
 
  • Like
Reactions: DurltazorOSXPower
I haven't looked too much into it, but there's apparently a kind of proxy service you can run on a computer which will serve old webpages from the Wayback Machine. I was thinking of setting it up for some nostalgic browsing on an old Mac, but I presume it could work on old iOS versions.

What websites are you trying to connect to?
For consumers using such a device for general usage, i.e., email, browsing or any app that connects to the internet is a realistic threat is not hypothetical.
Actually it's the opposite, no attackers are spending time crafting a vulnerability for such old systems. You'd be wasting time developing an exploit for 0.000001% of the population at which point your likelihood of gaining anything useful is similarly low. It's a kind of herd immunity, running older OSes while 99% of the population is on current. Besides, it's far easier to do social engineering attacks, where OS version and exploits are basically not a factor.
 
  • Love
Reactions: DurltazorOSXPower
Actually it's the opposite, no attackers are spending time crafting a vulnerability for such old systems.
That makes no sense.

They're not "coding" for old systems, they're probing systems and using attack vectors on systems looking for devices that have those vulnerabilities. Its not like a bad actor, is saying gee, let me try hacking this iphone 5. No, they're using established attack vectors on any system and they'll acheive that on un-patched systems
 
They're not "coding" for old systems
They have to code the malicious software, though. Depends on the individual CVE, most of them are theoretical and few attackers bother creating an exploit when patches are already being rolled out. The exploits that have been made have long since been taken offline in exchange for expliots which target much newer systems. I guarantee you no one is sifting through ancient CVEs thinking "oh look, here's something for iOS 6, let me spend time crafting an exploit which won't see a single device and bring me in zero dollars"
they're probing systems
Are you claiming that OP's iOS 6 device is publicly exposed to the internet, and is not behind a router?
using attack vectors on systems looking for devices that have those vulnerabilities
What does that even mean?
Its not like a bad actor, is saying gee, let me try hacking this iphone 5.
That's literally what you're arguing for. You're claiming someone is going out of their way to find an exploit for iOS 6, then find and target iOS 6 devices.
they're using established attack vectors on any system and they'll acheive that on un-patched systems
They're portscanning the internet for unpatched versions of ssh or windows XP running on publicly-accessible servers. In order to exploit the iOS 6 device, they'd have to craft a website OP wants to visit, craft the exploit itself, then manage to get it in front of them. Why would they bother with that when they can just craft yet another "microsofts have deteccted the viurs on your PC!!!1! call the number below to talk to microsoft certifed professsional" and get 100,000,000x more hits, 10,000,000x more victims, and make infinitely more money with basically no advanced skills?
 
  • Love
Reactions: DurltazorOSXPower
They have to code the malicious software, though. Depends on the individual CVE, most of them are theoretical and few attackers bother creating an exploit when patches are already being rolled out. The exploits that have been made have long since been taken offline in exchange for expliots which target much newer systems. I guarantee you no one is sifting through ancient CVEs thinking "oh look, here's something for iOS 6, let me spend time crafting an exploit which won't see a single device and bring me in zero dollars"

Are you claiming that OP's iOS 6 device is publicly exposed to the internet, and is not behind a router?

What does that even mean?

That's literally what you're arguing for. You're claiming someone is going out of their way to find an exploit for iOS 6, then find and target iOS 6 devices.

They're portscanning the internet for unpatched versions of ssh or windows XP running on publicly-accessible servers. In order to exploit the iOS 6 device, they'd have to craft a website OP wants to visit, craft the exploit itself, then manage to get it in front of them. Why would they bother with that when they can just craft yet another "microsofts have deteccted the viurs on your PC!!!1! call the number below to talk to microsoft certifed professsional" and get 100,000,000x more hits, 10,000,000x more victims, and make infinitely more money with basically no advanced skills?
Perfect placement, I usually avoid such a discussion without foundations.. The last one I had the guy was alerting the OP to do an update of his macbook that stopped on macOS catalina because he reported that macOs 10.15 was vulnerable only because it was old. Anyway.. in fact my use for iOS 6 is very little, I would just like to access some forums like macrumors and wikipedias, news sites I access using Reeder where I can follow the news of my city.
 
  • Like
Reactions: !!! and Isamilis
Perfect placement, I usually avoid such a discussion without foundations.. The last one I had the guy was alerting the OP to do an update of his macbook that stopped on macOS catalina because he reported that macOs 10.15 was vulnerable only because it was old. Anyway.. in fact my use for iOS 6 is very little, I would just like to access some forums like macrumors and wikipedias, news sites I access using Reeder where I can follow the news of my city.
Second this. Everyone’s usage is different, and only few of us are high profile individuals.
 
  • Like
Reactions: DurltazorOSXPower
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.