New privacy research sparking interest on this reddit thread. I mean, why else would iOS 18.6.2 be pushed out so quick??
iOS TCC Bypass
iOS TCC Bypass
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
iOS 18.6 Report Shows Silent Access to TCC Data by Apple Daemons — No User Interaction Required
- Thread starter JustBecause
- Start date
- Sort by reaction score
Could be anything, this or other zero day or security findings that needs to be patched ASAP.
All right folks. I have an iPhone on iOS 18.1 and another one on iOS 18.6.1 that can be potentially updated to iOS 18.6.2
My knowledge has it’s limits, especially when it comes to using the terminal and its commands, but I’m not completely dumb, as I sometimes use it (last time I did, using the ping feature to check packet loss on a local network) after copying the commands properly.
With my Mac (on macOS 12.7.6) and a USB to Lightning cable, and your help if you’re interested in digging a bit more about this, I can try to follow the steps and replicate the behaviour on each of the versions. If it’s not too complicated, that’s it.
My knowledge has it’s limits, especially when it comes to using the terminal and its commands, but I’m not completely dumb, as I sometimes use it (last time I did, using the ping feature to check packet loss on a local network) after copying the commands properly.
With my Mac (on macOS 12.7.6) and a USB to Lightning cable, and your help if you’re interested in digging a bit more about this, I can try to follow the steps and replicate the behaviour on each of the versions. If it’s not too complicated, that’s it.
Here’s another fake report by the same bogus “researcher“. https://news.ycombinator.com/item?id=44933435
Vulnerabilities reports are being spammed with AI-generated slop. Sad
Vulnerabilities reports are being spammed with AI-generated slop. Sad
Wow… now I really don’t know what to say. I was worried but now, if GPT generated reports start flooding or interfering with real research, that’s an even bigger worry.
Honestly, as someone who’s not a tech security expert, I was willing to do my part by methodically replicating the explained procedure to try to reach my own conclusions, and only if I found out that this is happening in 18.6 and not in 18.1 then worry about it. I’ll see if tomorrow I have time and will to do it.
Thank you for sharing this in a respectful way!
