#iphone

At the Hexacon security conference in Paris, the security firm Calif showed four demonstrations against Apple's iPhone 18, which Calif CEO Thai Duong lists in this order: an attack through the Signal messaging app (labelled "1-click"), one through Apple's iMessage, and two showing a jailbreak that gains the highest level of control and keeps it after a reboot. Calif has not published the vulnerabilities; its post says "everything will be released in due time."

In a VnExpress column, Duong writes that Apple's head of security introduced Memory Integrity Enforcement (MIE) at the same conference a year earlier, that Apple offers a $2 million bounty for a successful iPhone hack, and that Calif bypassed MIE on a MacBook in April before turning to the iPhone. He credits the work to Dion Blazakis, Anna Groza and Stefan Esser. A Calif researcher also found the recent "php2shell" PHP flaw.

The demo post dates from Calif's October 16 talk and reached the top of Hacker News a week later, where commenters noted the timing and wondered whether jailbreaks could revive older devices.