11 ms·
Apple specifically introduced BlastDoor framework to combat this, so NSO shifted their attacks around decoding, avoiding BlastDoor.
by flixic 5y ago
Apple specifically introduced BlastDoor framework to combat this, so NSO shifted their attacks around decoding, avoiding BlastDoor.
- arsome 5y agoAndroid 10 also introduced similar mitigations: https://android-developers.googleblog.com/2019/05/queue-hardening-enhancements.html https://android-developers.googleblog.com/2019/05/queue-hard... Though it's worth noting that the cost of Stagefright was surprisingly low - it took a long time for a good ASLR bypass to come out for it and by that time most devices were updated or replaced. Additionally, the sheer variance between Android devices means developing worm-level exploits becomes extremely difficult compared to something where everyone's running the exact same binary like Windows, so it likely only saw targeted use.