It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-(
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware…
I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
How are running local ones going to become cost prohibitive? Indications are that Nvidia has been channel stuffing (artificially inflating perceived demand), which suggests massive oversupply of GPUs.
You do understand the reasons right? iCloud, iMessages etc are an interplay of software in your device, software in cloud and some networking. They have to work together. A jailbroken phone can have a tinkered iMessage app. Supporting tinkered / unsupported versions is more overhead / possible security risk. Why would you expect them to take on that?
> even if I jailbreak my iOS and never let it update.
Two things:
a) Why the would you never want to update an OS in this day and age ?
b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:
- Increasing volumes of increasingly sneaky security exploits on one side
- A phone with your 2FA apps, your banking apps, your email apps, your kids photos on the other
Frankly. I want Apple to lock down my iPhone as much as possible in that context.
If I want to be root, I can do so on my desktop or a cloud VM or whatever.
But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.
> Maybe your phone doesn't have banking and stuff on it
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
> a) Why the would you never want to update an OS in this day and age ?
Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.
We gave in because open source and hobbiests do not design good products and even worse shared systems, as much as they enjoy self-righteously declaring their values. And shared systems require trust, planning, and goal setting in a way no open system would ever build.
1) They of course lack the resources
2) Often lack professional displince across all skills required
3) Mostly make for themslves or whats interesting, not whats needed.
Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness.
My favourite part from the first video is how much effort it took to drag up from the bottom of the screen to get back to the home-screen. This reflects my experience with how iOS handles touch gestures in general.. also super easy to accidentally activate "Reachability" mode!
Subverting the secure boot/upgrade chain would require a SecureROM exploit and presumably a compromise of the Secure Enclave, so the answer is almost certainly "no" (even prior major exploits from recent memory like usbliter8 are tethered and don't exploit the enclave; the last true untethered Jailbreak was iOS 9 or something.) An upgrade would fix it. The internet reporting claims this break they are showing in this video is untethered though, which is extremely rare on its own.
The videos sort of imply that these are userland rather than bootrom, whatever payload they have running is getting hit before first unlock, which isn't a lot of surface. They specifically say to not update which pretty much confirms where the attack surface is. Somewhere after the kernel starts but before the main user space is unlocked with the passcode.
Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone).
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
PDFs are basically executables, that's why it's hard. They support running code, they support decoding images which themselves have their own custom compressors that are basically code. Anything to do with image formats is rife for bad decoders, insane compression algorithms from the 90s, and a PDF is basically 1000 formats inside many different container types with executable code plastered on everywhere. If you want to make a compatible PDF viewer you'll need to be able to implement an image decoder algorithm for a fax machine that was specific to Japan in the late 80s, which was somehow ratified into a standard and is used today by all the top legal firms, or something absurd like that. When you open a PDF on your computer, depending on how it is being parsed, it can even make outbound network connections without you knowing. To safely open a PDF you need one of those bomb proof suits, a disposable laptop, and even then you might be going home without eyebrows.
That isn’t really true, it’s not hard for PDF viewers to block by default (or just not implement) the problematic features, which also aren’t critical for the vast majority of PDF files.
The exploitable bugs are typically the usual, some buffer overflow in an underlying image or font library or similar, but unrelated to PDFs being “executable”.
What a sleight of hand. PDF's are obviously not executable, any more than text files are. Decoders are executable and they can choose to unsafely handle input. Even plain text editors can have exploits. It's no different than any piece of complex software.
The characterization of the PDF format specifically being “basically code” in any substantial manner is simply incorrect. The only PDF-specific feature that reasonably meets that description is the PostScript support, which has fallen out of use decades ago and was completely removed in PDF 2.0.
Willing to bet that a default "treat PDFs/documents/spreadsheets as dumb" option in operating systems would eliminate the majority of common one-click vulnerabilies out there. And exactly 0.001% of actual use cases would be affected.
That's kind of what Adobe does with downloaded PDFs, you have to click the Enable button to turn on more document features. My schematic capture app will output a PDF that has links that will take you to specific spots on a page and also some JavaScript where you can right click on a part and see it's BOM information. None of that stuff works until you click the Enable button. I've also seen some vendors offer not only normal 3D model files and 2D drawings but a PDF that has an interactive 3D model inside. It's kinda cool how much random shit can go into a PDF but it's clearly a massive malware vector.
One neat thing I've seen is a PDF that will ping an IP catcher when opened in Adobe, regardless of the security level. The same can be done with word docs, excel spreadsheets, and even SVGs.
This is one of the things iOS's Lockdown Mode does. I wish the features of Lockdown Mode were able to be enabled individually instead of a single all or none option.
PDFs are just absurdly complicated in general. Dumbing down the parser might be the right idea. I wonder what consequences that would have with how intertwined PostScript and PDF in general are with macOS/iOS; maybe that's why the PostScript engine was removed with macOS Sonoma/iOS 17? I don't know if that was only user facing behavior and Apple is still working to remove the internal usages.
I read it more as "don't implement JS, 3D object rendering, slideshow transitions, sound annotations and the other 999 insane features that I'm not even aware exist"
I think he just means disable any of the "advanced" features mentioned above like accessing web content, running custom scripts, etc etc. You might still be vulnerable to any dependencies they use for image rendering itself but I bet it would make it drastically more safe.
Then just have a button for turning those on as needed on a case by case basis
From the standpoint of a layman it looks like there's a lot of overlap between writing safe web browsers/engines and writing safe PDF readers/engines. There just hasn't been anywhere near as much of an impetus to push PDF readers/engines in that direction because most of us aren't interacting with PDFs nearly as often as we interact with the web (and things built on web tech).
I can 100% guarantee that we'll have comments from people saying they buy iPhones specifically because of the walled garden and the last thing they want is a jail broken device. On a website called Hacker News.
I can root my Android phone and have in the past, but I have absolutely no desire to do so now because it adds almost no functionality in exchange for a very large security risk. I consider rooting my phone in the past quite a foolish move by someone who didn't know better.
Earlier today on the thread about the google play store apocalypse I posted a comment saying that I like some things about life in Apple's walled garden. But I still upvoted the parent comment because it's true and it's funny.
Also I'd happily jailbreak my iPhone and put an alternative OS on it to extend its lifespan. I'm a living human with nuanced opinions and I'm allowed to like more than one thing.
I got curious when you mentioned "google play store apocalypse", but I can't seem to find a comment of yours on the topic today. Would you be willing to post a link?
I'm glad to confirm your suspicion. I like to have both a walled-garden phone and several open-platform computers. They do two completely different things for me.
To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.
I want the same kind of phone. But I reject the premise that it's impossible to have a deeply nested "De-wall this device yes I know what I am doing yes I confirm I'm about to really open myself to issues if I don't understand the implications" settings option without compromising the walled mode security.
The point is that no one forces you to jailbreak your iPhone. If you like the walled garden - great! Keep using it! But I've been in plenty of discussions where iPhone users are literally against jailbreaks at all and in any form.
But to jailbreak you need to stay on an older iOS version (because Apple patches the bugs enabling the jailbreaks). And that means you don't get security updates.
Having control over one's device and allowing anything and everything to have free reign on said device are two different things.
I'd love to have more control and customizability that the user can initiate, but random executables shouldn't be able to so much as sneeze without my permission. Third party software (yes, even the FLOSS variety due to issues such as supply chain compromises) must be treated as adversarial by default, anything less is foolishness.
I converted to an iphone 13 mini (from the S24 Ultra) after being on Android since the release of the HTC Desire in 2010. I used to install custom roms and tweak everything on all of my Android phones which actually lead me to the iphone because I realized I wanted a phone without all the OE clutter and Google crap. The only clutter on the iphone is icloud which stays out of the way and doesn't annoy me with subscription messages. Also I don't have time to fuck around with modifying my phone. I just want everything to work without user intervention.
"No one forces you..." is an interesting line to go down in the comments of an article that focuses on using messaging apps to deliver exploits to a cellphone. It's pretty malware adjacent. Isn't that sort of thing how Jamal Khashoggi and his friends, family, and coworkers were hacked before his murder/execution?
Uhh, what? Clearly nobody is arguing that "arbitrary remote execution is good." Apple could easily satisfy everyone by simply allowing users to unlock their own bootloader.
I'm for being able to hack your own device to do whatever you like with it, preferably without active resistance from its manufacturer. I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
> I'm against anybody who can convince you to open a PDF being able to hack your device to do whatever they like with it.
Who is saying this part?
Asking for an open device does not mean supporting malicious hacking of others. This is the single biggest false equivalence used by Apple and the rest of the industry to keep a closed ecosystem and restrict users' control over stuff they paid for. And people continue perpetuating it for some reason.
Nobody said exactly that, but your first comment pointed out how cool the capability is without acknowledging that it is trivial to exploit maliciously.
We're on the same side here. I daily a Pixel with LineageOS and root.
Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
A reminder for people who don't follow this, Calif is Thai Duong's firm. Thai discovered the BEAST and CRIME TLS attacks (with Juliano Rizzo), and then worked at Google for a bunch of years, including on Wycheproof with Daniel Bleichenbacher. The team at Calif includes lcamtuf, Dion Blazakis, Tavis Ormandy, and Stefan Esser (among many others).
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
Craziest part is it was never even intended to be a programming language. From the Wikipedia page, the founder Rasmus Lerdorf is quoted as saying:
"I don't know how to stop it [...] there was never any intent to write a programming language [...] I have absolutely no idea how to write a programming language [...] I just kept adding the next logical step on the way."
And 23 years later here we are with php2shell and it powering 70% of the internet’s websites
It would make me so happy if this would allow running UTM.app with Hypervisor support on iPadOS. I don't want to travel with two devices, the would be enough, but sometimes I need a real desktop. Apple, of course, wants you to buy two devices. I do have UTM with Jit Linux running on my iPad, via altstore and entitlements and so on, but it is all a bit complex and still fairly slow.
why do we see pdf viewer exploits on ios when we have sandboxing mechanisms nowadays like wasm? Or is this exploit accounting for the sandbox breakage?
I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.
If this continues I'll argue that you have to be absolutely insane to allow network connected electronics into your home in the future. This is Apple, known for locking down their device to the extreme, and yes some people would love to use this for jailbreaking their phones, other organisations want to root your phone for .... other purposes.
Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.
There's every incentive for nation states and other espionage outfits to keep these types of exploits under wraps. This has probably been the new normal for some time ..
I for one have experienced multiple lifetimes worth of internet madness and will be looking to airgap / disconnect as many devices as I can get away with.
I think in time (a few years) the gap will close a bit. As AI is used to harden software, it will be harder to break. Software not validated by AI will continue to be vulnerable to it.
So what happens if AI becomes something that you need to actually pay real money for? Then only Apple, Google and Microsoft can affort to do network exposed software. Smaller companies and solo developers are just f-ed if the price of running LLMs goes up as investor money dries up.
Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
iOS does sandbox their processes really well, that's why this hack was as difficult as it was. The Safari thing you're talking about is JIT - iOS disables all runtime code generation across the system except in Safari (for JavaScript), but this is a completely separate thing from sandboxing.
A couple of PDF exploits from iMessage and Signal leading to code execution, and an app that roots the phone. Also, they seem to have managed to make their malware survive a reboot, which is difficult. That's another reason why automatic reboots are considered a security feature: exploits leaving malware in-memory are a lot easier to build than malware that survives a full reboot, passing all stages of signature checks and validation.
Slightly offtopic but I find it slightly funny that they have accomplished to hack the iPhone yet the name of the third video is: Can you iPhone do this?
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
The paradox is that if the models are restricted, more exposed software will exist. I'm not convinced you can make a model that allows you to build secure software without it also being able to build exploits.
If the current frontier allows for this, we can probably expect alternative models to reach the same spot in a matter of months as well. The cat's out of the bag, for better of worse.
Too bad this will be patched instead of allowing the device owner to control their own device.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."
It's better to use 0-day exploits to install legitimate software by now. It saves everyone from a lot of hassle. Or, more realistically for most, make a web app and forget about native apps.
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware… I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
You shouldn’t have to use LLMs to run your software.
Give it another 6-12 months until the big AI shops shut those capabilities down and running local ones becomes cost prohibitive.
Apple is too big for that. Hard regulation is the only way out right now. Maybe breaking them up too.
The local inference threshold has been crossed already. Its possible to achieve big model like performance through agent harnesses with local models.
If Murican lobbying/corruption tries to snuff AI that threatens the Hutt cartels, China will accelerate it.
Two things:
a) Why the would you never want to update an OS in this day and age ?
b) I understand the perspective of people insisting on wanting to be able to root their phone. But how about we take a step back and look at the reality of the 2026 security environment ? An environment where you have:
Frankly. I want Apple to lock down my iPhone as much as possible in that context.If I want to be root, I can do so on my desktop or a cloud VM or whatever.
But making root on a phone easy just seems like a recipe for disaster... if its easy for you, its easy for the bad guys too.
I don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
Or why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)
Because updates break the jailbreak. If Apple actually had a sanctioned way to let you do what you want with the device you bought there would indeed be very little reason to not update.
1) They of course lack the resources
2) Often lack professional displince across all skills required
3) Mostly make for themslves or whats interesting, not whats needed.
4) The release schedule is laughable at best.
https://projectzero.google/2022/03/forcedentry-sandbox-escap...
https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg...
So pdf and images are the best vector for iPhones.
Once you escape the parser you have to reach and escape the sandbox and from there reach the kernel.
Also, if reachability bothers you like it does me, you can disable it.
This really blown my mind, and seem the 1/2 video is installed a app by click pdf link?
I guess and hope there will be update from apple quickly
Like we did on HTC G1s in 2008
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
That isn’t really true, it’s not hard for PDF viewers to block by default (or just not implement) the problematic features, which also aren’t critical for the vast majority of PDF files.
The exploitable bugs are typically the usual, some buffer overflow in an underlying image or font library or similar, but unrelated to PDFs being “executable”.
One neat thing I've seen is a PDF that will ping an IP catcher when opened in Adobe, regardless of the security level. The same can be done with word docs, excel spreadsheets, and even SVGs.
https://support.apple.com/en-us/105120
Then just have a button for turning those on as needed on a case by case basis
I don't think Apple's PDF renderer supports e.g. running JS, you'd need real Acrobat for that. Or are you talking about something else?
> they support decoding images which themselves have their own custom compressors that are also basically code themselves.
But this is fundamentally true for anything that displays images, right? Or are the PDF formats particularly bad for some reason?
Also I'd happily jailbreak my iPhone and put an alternative OS on it to extend its lifespan. I'm a living human with nuanced opinions and I'm allowed to like more than one thing.
To be honest, I'd like my open computers to be even more open and hackable, with a secure boot path that doesn't involve any mysterious unpatchable embedded firmware or auxiliary CPUs, but we are slowly getting there with RISC V.
But to jailbreak you need to stay on an older iOS version (because Apple patches the bugs enabling the jailbreaks). And that means you don't get security updates.
I'd love to have more control and customizability that the user can initiate, but random executables shouldn't be able to so much as sneeze without my permission. Third party software (yes, even the FLOSS variety due to issues such as supply chain compromises) must be treated as adversarial by default, anything less is foolishness.
They do have good hardware, but surely the hacker in you is a little sad using an IPhone!
Who is saying this part?
Asking for an open device does not mean supporting malicious hacking of others. This is the single biggest false equivalence used by Apple and the rest of the industry to keep a closed ecosystem and restrict users' control over stuff they paid for. And people continue perpetuating it for some reason.
We're on the same side here. I daily a Pixel with LineageOS and root.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
I love these people and everything they're doing.
Edit: hahaha you guys are funny. “The php hack” is what I meant!
"I don't know how to stop it [...] there was never any intent to write a programming language [...] I have absolutely no idea how to write a programming language [...] I just kept adding the next logical step on the way."
And 23 years later here we are with php2shell and it powering 70% of the internet’s websites
https://en.wikipedia.org/wiki/Chicken_(Scheme_implementation...
/ducks and runs
Insecure webpages, broken certificates and an insecure PDF library... You shouldn't have anything more connected than an FM radio at this point. Security is no longer something a private individual can deal with.
They can still hack your mind with ads.
I for one have experienced multiple lifetimes worth of internet madness and will be looking to airgap / disconnect as many devices as I can get away with.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
I think we have a right to know.
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
More recently: iPhone Duo Jailbreak vid https://x.com/calif_io/status/2113570095549337977 (https://news.ycombinator.com/item?id=50206680)
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
This "there will be literally no difference between apple and Google in 70 days" is great propaganda for Apple.