• tias@discuss.tchncs.de
    link
    fedilink
    arrow-up
    3
    ·
    12 days ago

    If the phone saves its state before rebooting, why would that help? It will still be accessible after the reboot. What’s the attack vector?

    • chirospasm
      link
      fedilink
      arrow-up
      14
      ·
      edit-2
      12 days ago

      Features like this exist for putting the phone back at rest when there hasn’t been a successful unlocking for X hours – GrapheneOS, an Android OS, has a similar feature. The objective is to limit the window of time an attacker has to try to exploit anything the phone may have in operation during a not-at-rest state (when the user is still ‘logged in’ to the phone, certain background services / features may be available to exploit).

      Rebooting automatically, especially if the phone not has not been successfully unlocked recently, may place the phone in a less exploitable state, as those services / features might not be available without logging in first.

      • davelA
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        12 days ago

        They had spyware, anyway. We don’t know that it still works.

        As of March 2023, Pegasus operators were able to remotely install the spyware on iOS versions through 16.0.3 using a zero-click exploit.

        The current version of iOS is 18.1.0.

  • dingdongitsabear
    link
    fedilink
    arrow-up
    1
    ·
    12 days ago

    anyone knows how to accomplish similar with LineageOS? I had a programmable power off and on timer ona Samsung S3 a long time ago, but that’s missing from the current builds.