About the security content of iOS 12.4.9
support.apple.com
support.apple.com
I still have a working iPhone 5 (no S) with a home button that spins and a slightly broken screen bezel but no other issues.
At one point I thought it died permanently. But it turned out to only be the screen dimming to much. In bright light it auto adjusted enough to be visible, allowing me to rise the brightness.
Consider yourself unlucky and never buy a lottery ticket.
Apple is well-known for making products that last longer than most others in the industry.
I have a launch day iPhone 5 that gets daily use and still works fine as of this morning. Launch day was in September of 2012.
IIRC there's 128M of ram on the fist iPad.
The only problem I’ve had was a 2011 MBP have a gpu issue.
Only upside is the thing is built in such a way that it has barely taken any damage from the years of abuse I put it through.
I'm likely getting an iPhone 12 Pro Max very soon and will continue to only use the iPhone 5S I've had since 2013 as a backup.
if rated against _my_ body, the ratio is damn near perfect
I write iOS software, so I have a whole bunch of test units.
My "low-end" test unit is an iPod Touch (last gen). Basically, a skinny SE (Apple doesn't even have an iPod simulator -you're supposed to use an SE sim).
My regular daily phone is an Excess Max (XSMax). I'm sick to death of it. I don't have much use for all that screen real estate, and it's a big honkin' monster.
Every time I use my Touch, it makes me envious.
I'll be placing an order for a Mini, tomorrow.
The 5S was sold from Apple stores in India in mid 2017. So that's 3 years of updates from end-of-sale and this is an OS update for a 2 year old OS. So two years of support. Less than the Pixel.
It's part of why I went back to Apple.
For example in mid 2017 it was still officially sold by Apple in India (source: https://www.iphonehacks.com/2017/05/apple-iphone-5s-iphone-s...).
If I buy a new phone from the manufacturer and it's already unsupported, that's really bad. I don't care if it was supported for 8 years before I bought it.
Certainly not the Pixel phones, they get 3 years support from first launch only, and they're supposedly the gold standard for Android software support. It's pretty much the reason they exist. Yet after last sale support for the 5S matched the Pixel's from launch support, and we don't even know that this is the last update the 5S will get.
You can’t have your cake and eat it as well.
well in that case many cheap android phones/tablets would have negative support periods, considering they don't release any updates at all.
The support for MacBooks is actually great. Certain Late 2013 and Mid 2014 Retina MacBook Pros, while considered vintage, will be receiving the Big Sur update[2].
1. https://support.apple.com/en-us/HT201624 2. https://www.apple.com/macos/big-sur-preview/ (at the bottom of the page)
I think it's more likely that Apple's new frameworks don't require any fancy hardware features that aren't available in the Late 2013 MacBook Pros.
I wonder how much this might change when Apple Silicon comes to the Mac.
I find 5G (coverage on mid-band, not the hyped speed on ultra-wideband) to be the most compelling reason to upgrade my phone this year.
Mojave and higher isn’t “supported” on the cheese grater Mac Pro’s despite it running more than fine, including with FileVault 2 enabled on the boot volume (which an Apple exec tried to claim was technically not possible).
The 2010 and 2012 Mac Pros officially support Mojave with a compatible video card:
Install macOS 10.14 Mojave on Mac Pro (Mid 2010) and Mac Pro (Mid 2012) https://support.apple.com/en-us/HT208898
Although this appears to be the end of the line as there is no graphic acceleration support in Big Sur
I have an old Samsung tablet that doesn't work anymore. I could try to change the battery for 20€ or buy the cheapest tablet on Amazon for 40€
If they were serious about competing with Apple software is where they should focus.
We'd be better off with a more neutral title, like "fixing severe vulnerabilities" or something like that.
I agree that the title we ended up with is suboptimal! "Exploitable" is a word I'd have been comfortable seeing there. But you take the good with the bad with the HN title rule; the site is primarily about discussion, not about being a noticeboard, and titles determine the discussion we have.
https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...
It's not really that important, really. It's either being exploited yesterday, or tomorrow.
[1] https://arstechnica.com/information-technology/2019/09/for-t...
The article implies that before it was written that wasn't the case previously.
If a bad actor can derive just $10 on average per phone they attack, then all they need to do is find a way to deploy their $2-3 million exploit to 1 million phones for less than $5 million to make a tidy profit. Given that we are talking about zero-click remote compromises, which means the victim only needs to receive the payload, this means that it is profitable as long as the cost per victim impression is less than $5, a CPM of $5000. With that sort of budget you can embed your attack into an ad and then outbid everybody else by a factor of 10 for placements. You can buy a mailing list and embed your attack as a "payload pixel". If it is a zero-click text message attack then you can buy access to the spam-callers and mass deploy it that way.
These systems are between a factor of 10-100x off of adequate. To care about their relative differences is like debating whether paper mache or tissue paper is better at stopping bullets. One is probably better than the other, but neither provides meaningful protection, so it hardly matters. You need fundamental, qualitative improvements before differences between the solutions provide meaningful effects on outcomes.
[1] https://dqydj.com/average-median-top-net-worth-percentiles/
Yes?
Considering it was the measuring stick that person seemed to feel was important.
An important thing to know about the market for these things is that the "clearing price" of an exploit chain is usually a cap, not an actual price; you're paid in tranches, until the vulnerability is burned. You're hoping it isn't burned before all your tranches are paid.
That has implications for the hypothetical business model you've proposed.
Also, you can go directly to Zerodium's website, where, as of today, they are still paying more for Android exploits than iOS exploits[2].
[1] https://www.theregister.com/2020/05/14/zerodium_ios_flaws/
[1] https://www.statista.com/statistics/266572/market-share-held...
Variables appear to be size of user base, average disposable income, mean time to patch and number of competing exploits in the market.
Well, yes, its better than your average Android vendor. But on the other hand Windows 8 was released 2012 (i.e. about a year before iPhone 5s), and is scheduled to get updates until 2023. That is pretty serious longevity. And supporting handful of Apple devices must be comparatively simpler than supporting the hodgepodge fleet of Windows 8 devices.
8.1 on the other hand _is_ supported until 2023. [2]
The majority of 8.0 users immediately upgraded to 8.1 (because 8.0 was slightly terrible), so you're mostly correct. 10 years of support is pretty standard for Windows releases.
[1] https://docs.microsoft.com/en-ca/lifecycle/products/windows-...
[2] https://docs.microsoft.com/en-ca/lifecycle/products/windows-...
Being able to stay secured with the latest patches shouldn’t require one to be forced to get the unwanted memory/resource hogging “features” of newer OS releases.
It's good that users aren't going to risk getting hacked by such vulnerabilities, but its bad that users can no longer uses these exploits to gain administrative control over their property.
The fact that you're even being downvoted for this shows just how far the authoritarian control-freaks have taken over and brainwashed everyone with paranoia to jump right into their jail.
I was going to wait until the software on my pinephone was more mature but that pushed me over the edge to get power management working on my own and make sure it could make phone calls. I think dumping iOS has done a lot for my mental health and I'm glad to have left it.
I guess stress is personal, because this sounds way more stressful than anything I've had to deal with on iOS! And I say that as someone who'd like to get a more open (hardware and software) phone in the future.