Hacker News Reader

iMessage is not being attacked because it's not as sandboxed as other apps. It's being attacked because it's accessible with zero clicks.

For an attack like this you need to chain an iMessage exploit with an LPE, and the LPE can be launched from any other app.

View on HN

LPE. What is an LPE?

Not sure, but it might mean Local Privilege Escalation. It’s one thing to take control of the iMessage process, it’s another to then gain kernel level access.

Yes, it means local privilege escalation.

In this case it might not be necessary to escalate privileges, as iMessage itself may have been the target.

Reply on news.ycombinator.com