I am very excited for sideloading to get implemented in the EEA, since that'll make this much easier.
Just think about that. Apple has successfully made hardware that they can distribute to 1 billion+ people, many of whom have something to gain by jailbreaking, yet not a single person has managed it.
Furthermore, to achieve what the jailbreak community would consider a usable jailbreak, you need to string together several different vulnerabilities or bypasses into a single exploit chain. Nation-state actors will settle for just attacking iMessage directly, which gives them all your text messages, but is entirely useless for loading unsigned code or injecting tweaks into apps.
To make matters worse, the UK is mulling a bill that would give them veto rights on security updates, specifically so that their old exploits would continue to work until they've bought new vulns.
I keep pcap files of all my network traffic to protect myself against this. If anyone has been targeted by the NSA and can send me example traffic, then please do.
I so far haven't caught anyone doing anything nefarious, but with terabytes of traffic logged it's a bit of a needle in the haystack task. I keep the logs, because even if now their traffic is well hidden, I'm sure future analysis techniques will reveal them if they're there.
How does this work if you receive the payload via HTTPS? Do you MITM all your apps? (advanced version: can the payload be encrypted using an application-level Diffie-Hellman? e.g. if a JavaScript does a DH exchange and decrypts the payload with it)
What tooling do you use to record the VM? I'm unable to, with simple googling, find any tooling for VMs to do this, with all my results either being point-in-time snapshotting or video recording related.
How much data does that generate in a month?
No offense, but this claim just sounds fantastical to me.
It also works without all that but doing so is just the slowest of the 3 ways to run it.