Hacker News Reader

Hacker News

Comment by joezydeco | Hacker News Reader

Parent Full thread

joezydeco

I got an alert this morning for an iOS update numbered 26.3.1(a).

(a)? This must be really bad.

View on HN

What device? I don't see anything beyond 26.3.1 on my iPhone 15 PromaxXDR™

The update can be found under

Settings > Privacy & Security > Background Security Improvements

There it is, and I've never seen that area before.

iPhone 15 (vanilla) running iOS 18.7.2. I now have a permanent notification on my lock screen nagging me to update to iOS 26.

Enabling beta updates for ios18 should kill the nagging notification.

But still only gets you to 18.7.3

I'm keeping it there to remind me to stay defiant against the shittier UI. I'll wait until they can put it on a user switch or create a more readable option for older users. Which will probably be 'never'.

I’m on the same boat. I was forced to update to the shitty UI at work, but not on my personal phone.

Same here. Which helped me confirm how bad it was.

redmagic 11 is almost 1000 usd cheaper than the s25.

> It can take over devices running iOS 18 that simply visit infected websites.

I wonder if this is supposed to be > iOS 18 or really just version 18?

It's in the source article (from Google Research group):

> DarkSword supports iOS versions 18.4 through 18.7

https://cloud.google.com/blog/topics/threat-intelligence/dar...

The source exploits continued to be patched with all of them patched in iOS 26.3

Oh, I was confused why the article was so short and chalked it up to it being some developing story. Turns out there's a "You’ve read your last free article." heading that hides the rest but it's not very obvious that there's an article hiding.

Impact: Processing maliciously crafted web content may bypass Same Origin Policy

Description: A cross-origin issue in the Navigation API was addressed with improved input validation.

WebKit Bugzilla: 306050

CVE-2026-20643: Thomas Espach

Unrelated bug as far as I can tell.

Reply on news.ycombinator.com