Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

https://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.html

Paradigm Shift’s usbliter8 exploit targets Apple A12 and A13 SecureROM via USB DFU mode, creating an unpatchable hardware risk.

93 points · 16 comments · view on lemmy.world

16 Comments

Flatfire@lemmy.ca · 19 pts · 40d

Seems like exactly the kind of exploit that could be used in a jailbreak process. Curious to see what else gets done with it

wyldrstallyns@lemmy.dbzer0.com · 11 pts · 40d (1 reply)

🎻

Sunshine@piefed.ca · 7 pts · 40d

Oh no not Apple’s highly profitable walled garden!

LiveLM@lemmy.zip · 10 pts · 40d

Hooray more jailbreaks!

quick_snail@feddit.nl · 2 pts · 40d (2 replies)

This requires physical access. I don't get it, why is this bad?

Someone with physical access can already pull out the disk, clone it, and put in a different disk that boots to an identical looking login, but which actually relays the password back to the attacker.

What more would this exploit allow an attcker with phsycal access that they wouldn't already have before this exploit?

Stiggyman@ani.social · 4 pts · 39d

Disk? This is iPads and iPhones shits soldered on there typically right next to or inside the SOC

LemmyEntertainYou@piefed.social · 2 pts · 39d

People store a lot of sensitive information on their phones and iPhones are big targets for phone theft. Physical access is quite easy once the device is snatched from the owner's hands.

mufkin@lemmy.zip · 2 pts · 40d

Jailbreakme! Please.

quick_snail@feddit.nl · 0 pts · 40d

I think people already install Linux on those arm macbooks, no?

TachyonTele_Esq@piefed.social · -13 pts · 40d (6 replies)

Holy shit you do know how to use the title field when creating a post! Good job

wizardbeard@lemmy.dbzer0.com · 3 pts · 40d (4 replies)

What the hell are you talking about? I've checked OP's post history and everything has proper titles. Checked your comment history and the last post they made that you brought this up on likewise has an accurate title, and I'm not seeing any evidence that it was edited after posting.

Most of all, why waste time complaining about it? Just block and move on with your life.

TachyonTele_Esq@piefed.social · -8 pts · 40d (3 replies)

(content in post) is not a title. Funny how they changed their posts after I said something lol

wizardbeard@lemmy.dbzer0.com · 2 pts · 40d (2 replies)

I've legitimately never seen this user post with that as the title, and I'm not seeing evidence they changed it.

Take screenshots next time or block them, because you look like a nutter.

TachyonTele_Esq@piefed.social · -1 pts · 39d (1 reply)
wizardbeard@lemmy.dbzer0.com · 4 pts · 39d

Except all of those have titles outside Piefed buddy. Check the original instance directly, or from any Lemmy instance.

It looks like this is an issue with Piefed not properly getting post titles from other instances, so maybe next time you can stop being an aggressive asshole.

rimu@piefed.social · 2 pts · 38d

There's a bug in PieFed. Take it easy.