Thread 106346910

>"iOS 18.6 - Undocumented TCC Access to Multiple Privacy Domains via preflight=yes"
https://github.com/JGoyd/Undocumented-System-Behavior-in-iOS-18.6-Silent-TCC-Bypass-and-Data-Movement
https://seclists.org/fulldisclosure/2025/Aug/5

>Covert access to biometric, microphone, calendar, and contact data
>Not visible or controllable via Privacy Settings
>User cannot audit, deny, or revoke this access
>Suggests behavioral profiling or device telemetry below user awareness
>Potentially violates GDPR/CCPA data processing regulations

iTODDLERS BTFO

>>106347643
basiert

LOL WOWIES LOL SHOULD HAVE BOUGHT A PIXEL AND INSTALLED GRAPHENEOS LMAO!

>>106346910 (OP)
>The Anti GOS shill isn't spamming in this thread
Weird how he's ignoring this one, isn't it?

>>106348477
probably the anon as the apple poster that rages about not being indian, used to post the same 2 or so images over and over again until anons started documenting his mental illness.

>>106346910 (OP)
so... an old OS version has an exploit? something that already got patched?
whoa I'm switching to android

>>106346910 (OP)
...but where's the exploit?
"apple can transfer data and you can see it in logs if you have physical access to the unlocked device" isn't exactly unexpected behavior

>>106346910 (OP)
Wake up, babe! New fake ChatGPT-written """advisory""" just dropped! The other repos have shady PDFs instead of PoCs, and the Python scripts are hallucinated nonsense. Very legit!

Now watch this get memory holed or coped into normalcy

>>106349854
>already got patched
yes, after this jewish man found the backdoors.
>old
this os version tsn't old. this version was released in july 2025. the update to patch this shit was 3 days ago.

>>106350232
> ramashit not coping at all

>>106350494
it's not like how it was years ago. these things now get a lot more attention

>>106350545
>it's not like how it was years ago. these things now get a lot more attention
Yeah, uh. Quite the outrage ITT.
Thought with so many apple fanboys it would be full of discussion haha.

>>106347670
this but unironically

>>106346910 (OP)
Is it real? Looking around online it seems it might be faked with AI, and no one else has confirmed it... the same researcher wrote about a bluetooth vulnerability in a previous iOS version that also got no coverage or corroboration and also was claimed by others to be fake.
>>106350545
>the update to patch this shit was 3 days ago
I think from what I can see at least publicly, Apple has not patched this or even acknowledged it.
>>106350545
>these things now get a lot more attention
You'd think so, wouldn't you?

"modern" apple has that distinct facebook boomer aura now
it's unironically over for them.
Jobs knew how to keep their image at the forefront.

>>106347643
bastiat

>>106350545
Not even orangesite accepts this slop. The vulns are fake, just because you put some daemon names in bold and write "CVSS 9 Preliminary Critical" does not make you LE EPIC HAXXOR!!

>>106353288
>Is it real?
it's real. you can try it yourself if you have an imolestor device and ipajeetbook

>>106355418
> seething this hard
> orange reddit
shitting street: designated and overflowing

>>106346910 (OP)
>they found the mossad backdoor
I KNEEL

>>106355467
This does not look like truth to me; and most, if not all, people have not ever believed your posts. All you can do is post shitty jeet macros.

There are more things which you are hiding than answering truthfully, especially considering that I have spotted you on multiple sockpuppet accounts on Reddit and HN reposting the same thing over and over again. Using AI for majority of your posts and comments shows that you are being lazy.

Why is CVE-2025-31200-iOS-AudioConverter-RCE (May 2025) a plagiarized work of https://github.com/zhuowei/apple-positional-audio-codec-invalid-header (April 2025) where the original creator was credited in CVE-2025-31200?

And in your previous posts: you mentioned that on your personal iPhone, Apple was sending data to their own servers and you ended up listing a private (localhost) IP address which no one has access to? Why is that?

>>106346910 (OP)
could be also to secure you're data

>>106347643
basko

>>106346910 (OP)
Anon, but that's nothing new, backdoors are everywhere just accept that and live with that.
Societal order is literally ducktapped together with backdoors.
Privacy is dead anon, get over it.

>>106347643
AYY LMAOOOOO ANON ACTUALLY THINKS THERE'S NOTHING LIKE THAT IN HIS JETDROID AHAHAHAHHAHAHAHAHAHAHAHAHHAHA
AHAHAHAHAHAHAHAHHAHAHAHAHAHAHAHAHAHAHHAHAHAHAHAHAHAHAHAHAHAHAH
(I don't own any apple devices)

iTODDLERS BTFO

>>106356193
link a public one retard

>>106358154
kek

>>106346910 (OP)
Do people realize that Apple is a PRISM partner or did everyone just forget about that?

>>106358029
bass

>>106346910 (OP)
only the most evil people on planet earth want to antisocialize iphone users.

pure raw serial killer evil.

>>106363028
schizo post

>>106346910 (OP)
TCC doing preflight on core domains isn’t new, doing it with client_dict=null across FaceID/mic is. Looks like a policy probe layer, not data pull. Apple’s line will be “capability check,” but the breadth + repetition screams telemetry gating.
If you want to see it without USB, enable sysdiagnose and grep com.apple.TCC in the tar. Cross-check with tccd and the usual suspects: biometrickitd, mediaserverd, proximitycontrold. Watch for paired spikes in aggregatedd.
Mitigations right now:

kill background analytics: defaults write com.apple.SubmitDiagInfo AutoSubmit -bool false (Mac side MDM profile for iOS), nuke Significant Locations, disable Siri suggestions.
block trustd/apsd/analyticsd on Wi-Fi with a DoH firewall profile. You’ll lose push. Tradeoff.
Short term: Lockdown Mode reduces some daemon surfaces. Airgapped Focus + no Face ID = fewer preflights observed.
If this is ATT/usertracking preflight, EU regulators will have a field day. Save your logs, hash them, timestamp with opentimestamps. If Apple says “expected behavior,” ask them for the DPIA.

>>106358029
basted

Apple patched this in one day while jeetdroid gets security patches in 3 years

>>106358029
bingo

>>106358029
told them

>>106364950
apple didn't patch this.
nor did anyone prove that system level daemons having system access is a security issue. that i can answer a phone call without having to grant any mic permission is not a security issue.

>>106350494
fox btw

>>106358029
belarus

>>106363674
>TCC doing preflight on core domains isn’t new
>>106366440
>nor did anyone prove that system level daemons having system access is a security issue
it's a big security issue. anyone being able to plug your iphone into any mac and then have access to this info, that nobody knows is there, is not a feature or you're using it wrong moment.

>>106364950
> seething street shitting sex offender can't post on /g/ any more because everyone knows who he is
nice one rajeesh. post the same 3 or so images again if you could.