Top all-time · #4851
Jamf Blog
Company blog · blog.zecops.comsecurity
Jamf Blog is the company blog at blog.zecops.com, writing about security. Since 2019, 16 different Hacker News readers have linked it 17 times, most often “iOS Mail Vulnerability”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
HN readers link this Jamf/Zecops research blog for write-ups of iOS, macOS and Android vulnerabilities, such as zero-click iMessage and Mail bugs, and techniques for persisting across device reboots.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- iOS Mail Vulnerability4 people · 4 mentions · first linked 2020-04-25
- You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild3 people · 3 mentions · first linked 2020-04-22
- The Ultimate Persistence Bug Noreboot2 people · 3 mentions · first linked 2022-01-12
What Hacker News says?
Depends where the vulnerability lies. Plenty of iMessage DoS attacks [1-4] have targeted CoreText, which, I believe is written in C and CoreFoundation. I think all of these DoS attacks could be mitigated by not viewing the message and disabling message previews in notifications. [1] https://habr.com/ru/post/191654/ [2] https://appleinsider.com/articles/15/05/27/bug-in-ios-notifi... [3] https://blog.zecops.com/resear…
Comment linking /research/analyzing-the-ios-telugu-crash-part-i/
on “Apple iMessage Zero-Click Hacks”Submitted You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild as a story · 273 points
HN discussionfor a great example of this just have a look at the following macOS privesc the source of which came with the handy comment "deal with OOB". https://blog.zecops.com/research/from-a-comment-to-a-cve-con...
Comment linking /research/from-a-comment-to-a-cve-content-filter-strikes-again/
on “Plotting the source code “TODO” history of the most popular open source projects”Submitted WiFiDemon – iOS WiFi RCE 0-Day Vuln, and a Zero-Click Vuln That Was Patched as a story · 51 points
HN discussion> “A device capable of installing unverified software with an increased potential to introduce security vulnerabilities into the OS” is another. The jailbreak community is usually quick in introducing patches for security vulnerabilities. The most recent Mail bug [1] had a patch released 29 days ago [2]. Apple only introduced a fix in a 13.4.5 beta, and it's unsure if the same fix was put into 13.5 [3]. Admittedly,…
Comment linking /vulnerabilities/youve-got-0-click-mail/
on “Unc0ver Jailbreak for iOS 11.0 to 13.5”Submitted NTFS Remote Code Execution (CVE-2020-17096) Analysi as a story · 8 points
HN discussionTechnical details at https://blog.zecops.com/vulnerabilities/unassisted-ios-attac...
Comment linking /vulnerabilities/unassisted-ios-attacks-via-mobilemail-maild-in-the-wild/
on “Flaw in iPhone, iPads may have allowed hackers to steal data for years”Submitted The Ultimate Persistence Bug Noreboot as a story · 3 points
HN discussionLong-pressing an iPhone power button brings up Siri. And malware can diguise the behavior of an iPhone to pretend that it rebooted. https://blog.zecops.com/research/persistence-without-persist...
Comment linking /research/persistence-without-persistence-meet-the-ultimate-persistence-bug-noreboot/
on “Android 14's user-profile data bug seems indistinguishable from ransomware”Submitted Task for Pwn Zero as a story · 3 points
HN discussionThat's not the most reliable way to make sure it rebooted. https://blog.zecops.com/research/persistence-without-persist...
Comment linking /research/persistence-without-persistence-meet-the-ultimate-persistence-bug-noreboot/
on “Android Devices with Backdoored Firmware Found in US Schools”Submitted Exploring the Exploitability of “Bad Neighbor”: The Recent ICMPv6 Vulnerability as a story · 2 points
HN discussionThis is the specific one I was thinking of: https://blog.zecops.com/vulnerabilities/youve-got-0-click-ma... At least the BSI in Germany seems to think it’s serious enough to warn people about it (sorry, no English language link for this): https://www.heise.de/mac-and-i/meldung/Mail-Bugs-BSI-warnt-v...
Comment linking /vulnerabilities/youve-got-0-click-mail/
on “Ask HN: Are there any good privacy-respecting iOS email clients out there?”Submitted Seeing (Mail)Demons? Technique, Triggers, and a Bounty as a story · 2 points
HN discussionWhat is it with news outlets never linking the documents or websites that they keep quoting from? Post: https://blog.zecops.com/vulnerabilities/unassisted-ios-attac... HN discussion: https://news.ycombinator.com/item?id=22944690
Comment linking /vulnerabilities/unassisted-ios-attacks-via-mobilemail-maild-in-the-wild/
on “Flaw in iPhone, iPads may have allowed hackers to steal data for years”Submitted You’ve Got (0-click) Mail as a story · 1 points
HN discussionSubmitted iOS Mail Vulnerability as a story · 1 points
HN discussion
