Top all-time · #24863
My interesting research.
Personal blog · r00tkitsmm.github.iosecurity
My interesting research. is a personal blog at r00tkitsmm.github.io about security. Since 2024, 3 different Hacker News readers have linked it 3 times, most often “ImageIO, the Infamous iOS Zero Click Attack Vector (2024)”. It is still writing: the last post was on 2025-04-10, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked posts are about a proof-of-concept zero-click remote code execution exploit for iOS 18.6.1. The only comment cites a 2020 Google Project Zero post on fuzzing Apple's ImageIO image parsing as background, not a judgement of this writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
I share what I find interesting here..
Most-linked posts?
- ImageIO, the Infamous iOS Zero Click Attack Vector (2024)2 people · 2 mentions · first linked 2025-08-23
What Hacker News says?
Fuzzing is one approach. "Fuzzing ImageIO" (2020), https://googleprojectzero.blogspot.com/2020/04/fuzzing-image... > This blog post discusses an old type of issue, vulnerabilities in image format parsers, in a new(er) context: on interactionless code paths in popular messenger apps. This research was focused on the Apple ecosystem and the image parsing API provided by it: the ImageIO framework. Multiple vulnerabilit…
Comment linking /fuzzing/2024/03/29/iOSImageIO.html
on “iOS 18.6.1 0-click RCE POC”Submitted Pishi: Coverage guided macOS KEXT fuzzing as a story · 2 points
HN discussionSubmitted ImageIO, the Infamous iOS Zero Click Attack Vector (2024) as a story · 1 points
HN discussion