Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness.
show comments
slowin
#3 is so nice, I want root access to my phone. Does anyone know if doing this can lock Apple out from updating/removing it?
show comments
aemoron
What's with iOS and pdfs pwning them? Reminds me of the ForcedEntry in Pegasus.
Man, sucks to see these "hacked" iPhones doing so many cooler things than my Apple-approved one.
show comments
ghm2180
Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
show comments
erelong
Hoping more "unsupported" older "iDevices" can be made usable with newer software with something like "jailbreaking"
show comments
jinseokim
I just feel a bit sad and impotent that a number of security researchers outside the circle cannot join their "yo we found more crazy bugs" party because simply frontier labs only give access to those models with "Red Team" availability to the inner circle members/companies.
Now their "trusted cyber access" program is moat rather than safeguard.
show comments
MarkusWandel
Anything you can find with an LLM to break into a locked device/ecosystem, the operators of that ecosystem can find with an LLM too, and fix it. Right?
show comments
arjie
Same guys who found the PHP.
Edit: hahaha you guys are funny. “The php hack” is what I meant!
show comments
lazopm
Is PDF the new Flash? It just does too much for its own good, it has become a huge attack vector
show comments
reacharavindh
It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-(
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware…
I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
show comments
tptacek
A reminder for people who don't follow this, Calif is Thai Duong's firm. Thai discovered the BEAST and CRIME TLS attacks (with Juliano Rizzo), and then worked at Google for a bunch of years, including on Wycheproof with Daniel Bleichenbacher. The team at Calif includes lcamtuf, Dion Blazakis, Tavis Ormandy, and Stefan Esser (among many others).
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
I love these people and everything they're doing.
show comments
mintflow
Video 3 get a root shell agains 27.0.1 which is the latest iOS version installed on my lovely se3.
This really blown my mind, and seem the 1/2 video is installed a app by click pdf link?
I guess and hope there will be update from apple quickly
show comments
Thaxll
Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone).
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
show comments
cryptbe
Cool to see our work here. I'm Thai, and I run Calif. Happy to answer any questions.
We'll publish the technical details of these hacks over the coming weeks. Writing these articles takes time, and we've been busy with a PHP thing [1].
In the meantime, check out The Great Glyph Grift [2] for a glimpse of what can go wrong when iOS parses PDFs.
Just in case you wonder, we've disclosed most of the bugs in these exploit chains to Apple and will disclose the rest. So far in 2026, we've reported close to 100 bugs to Apple. We don't accept Apple bounties, and we're not being paid for this work. We don't sell bugs or exploits, and we have no sponsors funding this research.
We do this because it's fun, intellectually challenging, and we want to help make the iPhone safer. We also have a business to run, so we do need some marketing points.
would this let you use the usb port to host serial devices? Swooning pretty hard at the idea of this. <3
suralind
I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.
show comments
terhechte
It would make me so happy if this would allow running UTM.app with Hypervisor support on iPadOS. I don't want to travel with two devices, the would be enough, but sometimes I need a real desktop. Apple, of course, wants you to buy two devices. I do have UTM with Jit Linux running on my iPad, via altstore and entitlements and so on, but it is all a bit complex and still fairly slow.
john_strinlai
the videos just don't hit the same without the dancing anime girl and the electronic dance music.
show comments
1970-01-01
Just let me know when I can install an alternate OS to my junk drawer of 6-10 year old iPhones. That's the holy grail.
keel-control
They are going to run out of vulns eventually when the code is rewritten in memory safe lang & the rest are found.
show comments
KingMachiavelli
Crazy, you would think Apple would have already done AI-assisted vulnerability scans using the latest and most expensive models.
Absolutely crazy how PDF parsing and image rendering are still exploitable.
eyalitki
Aside from bragging how cool they are, what value is there for demonstrating a yet-to-be-patched vulnerability? I don't understand why old-guard infosec stars from Calif can do as they want, responsible disclosure be damned.
Just as a reminder for some folks here: During their WeWorm research in July–September 2026, Calif didn't stop at proving RCE to Tencent—they spent an extra week using AI to build a fully functional, self-propagating zero-click worm across three live phones, triggering temporary account bans from Tencent during testing.
show comments
asadm
I want to boot linux in a vm at full-speed. is that too much to ask?
post_break
Please let this be real. I need my 17 Pro to be jailbroken. I may keep my 13 Mini if it works for it too. This will be bliss.
nsxwolf
What are these videos actually demonstrating?
show comments
rzimring
This post gave me flashbacks to jailbreak era w/ Cydia. It's interesting to think that a lot of the those old plugins and tweaks have basically become standard supported features of the iOS now (SBSettings, Activator, WinterBoard, Zephyr, ...).
SoKamil
Stay on 27.0 or upgrade to 27.0.1?
cardboard9926
How did they bypass MTE? Wasn't it suppose to make such exploits basically impossible?
show comments
cromka
Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
show comments
josh2600
Is this day0 or did apple and signal get notified?
dangoodmanUT
so i see we're still going with the apocalypse today too
smasher164
why do we see pdf viewer exploits on ios when we have sandboxing mechanisms nowadays like wasm? Or is this exploit accounting for the sandbox breakage?
eqmvii
I'm tired, boss
bcvvvy
Right that does it. I'm fucking off to the pub and drinking myself under the table after this week.
amelius
Ok so you became "root", but who knows, Apple might have "superroot" and if that is not enough "god-mode".
show comments
headz
No anime girl videos. Progress!
show comments
baq
guess who put themselves on the must-hack list of every single national intelligence agency
Apple doesn't use AI to vibecode and/or pentest their software?
I think we have a right to know.
show comments
blondie9x
This made me miss Cydia and the old jailbreaking days so much. Was such an exciting time to have an iPhone with the tinkering. Anyone still remember iDitDahText https://iditdahtext.com/iDitDahText.html?
Imustaskforhelp
Slightly offtopic but I find it slightly funny that they have accomplished to hack the iPhone yet the name of the third video is: Can you iPhone do this?
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
zb3
Too bad this will be patched instead of allowing the device owner to control their own device.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
show comments
bozdemir
public wont be getting this jailbreak, it is just another flex like elon's flipping car.
NamlchakKhandro
In this thread. Apple Acolytes Anonymous.
Seriously, California has a cathedral problem, may the vault dweller succeed.
aftbit
Now - does the Signal 1-click work on Graphene?
nalekberov
I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
show comments
getcrunk
First of all this is crazy that even on hn we were a few days behind this.
Second fuck Apple. Fuck all tech companies. And seriously fuck late stage capitalism. Foss or nothing. There should be a rule if you pay for it it has to be foss. This way people can still make proprietary but they just can’t charge for it.
We have zero privacy, zero security, all our politicians and all the corporations are against us.
Media parsing is an endless exploit vector. Like fuck. At some point you have to be like they (not just Apple) keep it broken
An yea I know foss gets these issues too. But if the only option was foss, then at least the whole world’s focus would be on it
CH-Abhinav
Bro rewrite IOS in Rust :)
jonathanstrange
My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."
show comments
v3ai
BASED
whynotmaybe
Eli5 the iMessage video? They open a file that calls their webapp?
ValtteriL
Curious to see how many tokens was spent
Foxhuls
I guess I've never really understood why people who don't like the way the iPhone and apple ecosystem work buy apple products. There are plenty of other options out there. Every time articles about this and the App Store pop up it seems as if the comments are filled with a whole lot of android users that are upset that iPhone's aren't like androids. That's not to say those are all of the comments and there aren't clearly iPhone users who want these options but again, why buy a product that doesn't support these things if they're so important to you in the first place.
Very cool demos, but now I'm interested to know: does enabling Lockdown mode help at all against these exploits? It'll theoretically protect against a lot of common attack vectors, but I'm curious about its real-life effectiveness.
#3 is so nice, I want root access to my phone. Does anyone know if doing this can lock Apple out from updating/removing it?
What's with iOS and pdfs pwning them? Reminds me of the ForcedEntry in Pegasus.
https://projectzero.google/2022/03/forcedentry-sandbox-escap...
https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg...
Man, sucks to see these "hacked" iPhones doing so many cooler things than my Apple-approved one.
Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation.
Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.
Hoping more "unsupported" older "iDevices" can be made usable with newer software with something like "jailbreaking"
I just feel a bit sad and impotent that a number of security researchers outside the circle cannot join their "yo we found more crazy bugs" party because simply frontier labs only give access to those models with "Red Team" availability to the inner circle members/companies.
Now their "trusted cyber access" program is moat rather than safeguard.
Anything you can find with an LLM to break into a locked device/ecosystem, the operators of that ecosystem can find with an LLM too, and fix it. Right?
Same guys who found the PHP.
Edit: hahaha you guys are funny. “The php hack” is what I meant!
Is PDF the new Flash? It just does too much for its own good, it has become a huge attack vector
It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-(
Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware… I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…
A reminder for people who don't follow this, Calif is Thai Duong's firm. Thai discovered the BEAST and CRIME TLS attacks (with Juliano Rizzo), and then worked at Google for a bunch of years, including on Wycheproof with Daniel Bleichenbacher. The team at Calif includes lcamtuf, Dion Blazakis, Tavis Ormandy, and Stefan Esser (among many others).
They're basically the most interesting team working in vulnerability research right now; a cross product of ludicrous talent and full-tilt AI work.
Just before I left Fly.io a few months ago, we retained Calif for an annual pentest (we'd previously worked with Tetrel, Atredis, Doyen, and I think Include?). They were spooky good. Everybody we'd worked with was good, but Calif's results were unusually high-impact.
I love these people and everything they're doing.
Video 3 get a root shell agains 27.0.1 which is the latest iOS version installed on my lovely se3.
This really blown my mind, and seem the 1/2 video is installed a app by click pdf link?
I guess and hope there will be update from apple quickly
Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone).
I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?
Cool to see our work here. I'm Thai, and I run Calif. Happy to answer any questions.
We'll publish the technical details of these hacks over the coming weeks. Writing these articles takes time, and we've been busy with a PHP thing [1].
In the meantime, check out The Great Glyph Grift [2] for a glimpse of what can go wrong when iOS parses PDFs.
Just in case you wonder, we've disclosed most of the bugs in these exploit chains to Apple and will disclose the rest. So far in 2026, we've reported close to 100 bugs to Apple. We don't accept Apple bounties, and we're not being paid for this work. We don't sell bugs or exploits, and we have no sponsors funding this research.
We do this because it's fun, intellectually challenging, and we want to help make the iPhone safer. We also have a business to run, so we do need some marketing points.
[1] https://calif.io/php2shell
[2] https://calif.io/research/the-great-glyph-grift
Oh boy, what a week. Must be great working in cybersec right now.
#4 is very interesting. Truly untethered (persistent) jailbreaks haven't been a thing for 10 years.
This brings back lots of memory of jail-breaking iPhone era and cydia the alternative jailbroken iPhone app store.
The second video, the person who's shooting the video has his face mirrored onto the screen, anonymity is gone.
More details: https://onejailbreak.com/blog/iphone-duo-ios-27-1-jailbreak-...
would this let you use the usb port to host serial devices? Swooning pretty hard at the idea of this. <3
I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.
It would make me so happy if this would allow running UTM.app with Hypervisor support on iPadOS. I don't want to travel with two devices, the would be enough, but sometimes I need a real desktop. Apple, of course, wants you to buy two devices. I do have UTM with Jit Linux running on my iPad, via altstore and entitlements and so on, but it is all a bit complex and still fairly slow.
the videos just don't hit the same without the dancing anime girl and the electronic dance music.
Just let me know when I can install an alternate OS to my junk drawer of 6-10 year old iPhones. That's the holy grail.
They are going to run out of vulns eventually when the code is rewritten in memory safe lang & the rest are found.
Crazy, you would think Apple would have already done AI-assisted vulnerability scans using the latest and most expensive models.
Absolutely crazy how PDF parsing and image rendering are still exploitable.
Aside from bragging how cool they are, what value is there for demonstrating a yet-to-be-patched vulnerability? I don't understand why old-guard infosec stars from Calif can do as they want, responsible disclosure be damned.
Just as a reminder for some folks here: During their WeWorm research in July–September 2026, Calif didn't stop at proving RCE to Tencent—they spent an extra week using AI to build a fully functional, self-propagating zero-click worm across three live phones, triggering temporary account bans from Tencent during testing.
I want to boot linux in a vm at full-speed. is that too much to ask?
Please let this be real. I need my 17 Pro to be jailbroken. I may keep my 13 Mini if it works for it too. This will be bliss.
What are these videos actually demonstrating?
This post gave me flashbacks to jailbreak era w/ Cydia. It's interesting to think that a lot of the those old plugins and tweaks have basically become standard supported features of the iOS now (SBSettings, Activator, WinterBoard, Zephyr, ...).
Stay on 27.0 or upgrade to 27.0.1?
How did they bypass MTE? Wasn't it suppose to make such exploits basically impossible?
Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue.
The more of this stuff we see, the more people will start using GrapheneOS, I guess.
Also wonder why they choose to publish and not cash-in the Apple bounty..
Is this day0 or did apple and signal get notified?
so i see we're still going with the apocalypse today too
why do we see pdf viewer exploits on ios when we have sandboxing mechanisms nowadays like wasm? Or is this exploit accounting for the sandbox breakage?
I'm tired, boss
Right that does it. I'm fucking off to the pub and drinking myself under the table after this week.
Ok so you became "root", but who knows, Apple might have "superroot" and if that is not enough "god-mode".
No anime girl videos. Progress!
guess who put themselves on the must-hack list of every single national intelligence agency
Man... PDF is such an unfortunate file format.
Oct 16th post;
More recently: iPhone Duo Jailbreak vid https://x.com/calif_io/status/2113570095549337977 (https://news.ycombinator.com/item?id=50206680)
Apple doesn't use AI to vibecode and/or pentest their software?
I think we have a right to know.
This made me miss Cydia and the old jailbreaking days so much. Was such an exciting time to have an iPhone with the tinkering. Anyone still remember iDitDahText https://iditdahtext.com/iDitDahText.html?
Slightly offtopic but I find it slightly funny that they have accomplished to hack the iPhone yet the name of the third video is: Can you iPhone do this?
I would like to think that they might've created the video so fast and perhaps out of so excitement that the name of the title had the typo :-D
Too bad this will be patched instead of allowing the device owner to control their own device.
Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.
public wont be getting this jailbreak, it is just another flex like elon's flipping car.
In this thread. Apple Acolytes Anonymous.
Seriously, California has a cathedral problem, may the vault dweller succeed.
Now - does the Signal 1-click work on Graphene?
I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see.
Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.
First of all this is crazy that even on hn we were a few days behind this.
Second fuck Apple. Fuck all tech companies. And seriously fuck late stage capitalism. Foss or nothing. There should be a rule if you pay for it it has to be foss. This way people can still make proprietary but they just can’t charge for it.
We have zero privacy, zero security, all our politicians and all the corporations are against us.
Media parsing is an endless exploit vector. Like fuck. At some point you have to be like they (not just Apple) keep it broken
An yea I know foss gets these issues too. But if the only option was foss, then at least the whole world’s focus would be on it
Bro rewrite IOS in Rust :)
My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."
BASED
Eli5 the iMessage video? They open a file that calls their webapp?
Curious to see how many tokens was spent
I guess I've never really understood why people who don't like the way the iPhone and apple ecosystem work buy apple products. There are plenty of other options out there. Every time articles about this and the App Store pop up it seems as if the comments are filled with a whole lot of android users that are upset that iPhone's aren't like androids. That's not to say those are all of the comments and there aren't clearly iPhone users who want these options but again, why buy a product that doesn't support these things if they're so important to you in the first place.