logoalt Hacker News

relaxingtoday at 12:07 PM4 repliesview on HN

Then an attacker could load an older, exploitable OS and gain access.


Replies

LocalHtoday at 3:05 PM

Not allowing downgrades is the biggest contributor to smartphones becoming e-waste.

Apple should be forced to do this by law, but only after they discontinue software support. If they're willing to continue making small, incremental patches when necessary (such as to fix this obvious bug) then it's fine that they can still block downgrades. But at EOL? They should be legally required to allow old software to be installed.

This also impacts software compatibility - any 64-bit device that is now EOL that got updated to iOS 11 or newer is forever barred from running 32-bit apps just because people are worried that someone might take that old device and downgrade it as an attack?

The average person should always stay updated to the latest version for security reasons. But the power users should be able to choose which version they run, at least on devices that aren't currently supported at all.

Daily reminder that the first two iPhones and the first iPod touch had zero firmware signing, and you could freely install any supported version at any time, and can still do so today. That being the case has probably harmed 0.00001% of people at most

show 1 reply
gambitingtoday at 12:41 PM

Weirdly I care more about my rights as the owner of the device than the rights of a theoretical attacker.

show 3 replies
abcd_ftoday at 1:17 PM

It should be then a switch in the settings.

show 1 reply
misirtoday at 1:16 PM

This is not an excuse to let people choose if they allow os downgrades or not. Like bootloader unlock option on android devices.

Also people find exploits on newer OS versions as well. Downgrading makes it easier but not downgrading doesn’t make the device unhackable.