It’s been a while since a major security issue hit Apple’s ecosystem, but a new one has emerged. A significant vulnerability has been discovered affecting certain iPhone models. Unlike many of the usual glitches we discuss, this one could come with a hefty price tag for users. Here’s what you need to know.
Defect
The problem at hand is a BootROM exploit called usbliter8. For context, the BootROM is crucial for starting up a device from an off state.
Updating to future iOS versions won’t mitigate this issue.
This system operates on a “chain of trust,” which checks the integrity of hardware and software during each boot. If the BootROM gets compromised, hackers could inject harmful code, downgrade your iOS, or utilize other vulnerabilities to access personal information.
On the bright side, not every iPhone is susceptible. The usbliter8 exploit targets devices equipped with A12 and A13 chips. Specifically, these iPhone models and some Apple Watches are at risk. Here’s the list:
- iPhone XR
- iPhone X
- iPhone XS Max
- iPhone 11
- iPhone 11 Pro
- iPhone 11 Pro Max
- iPhone SE (2nd generation)
- Apple Watch Series 4
- Apple Watch Series 5
- Apple Watch SE (1st generation)
If you’re unsure about your iPhone model, simply go to the Settings app and check there.
Problem
This flaw is particularly concerning because it’s tied to hardware, not software. Unlike typical software issues that Apple can resolve with a straightforward update, usbliter8 is linked to an internal chip.
Consequently, downloading new iOS updates won’t resolve the issue. It will remain until the device is no longer in use.
Solution
So, what can you do about flaws that software can’t fix?
Unfortunately, there’s just one option, and it’s probably not the one you want to hear.
You’ll need to consider upgrading your iPhone to a newer model that isn’t affected. If your current phone is on the threatened list, it’s advisable to replace it with at least an iPhone 12 or a more recent version.
Bright Side
For many who are using these older devices, this might be a tough reality to accept. New phones can be quite pricey, and with rising costs due to various factors, they seem even less accessible.
But let’s say upgrading isn’t feasible for you. Should you be concerned about potential hacking?
In practical terms, the chances of the usbliter8 exploit being used against you are fairly low. An attacker would need physical access to your device and specific capabilities to manipulate it. If you keep your phone close and secure, you’ll likely be just fine.
Here’s a tip: avoid using public charging stations at places like restaurants or airports, since they might be tampered with to compromise your device. Bring your own charger and plug it directly into a wall socket instead.
However, if your phone does get stolen or accessed via usbliter8, the situation can be tricky. Attackers might not need a password to reach the DFU mode and introduce harmful code. Nevertheless, usbliter8 alone can’t bypass the encryption protecting your data, so always opt for strong passwords and use features like FaceID or TouchID for extra security. This is your best line of defense.
