On: 0-days exploited by commercial surveillance vendor in Egypt

[aborsy]

I’m not an expert, but would’t a VPN (commercial or to a server with known exit IP) prevent such attacks? It will kick out the MITM.

Also I wonder if the lock down mode could block it.

[fullspectrumdev → aborsy]

Yes and also yes.

These attacks when launched by government entities pretty much always rely on placing a box at the ISP that does the targeted interception/MiTM against a subset of subscribers.

So using a VPN would ensure your traffic is tunnelled “beyond” their reach.

Lockdown mode also would have prevented the iOS exploit chain, apparently.