Kenoqi

nfa

[Money Talks @MoneyTalksTwt]

If you want big money, you better have some big fcking balls

[DRAX1AN @DRAX1AN]

Bedavaya altın madeni yayınlamış adam.

[贝吉塔Again™ @0xjackkk]

日本今天的万圣节夜晚

国内怎么样 有人参加了吗

[Yishi @ohyishi]

Over the past two weeks iPhones have been publicly jailbroken more than once, and most people treated it as a bit of tech drama and scrolled on. I want to use it to talk about something that matters more to people in crypto: wiping an old iPhone, putting it in airplane mode and using it only to hold your seed phrase is not as safe as most people think. If it's an iPhone 11 or older, the problem lives in the chip, and no iOS update will fix it.

Quick recap of what happened. On October 16 at Hexacon in Paris, the Calif team jailbroke an iPhone 18 Pro running iOS 27.0.1 live on stage. The jailbreak survived a reboot, they had root, and they got past MIE, the hardware memory protection Apple added starting with the A19 specifically to stop spyware. In the same session they showed attacks that get in through a single click in Signal or iMessage. A week later, on the day iPhone Duo went on sale, they jailbroke that too. Apple shipped iOS 27.2 on October 26, and Calif says most of the bugs they used are now fixed. Then on October 30, Ikotas Labs, the Japanese team that just won Pwn2Own, posted that they had jailbroken 27.2 as well. Their video only shows swapped icons and the version number, though, so I'm treating it as unconfirmed for now.

For most people on a recent phone who keep it updated, none of this is a reason to panic. Before chains like these get patched, they usually sit with spyware vendors and forensics companies, and the odds of an ordinary person being specifically targeted are low. Update to 27.2 and you've done what you need to.

The people I actually want to warn are those using an old iPhone as a cold wallet. iPhone 4S through iPhone X have checkm8 in the BootROM, made public in 2019. This June, usbliter8 went public, covering the iPhone XS, XR, the 11 series and the 2nd-gen SE. The BootROM is boot code burned into the chip at the factory. Apple can't patch it with a software update, so these devices will carry the hole for as long as they exist. Exploiting it doesn't need a network either. Once someone has your phone in hand, they put it into DFU mode and plug in a custom USB board (the public research used a $5 Raspberry Pi Pico 2), and they can run their own code before iOS even boots. Airplane mode makes no difference here.

I don't want to overstate it. On models like the XS and 11, the BootROM bug alone won't hand over your seed phrase, because your passcode and the Secure Enclave are still in the way. The trouble is that these remaining layers are exactly where people tend to cut corners: a 6-digit passcode, an iOS version years out of date with a pile of public n-days, a short wallet app password. On some older models, forensic tools use bugs like this to brute-force the passcode. And if your wallet app encrypts the seed with nothing but a short password, once that encrypted file is copied off, the attacker can take it home and keep guessing offline, with no attempt limit. Old iOS versions also have a charging port problem. ChoiceJacking, published in 2025, lets a malicious charger pose as a keyboard and approve the data-access prompt for you. Apple only closed that in iOS 18.4.

One more thing about this kind of attack: when you get your phone back, nothing looks off. In security circles it's called an evil maid attack. A hotel room, a security check, lending your phone to someone to charge — any time it's out of your hands for a while, there's an opening. A lot of people only find out their phone was touched after their assets are already gone.

My advice:

1. Check which iPhone holds your seed phrase (Settings → General → About). If it's an iPhone 11 or older, move to a newer model before storing a seed on it.

2. If you've already stored one there, no need to panic. When you get a chance, generate a brand-new seed phrase in an environment you trust and move your assets over. It has to be a whole new seed. A fresh address under the old seed won't help.

3. If your phone has ever been out of your hands for a while, say held for inspection at a border, don't wait. Migrate as in step 2 as soon as you can.

4. Update your daily iPhone to iOS 27.2 (Settings → General → Software Update). If you haven't moved to 27 yet, install at least 26.7.2.

5. Switch to a long alphanumeric passcode (Settings → Face ID & Passcode → Change Passcode → Passcode Options). A 6-digit PIN has only a million possible combinations. Make your wallet app password longer too.

6. Carry your own charger. Don't use public USB ports, random power banks or cables you don't know.

7. If you hold a lot or are likely to be targeted, consider turning on Lockdown Mode (Settings → Privacy & Security → Lockdown Mode). It blocks wired connections while the phone is locked.

8. Any "iOS 27 jailbreak download," or any tutorial asking you to install a certificate or configuration profile, is a scam or malware. Neither Calif nor Ikotas has released any tools.

If you like using an iPhone as a cold wallet, go with a newer model and keep it on the latest iOS. There's no public BootROM exploit for the iPhone 12 or later, and if something does turn up, Apple can still fix it with an update. With really old devices, the risk sits in the chip itself, and updating iOS won't get you around it.

[:) @smileycapital]

North Korea and Iran are the only two relevant countries left without Jewish banking cartel

we can see what's happening in Iran

we will continue to see NK being blamed for every cyber "hack" that's actually just executed by deep-state

they will continue with inside jobs.

[DeFi Dev Corp. (DFDV) @defidevcorp]

Who is ready for that solana:So11111111111111111111111111111111111111112 bounce? 👀

[Kenoqi @jedwons]

@DRiechelmann1 wdym addressing? low fees just mean that nobody is using eth

[Kenoqi @jedwons]

@AdhamK777 @anza_xyz yes they already launched a coin called solana bro

[Kenoqi @jedwons]

@nocircuit tps is per second photo shows per minute

[Kenoqi @jedwons]

@nguyenthambt @CryptoCurb alpenglow

[Kenoqi @jedwons]

solana is gonna go $400-700 once alpenglow rollout

[Kenoqi @jedwons]

when solana will rollout its alpenglow???

[Kenoqi @jedwons]

@akashjana__ @solana when alpenglow reaches mainnet

[Kenoqi @jedwons]

it's only one week before we finally get to see Solana's Alpenglow update live!!!

then we skyrocket

[Kenoqi @jedwons]

CLARITY failed - and now are we expecting rate hikes or what?

[Kenoqi @jedwons]

CLARITY failed but somehow we ended up being -3% how you're gonna explain that

[Kenoqi @jedwons]

@AggrNews how many yes votes did it get

[Kenoqi @jedwons]

@GT28115 @TedPillows but people would think that it's dems who voted against so it's them who will be considered bad

[Kenoqi @jedwons]

@TicTocTick 500% yields are coming buckle up 😇😇😇

[Kenoqi @jedwons]

@Nakata09876543 @MaxCrypto yeah that’s true but what usually happens to hedge positions afterwards? when it’d be the time to close them? because otherwise it end up being 0 profits even tho yeah it’s 0 losses