sure sounds like someone representing themselves as a person who knows how checkra1n works does not actually know what they’re talking about.pic.twitter.com/8ONEmDFB4A
Show this thread
The threat is that checkra1n is repackaged with a different payload, e.g., an PIN entry replacement that records what you type and POSTs it to a remote server. FaceID/TouchID being cached or not is an easy indicator that your device was rebooted. Is that reasonable?
-
-
when assessing that it would be easy to remove the logo and install a rootkit, was this actually attempted? or was the checkra1n development team contacted to verify the statement was true? was the source code examined?
-
In the quote, it says "someone will modify checkra1n..." so the claim is whether this is possible at all. I know it hasn't been done (yet), but do you think it's possible to repackage checkra1n with a different payload?
- 5 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.