You do not have permission to edit this page, for the following reasons:
'''Evidence review addendum β 2026-10-24. Public-document review; ratings with evidence gaps remain provisional.''' This addendum supersedes earlier inconsistent wording on the same fields. It is based on public documents and the saved website snapshot; no installed device was tested. Historical research below remains historical evidence. Unverified flash protection and interface-specific controls are not verified device facts. == Documented basic information == * ε£°ι³: Built-in speakers and microphones; stereo recording and Spatial Audio playback [https://support.apple.com/en-us/111828 Source] [https://support.apple.com/en-ng/120555 Source] == Revised security evidence notes == == Scoring status == Existing selected scores are a saved comparison baseline, not newly validated final scores. Recheck version, region and assessment path before updating options. Recalculate CATS/GRAS and synchronize this section after all selected options are settled. Do not infer a secure or insecure flash state from a downloadable firmware image or encrypted data volumes. ---- == Assessment scope and rubric interpretation == Evidence checked on 2026-10-21. This is a sourced coursework assessment of the iPhone 15 Pro Max A3108 and its iOS platform history, not a penetration test of a particular handset. Security controls are evaluated with a device passcode configured. Historical vulnerabilities remain part of the history even after patches; no claim is made that a fully updated phone is still affected. Regional wireless availability varies. The website gives no numeric cut-offs for Rare and Very common. Those labels are explicit assessor judgements: limited targeted/physical attacks versus recurring publicly documented software vulnerabilities. They are not measured attack prevalence. Prior-attack evidence identifies iPhone/iOS, not the exact A3108 regional model. The password choices are an imperfect fit. The selected two-point option is an approximate mapping for a user-created secret without universally enforced complexity. Its literal change-after-setup wording is not a verified iOS requirement. Under a strict literal reading, that criterion is not representable by the available choices and should be referred to the course marker; the displayed overall grade is conditional on this mapping. === Historical vulnerability examples === * CVE-2023-5217: WebRTC/libvpx buffer overflow; processing hostile media in a vulnerable build could lead to arbitrary code execution. Fixed in iOS 17.0.3 on 4 October 2023. [https://support.apple.com/en-us/106367 Apple advisory] * CVE-2025-24200: requires physical access; could disable USB Restricted Mode on a locked device. Fixed in iOS 18.3.1 on 10 February 2025. [https://support.apple.com/en-mide/122174 Apple advisory] * CVE-2025-43200: malicious media delivered through an iCloud Link could trigger a logic flaw. Fixed in iOS 18.3.1; Citizen Lab associated this issue with Graphite targeting. Exact incident model is not disclosed. [https://support.apple.com/en-mide/122174 Apple advisory] [https://citizenlab.ca/research/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Original forensic research] === Product sources and scoring === First availability was 22 September 2023; Macao followed on 29 September. [https://www.apple.com/newsroom/2023/09/apple-unveils-iphone-15-pro-and-iphone-15-pro-max/ Apple launch announcement] Hardware and capacity options: [https://support.apple.com/en-us/111828 Apple technical specifications]. Model identifiers: [https://support.apple.com/en-us/108044 Apple model identification]. RAM and battery mAh figures have not been inserted because the cited Apple specification does not state them. Current retail status is not asserted. Using the selected rubric interpretations: Device = ceil((2+3+2+1)/4) = 2; System = ceil((2+1+1)/3) = 2; User Authentication = ceil((2+1+1+2+2)/5) = 2. Total = 6, corresponding to B. This is the website device-risk grade, not a student's coursework mark or bonus points. [https://fehmijaafar.net/wiki-iot/index.php/Methodology Website methodology]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
