[scarface74]

Apple has allowed users to download the “last compatible version” since 2012.

I reset my first generation iPad - last updated 2011 - last year and was able to load and run older versions of most of the apps for streaming services that were available back then - Netflix, Hulu, Crackle, Spotify, Plex, etc.

[badpun]

"Last compatible" means no more security updates, which basically means - we no longer care about the flaws we've made, go ahead and risk your privacy (including for example your life savings if you bank online).

Also, my experience with the last compatible version (for iPhone 4 IIRC) was that IIRC neither Skype nor Hangouts worked anymore. Plus the whole device was incredibly slow.

[scarface74]

What security flaws do you expect in older versions of apps that were able to escape the iOS sandbox that were later fixed by updating the applications?

What exploit has there been in an app that let it exfiltrate data from another app or read your web browsing history for any version of iOS?

As far as Google, it’s no surprise that Google abandoned older protocols. That’s kind of their MO....

[badpun]

I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.

[scarface74]

To nitpick actually they have.

IOS 6.1.2 came out 6 months after iOS 7

But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?

[saagarjha]

> But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?

…a jailbreak?

[scarface74]

I haven’t been able to find an untethered Jailbreak for iOS 5 - ie a method for an unsuspecting user to have his iOS device compromised.

A “tethered jailbreak” means the user purposefully went through a series of steps to jailbreak thier device or someone else physically got access to thier device.

[badpun]

> But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?

I don't follow the field of iOS security. I only know that, like everyone whose computing devices handle sensitive data and/or money, I want my system to be patched ASAP if a vulnerability is detected. AFAIK, Apple makes no such guarantees.

[scarface74]

The alternative is Android that has a much weaker security model and where the manufacturers don’t offer patches for more than two years if at all.

But as far as iOS, I am not aware of any unpatched security vulnerabilities that have been reported in over ten years that would allow an app to exfiltrate sensitive data from another app on a none jailbroken device.