https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
Touring completeness is powerful. This reminds me of an x86 experiment, where some bored engineer proved that the table-walk state machine was also touring complete and you could run arbitrary code slowly by means of exercising the table walk engine.
This one comes down to attack surface, skeletons in the basement (old code that is dormant in our layered systems of technology but that wasn’t scrutinized to the same security standards that new code is) and human creativity – (try that AI!).
AI would/could have found a different exploit, one that wouldn’t be obvious to humans for sheer complexity, but chaining this kind of creative approaches is for now a human skill.
