There’s a lot of fearmongering but here’s the vulnerability (I believe it’s the same one), from another article:

The CVE, now publicly listed, was a logic flaw in how iOS processed maliciously crafted media shared via iCloud Link. Apple patched the vulnerability in iOS 18.3.1 on February 10, adding stronger validation checks.

It was a malicious link delivered via iMessage. You can configure iOS to stop automatically loading link previews which may have prevented the attack

It’s also a good reminder that the vast majority of these cyber attacks have at least some element of social engineering. Stay sensible, lock down your devices, keep them up to date, block unknown USB devices without approval, don’t open random links.

They WANT you to feel hopeless and defeated. They WANT you to think “Well that’s it, we have no privacy anymore”. If you give into that mindset, you let them win

That’s only one half, the person you’re talking to might not be running a secure device

Anything having to do with money is heavily surveilled

This is pretty much it, though it’s worth noting that the ones receiving money tend to get the bulk of the surveillance, it’s still fairly easy to send small amounts of money semi-anonymously

Perhaps the creators could be more sensitive to this side of things, by offering more private ways to donate money, like cash or prepaid cards.

This is a good point though it’s often down to the payment processors, particularly when dealing with prepaid cards. They deliberately don’t make it clear how decisions are made so bad actors can’t catch on, but it can mean Person A using a prepaid card has their payment accepted but person B using the exact same type of card has their payment rejected and card locked, with no clear reason why

VPNs are probably the biggest triggers for card-locking. OP, try disabling the VPN (and go to a library or cafe with a secondary device if you can) and try the payment again. And choose one-off payments, most places won’t accept prepaid cards for subscriptions

Everyone’s being so despondent. Of course it’s possible to convince someone to care about privacy. If they’re your friends, you’ll know them better than we do. What do they value? What do they care about?

In my experience more people care about privacy than you think. But they just think it’s hopeless. They’re constantly being told “There’s no point. Every company already knows everything about you. Give up.”

Bullshit. Even if ad companies have a nice tailored set of data on someone’s interests, behaviours, routines, etc. the moment that person cuts off the supply, that data starts becoming less relevant, less useful and less valuable every day. Once I explained that to a few people I had a bit more luck getting them to install ad blockers and stop posting so much personal info online

Talk to them in a language they’ll understand. If they deal drugs, tell them they’re much less likely to get caught using encrypted messaging apps. If they’re into true crime, point out how many stalkers were able to track their victims down using what they’d posted on social media

Sample IDs online, AI-generated fake IDs (one of the few good uses for AI). It depends on how the detection is being done. Uploading an image is the simplest, the ones that hijack your phone’s camera and gyroscope are trickier but not impossible. Pick an ID that can’t be easily checked automatically (e.g not every country’s drivers licenses have barcodes linked to public databases)

Do a bit of trial and error and turn it into a game. Remember under most circumstances you’re under no obligation to provide genuine personal info to these websites, the worst they can do is ban you

The API for apps is also flawed. I’m not sure about Android but on iOS apps are told whether the user has given them full or partial access, and some apps needlessly ask for full permissions when they don’t need it. Apple themselves set a bad example with this, iMovie for iOS won’t even launch without full photos access

I’m sure Londoners were consulted on this prior and given the chance to vote on whether they wanted these implemented /s