PDF exploits have been around for years. And want to know something? They affect EVERYONE. Not just Apple. MS, and even Android. Nothing new. And if you try to use the "but Chrome hasn't been cracked on Pwn2Own". It's because currently PDF add on exploits aren't allowed. And just like that Java and Flash exploits are the main attack for browsers. Apples biggest issue is that they don't use ASLR and for reasons unknown to me, iPhones will trust ANY tower. Even if you're just using a USRP with a base clocking config, iPhones will try to register to whatever tower has the better signal regardless of if it's trusted or not. White noise generator + USRP == winning. And that's what excites me about the next DEFCON and P2O. Baseband hacking is going to be much more popular.
Ok...rant is somewhat done.