Slashdot Mirror


iPhone Dev Team to Open Source Free Unlock

An anonymous reader writes "In an effort to keep up with changes from Apple at a faster speed, the iPhone Dev Team is considering open sourcing AnySIM, the free unlocking solution for the iPhone. In a chat with Gizmodo, iPhone Dev Team member Sam said that this move could 'open a lot of possibilities for the future,' mainly in terms of the speed of the updates and avoiding sloppy and possibly dangerous binary patches. They are now looking for community input to get the project started."

80 comments

  1. Of course, then Apple will have access, too by Anonymous Coward · · Score: 1, Insightful

    Which should help them in breaking any workarounds used, until a true valid unlock is achieved.

    1. Re:Of course, then Apple will have access, too by mrsteveman1 · · Score: 1

      Apple is well aware of how the current unlocks are being accomplished, this changes nothing on that end. It does make it much faster to RESPOND to Apples re-locking attempts though.

  2. How is this going to work? by Trintech · · Score: 4, Insightful

    I could be completely wrong about this but I though that the unlocking programs utilized exploits, buffer overruns, etc to unlock the iPhone. If thats the case, how is releasing the source going to help this project? Won't Apple just read the code and release updates keeping the program from working?

    1. Re:How is this going to work? by 4D6963 · · Score: 2, Insightful

      Won't Apple just read the code and release updates keeping the program from working?

      Yeah, because until now Apple had no idea at all how that anySIM thing worked. Now that they'll be able to access the source, they'll like instantly know how to prevent the hack from working.

      You see that's as if makers of cutting pliers published the plans of their products, then car makers would as soon know how to prevent thieves from cutting the wires of a car in order to steal it.

      --
      You just got troll'd!
    2. Re:How is this going to work? by thePowerOfGrayskull · · Score: 3, Insightful

      Quite possibly. Puts us OSS fans in a quandary, doesn't it? On the one hand, proprietary software is Teh Ebil. On the other hand, keeping this proprietary allows to keep a platform pseudo-open. It's really no choice at all though - either you believe in the principles FOSS or you don't. If so, then this should be released. If not, it should not. If you find yourself on the fence, perhaps you're not as firm an OSS believer as you liked to think. (Note: 'you' here is in the plural sense, not directed at parent who didn't express an opinion one way or the other...)

    3. Re:How is this going to work? by Trintech · · Score: 2, Insightful

      I really hope Apple didnt know about the buffer overrun that allowed the first unlocking tool to work

      I can appreciate your point that Apple will never be able to keep people from reverse engineering the iPhone but saying that Apple won't be able to do a better job of preventing this if they know exactly how the "crackers"(not sure if thats the right word for the phone world) are going to accomplish their goals is highly unlikely.

    4. Re:How is this going to work? by Tom9729 · · Score: 1

      If Apple really wanted the unlocking to stop, I don't think they would have to look at the source code. I mean correct me if I'm wrong, but they could either:

      a) Take legal action.

      or

      b) Decompile the unlocker, and figure out how it works that way.

      Note: I don't know a lot about law, or decompiling programs for that matter. :)

    5. Re:How is this going to work? by arivanov · · Score: 4, Informative

      Some of the exploits have been public for ages and Apple knows that these are the exploits used. It still does not fix the underlying buggy code for some reason. They are not the only ones as PSP and other small devices have a similar history of not caring about security fixes. On a second thought I am not surprised. People in corporate environments tend to check in an open source lib in the local repository once (often as a binary) and they are not bothered to follow it for ages after that. Following external components and updating them for stability and security is the exemption, not the norm.

      --
      Baker's Law: Misery no longer loves company. Nowadays it insists on it
      http://www.sigsegv.cx/
    6. Re:How is this going to work? by DaleGlass · · Score: 3, Insightful

      Right, because Apple is a tiny poor company that doesn't have the resources to watch the traffic over the wire, or to disassemble the program. They couldn't possibly figure it out without the source.

    7. Re:How is this going to work? by mrsteveman1 · · Score: 3, Insightful

      If Apple doesn't have the source already, they must have found out about that exploit somewhere.......the source had nothing to do with it. Closed source is not going to stop Apple from running the latest binary unlocker on a test machine and watching what it does.

    8. Re:How is this going to work? by ibbey · · Score: 1

      Umm... I think the parent was being sarcastic. Not terribly subtly, either.

    9. Re:How is this going to work? by PhotoGuy · · Score: 1

      I think that's wrong.

      I offered to assist a friend open his iPhone to another carrier (here in Canada, where we can't get AT&T if we wanted to).

      His uses the latest ROM, 1.1.2, and they've upgraded the bootloader in this version to close the hole that was in the previous versions. There is currently no software crack for this phone, although hopefully someone will figure something out. (TurboSIM, a sim interceptor card, which makes the iPhone think it's talking to AT&T, when in fact it's not, is apparently a hardware solution.)

      So accusing Apple of not trying to lock it down for AT&T, is just plain wrong. Yes, they can't do much for older, existing phones, but the newer phones coming out do have the hole plugged.

      See the big red "no", in this table.

      --
      Love many, trust a few, do harm to none.
    10. Re:How is this going to work? by Money+for+Nothin' · · Score: 1

      It's really no choice at all though - either you believe in the principles FOSS or you don't.

      What does this statement, and the statement by President Bush that "you're either with us, or you're with the terrorists", have in common?

      Both are an example of a false dichotomy/false dilemma.

      There is a third way: it's called "being reasonable", or "having nuance", or "creating exceptions where it's pragmatic to do so". Open source works and/or is desirable for many projects and situations - but not all.
    11. Re:How is this going to work? by thePowerOfGrayskull · · Score: 1

      If you truly believe in the underlying principles behind OSS - that is, that information cannot be 'owned' by any one individual or group - this is no false dichotomy. If not, then my post wasn't directed at you. I thought I made that clear in original context, but I can see how it may not have been.

    12. Re:How is this going to work? by ardiri · · Score: 1

      I could be completely wrong

      yes, you are wrong. AnySim is an iphone application - not a hack. the device must first be hacked (jailbroken); in order to install applications onto the phone. once done, AnySim simply updates the baseband firmware. the jailbreak process uses the exploits; not AnySim.

    13. Re:How is this going to work? by Money+for+Nothin' · · Score: 1

      I actually think OSS works pretty well as a development model and more-broadly as a cultural advancement in the way information is communicated and evolved. I just don't take it as religion, that's all. :-)

    14. Re:How is this going to work? by thePowerOfGrayskull · · Score: 1

      Are you sure you're at the right web site?

    15. Re:How is this going to work? by Money+for+Nothin' · · Score: 1

      *grins* :) I argue with people here pretty much any time I post, but I've been here for a few years, and since around the turn of the millenium at least as a lurker...

    16. Re:How is this going to work? by Xformer · · Score: 1

      What legal action? More specifically, what legal action in their own country?

      Phone unlocking is legal in many places in the US, if not all over, and the DMCA recently had an exception added to it so that circumventing phone locks to unlock them isn't a violation of that law. I'm curious, then, just what they could use to make a case.

      I guess that just leaves them with one option.

      --
      All I want is a kind word, a warm bed and unlimited power.
    17. Re:How is this going to work? by Tom9729 · · Score: 1

      You forget how corrupt our legal system can be. ;)

    18. Re:How is this going to work? by jacquesm · · Score: 1

      wouldn't that be against the DMCA ? ;)

  3. The Drawbacks? by TubeSteak · · Score: 3, Interesting

    Wouldn't this make it easier for Apple to break AnySim?

    --
    [Fuck Beta]
    o0t!
    1. Re:The Drawbacks? by larry+bagina · · Score: 5, Insightful

      break it? You mean fix buffer overflows and other vulnerabilities? That would be a good thing.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    2. Re:The Drawbacks? by palegray.net · · Score: 1

      A well-organized project centered around the unlock software, with a large community base, might help persuade Apple that their heart (read: business interests) wouldn't be in the right place if they continued to resist such trends.

    3. Re:The Drawbacks? by DECS · · Score: 2

      How persuasive would that be? It sounds like saying the popularity of DVD rip software "will eventually win over the labels to embrace the idea of piracy."

      Are you suggesting that some profitable new market will emerge from FOSS users that will convince Apple to change its sales strategy to target "people who don't want to pay for things" as opposed to "people to pay a premium for higher end products"?

      Without a service subsidy (and it is a subsidy, even if AT&T is paying Apple rather than the customer), can you imagine a scenario where the iPhone would cost $399 unlocked? Does it look like any other new $399 phones? Which $399 phones have 8GB of RAM and a large touch screen?

      The only phones I can see that are comparable hardware wise with the iPhone are high end phones from Nokia, HTC and others which cost around $800. Sure you might be able to find a discounted model that has been around for a year (and has already made its "new" profit) and has an upfront subsidy that reduces the price to the consumer, but there are no $399 touch screen wireless computers that can be manufactured new at a profit. Apple is clearly getting AT&T to subsidize the cost of hardware for consumers.

      That being the case, how will Apple be convinced by a surge of interest behind making it easier to cheat the company out of its AT&T subsidy and destroying its bargaining chip with service providers? I'm sure you're all about freedom, but how is it you expect Apple to be persuaded here?

      iPhone Grabs 27% of US Smartphone Market

    4. Re:The Drawbacks? by palegray.net · · Score: 1

      Are you suggesting that some profitable new market will emerge from FOSS users that will convince Apple to change its sales strategy to target "people who don't want to pay for things" as opposed to "people to pay a premium for higher end products"?

      No, I'm suggesting that Apple might change its sales strategy to support people who don't mind paying for things (i.e. buying the iPhone in the first place) but want a choice in telco carriers.

      Without a service subsidy (and it is a subsidy, even if AT&T is paying Apple rather than the customer), can you imagine a scenario where the iPhone would cost $399 unlocked? Does it look like any other new $399 phones? Which $399 phones have 8GB of RAM and a large touch screen?

      So a little healthy competition in service subsidy rates from multiple carriers wouldn't be good for Apple? They could put their weight behind "preferred carriers" this way.

      The only phones I can see that are comparable hardware wise with the iPhone are high end phones from Nokia, HTC and others which cost around $800. Sure you might be able to find a discounted model that has been around for a year (and has already made its "new" profit) and has an upfront subsidy that reduces the price to the consumer, but there are no $399 touch screen wireless computers that can be manufactured new at a profit. Apple is clearly getting AT&T to subsidize the cost of hardware for consumers.

      Refer again to competition among wireless providers, and combine it with the prospect of a more open platform for developers. If Carrier X developed a set of value-added solutions centered around the iPhone, and hence landed more iPhone customers, that carrier would have a definite financial interest in either supporting their existing subsidies to Apple or even increasing them. I know of many cases where certain wireless providers offer specialized services on their networks.

      That being the case, how will Apple be convinced by a surge of interest behind making it easier to cheat the company out of its AT&T subsidy and destroying its bargaining chip with service providers? I'm sure you're all about freedom, but how is it you expect Apple to be persuaded here?

      I don't have all the answers here, but I do know that consumers want more choices. We'll have to see how everything plays out.

    5. Re:The Drawbacks? by Joe+Tie. · · Score: 1

      but there are no $399 touch screen wireless computers that can be manufactured new at a profit.

      Isn't that about the standard price for a windows mobile based PDA with wireless and a good screen?

      --
      Everything will be taken away from you.
    6. Re:The Drawbacks? by Nullav · · Score: 1

      Are you suggesting that some profitable new market will emerge from FOSS users that will convince Apple to change its sales strategy to target "people who don't want to pay for things" as opposed to "people to pay a premium for higher end products"?
      It's not the desire to get out of paying. Far be it, most carriers I've been with have thrown a huge bill my way for canceling mid-contract. It's just that AT&T sucks.

      Which $399 phones have 8GB of RAM and a large touch screen?
      Flash isn't RAM and I seriously doubt it adds significantly to the cost. Also there are plenty of smartphones with touchscreens, just not multi-touch.
      I'm not saying they're not being sold at a loss (before their cut from AT&T), but it's certainly not as much as you make it sound like.

      iPhone Grabs 27% of US Smartphone Market
      While the iPhone indeed has a few awesome features, it probably has more to do with the iPhone being marketed to the general public (as a phone, rather than a tiny computer).
      --
      I just read Slashdot for the articles.
    7. Re:The Drawbacks? by DECS · · Score: 1

      No. The "Windows Mobile Smartphone" typically has no touch screen (Motorola Q, Samsung Blackjack) and has ~128 MB RAM, not 8GB. An 8 GB SD card costs $200 itself. They also offer a 1/4 resolution screen. Add in service (to flush out the hidden subsidy) and those phones cost $400 more over two years than the iPhone.

      Ten Fake Apple Scandals: 1 - Phony Rage About iPhone Price and Profits

    8. Re:The Drawbacks? by DECS · · Score: 1

      You're talking about freedom from a hardware manufacturer tying its phone to a provider. The solution you offer is to return to service providers dictating the features of phones. If you're really interested in freedom and choice, you should reevaluate your position.

      Apple charges you $399 + it gets whatever it extorts directly from AT&T. AT&T charges you $1000 per year (you can now opt out of the data plan, so it's more like $600/year). Other service providers charge the same thing or more for a smartphone. However, Apple set up its deal to force AT&T to subsidize the phone more than any other provider would, and offer new features such as visual voicemail. The deal also means the iPhone gets WiFi and direct PC sync, things Verizon has been against. It also lets you email photos for free, rather than only send SMS/MMS and pay per message.

      In other words, Apple is busting up the status quo to offer an alternative to the crappy phones with expensive service plans pushing worthless TV clips and $3 ringtones. Apple's exclusive deal with AT&T allows it to offer choice. If you water down that leverage to make it "free to use" on other providers (ie only T-Mobile in the US), that weakens the pressure Apple can exert on its partner.

      There's a reason Verizon Wireless didn't support the iPhone. It wanted to keep things going with its WM9 video sales, DRM BREW apps, high service fees, and worthless phones that can be thrown around for free. The iPhone erodes all of those service provider money makers. AT&T desperately needed a way to grow subscribers, so it went along with the iPhone while everyone else complained about it. What is now obvious is that iPhone users are unlikely to settle for a lesser phone in the future, even if it offers extensive featurism and synergy with mobile craplets. AT&T discovered how to find and hold subscribers, something that is worth enough to relax its prices.

      Sometimes choice is not freedom. Americans have 100 channels of TV.

      iPhone Grabs 27% of US Smartphone Market

    9. Re:The Drawbacks? by mollymoo · · Score: 1

      An 8 GiB SD card may cost $200, but an 8 GiB USB drive costs about a quarter of that. 8 GiB SD cards are at the cutting edge of flash density and are priced to match, you just don't need that density in a device the size of an iPhone, you can use lower density, cheaper flash.

      --
      Chernobyl 'not a wildlife haven' - BBC News
    10. Re:The Drawbacks? by palegray.net · · Score: 0

      Given the material you've just presented, I concede that I need to educate myself more on the topic before I discuss it further. Thank you for pointing me in the right direction!

    11. Re:The Drawbacks? by DECS · · Score: 1

      That may be true, but it's irrelevant. An 8 GB SD Flash card is the only way a user can expand the capacity of Windows Mobile phones that ship with 128 MB. So a $399 WM smartphone needs that expensive SD flash to match the 8GB iPhone. Sure, a manufacturer could source 8GB of Flash for cheaper than $200, but problem is that none actually are doing that. Users can't solder in Flash RAM chips themselves.

      In any event, adding 8GB of RAM would significantly increase the cost of mobiles. Adding a large touch screen does the same thing. Most mobiles are designed to be given away for free, not compete on their hardware and software merits. That's why the iPhone has what other phones lack, and why its so expensive to add any of it afterward.

      iPhone OS X Architecture: the Mach Kernel and RAM

    12. Re:The Drawbacks? by Anonymous Coward · · Score: 0

      An 8 GB SD card costs $200 itself oh really?

      The article you linked to is a steaming pile of shit. Talk about fake scandals and phony rage. I mean, you started the article with this gem:

      The tech analysts beholden to Microsoft have jumped at the prospect of creating a toxic party tray to welcome Apple's entry into mobiles, stopping only to ask how high publishers want them to pile the phony iPhone bologna. And then you claim that you write about the facts? Just suck Steve Job's dick and get it over with dude!
    13. Re:The Drawbacks? by Anonymous Coward · · Score: 0

      I love reading articles from people who don't understand the difference between Flash and RAM.

      OMG! Apple worked out they can use Flash storage as a page file! THEY'RE BLAZING A TRAIL OF TECHNOLOGY!!!!!!!!

      Seriously - nothing new.

    14. Re:The Drawbacks? by digitalchinky · · Score: 1

      Adding 8 gigabytes to the Nokia N95 didn't increase its initial selling price by much at all. The price has actually fallen quite a good deal over the last couple of months and is now just a small amount above the original N95.

      Phones are not designed to be given away for free at all, you just need to read the fine print on your contract a little better. In nearly all cases you end up paying a significant amount more for a contract phone than you would if you had just purchased it outright from the beginning.

      The iPhone is not worth much of a second glance here in Asia. It simply wont compete, the reason for this is because it actually does lack a crap load of functionality (despite your opinion to the contrary) that has been bog standard in many phones over here for the last couple of years.

    15. Re:The Drawbacks? by Anonymous Coward · · Score: 0

      8GB built-in isn't needed on a smartphone. That's needed on an iPod.

      Smartphones need connectivity to Exchange, Office documents and a swappable battery. It may be pretty cool, but let's not stoop to calling the iPhone a "smartphone." It's an ipod you can talk on and has a webbrowser. It's a consumer device -- like all Apple products. Apple hasn't made a serious business product since Laserwriter II.

    16. Re:The Drawbacks? by Anonymous Coward · · Score: 0

      They also offer a 1/4 resolution screen. Quarter of what?

      You're up to your usual deception and twisting I see. QVGAs are Quarter-VGA displays (320x240), as I'm sure you're well aware. iphones have 480x320 displays which are larger, but not 4 times larger than smartphone displays as your post implies.

      What's your deal dude?

    17. Re:The Drawbacks? by jamar0303 · · Score: 1

      Heh- see how far behind America is? Japan's already offering 854x480 widescreens in their phones and we're still on 480x320!

      --
      OSx86 FTW
    18. Re:The Drawbacks? by OrangeTide · · Score: 1

      8GiB SDHC for $51. The prices are coming down fast!

      --
      “Common sense is not so common.” — Voltaire
    19. Re:The Drawbacks? by jacquesm · · Score: 1

      breaking news: phones can play mp3's... so the phone is *both* media player and cellphone. Amazing isn't it ?

      In other words, it makes perfect sense to have a large flash in your cellphone. Parent was talking about upgrading a windows based phone, NOT an iphone.

  4. Not safer by SuperBanana · · Score: 3, Insightful

    this move could 'open a lot of possibilities for the future,' mainly in terms of the speed of the updates and avoiding sloppy and possibly dangerous binary patches.

    Ugh. This is just another version of "open source code is more secure because you can review it and compile it yourself." Open source code can be more secure, because a qualified individual can conduct a lengthy security audit, and maybe catch some malicious or insecure code."

    • virtually nobody that uses the code will be even remotely qualified to even understand how the code works, much less be able to tell if it'll screw up their phone.
    • Opening development to more people makes the chances of someone SUBMITTING (note, I said "submitting", not "successfully getting away with putting malicious code into an official release) go up; now the few people who know what they're doing have to spend a lot of time reviewing code not just for correctness but malicious intent, something they may not be qualified to do.
    • Releasing the source code now makes it exceptionally easy for people to trojan the code and release a compiled version. The bar has been lowered from "knows assembler and iPhone internals" to "is decent with C."
    1. Re:Not safer by vertinox · · Score: 4, Insightful

      virtually nobody that uses the code will be even remotely qualified to even understand how the code works, much less be able to tell if it'll screw up their phone.

      All it takes is one person who knows how to read the code to make a rambling blog post detailing the vulnerabilities and submit it to Slashdot.

      Then all the people who didn't know how to read code will now know and the code reader will have his share of adsense for the month.

      But more seriously... When I have doubts about a software package, I just hit it up in Google to see if there has been wide spread complaints or other issues.

      As far as your other issues you bring up, in a closed source scenario what is to prevent a malicious person from just renaming any old trojan that they compiled to be the same exact size as the closed source exe and putting up a torrent of it? Sure it won't work at all as far as running the program, but it will do what they need to do. (Checksums anyone?)

      Even if a person uploads something maliciously into the main package, someone will eventually notice and with more eyes the faster this will happen. Of course this also helps out if the original coder is the one who is malicious.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    2. Re:Not safer by palegray.net · · Score: 4, Interesting

      Thank heavens we have a ton of security firms who make a living finding holes in both open and closed source software and publishing the results. Of course, their work is just a bit easier if the source is available, and it's just slightly easier to write a patch that solves the problem ;). I guess my main point is this: it isn't just the average user who looks at the source code for high-profile projects.

    3. Re:Not safer by Deanalator · · Score: 1

      I think that the type of people looking to unlock their phones are the type of people who would be interested in seeing how the unlock code works.

    4. Re:Not safer by TubeSteak · · Score: 1

      Releasing the source code now makes it exceptionally easy for people to trojan the code and release a compiled version. The bar has been lowered from "knows assembler and iPhone internals" to "is decent with C." The process I went through involved jailbreakme.com & then installing AnySim from the installer.

      To trojan that process, someone would have to hack the 'trusted source' I used or provide instructions that point the user to a trojaned source.

      Why would anyone install anysim from anywhere other than the official anysim website?
      --
      [Fuck Beta]
      o0t!
    5. Re:Not safer by HalAtWork · · Score: 1

      No shit end users won't. Parties who are trying to figure out ways to unlock the iPhone themselves, will, however. Open Source does allow end users to participate in documentation, translation, sending crash dumps, etc. You're right, end users won't be of much help to this particular open source project. However, other devs and other hackers will be able to help.

  5. Re:Sold out? by QuietLagoon · · Score: 2, Funny

    Yikes, I posted the comment on the wrong thread. this is sooooo embarrassing....

  6. Re:Sold out? by 4D6963 · · Score: 1, Offtopic

    Either the supply is low, or the demand is high. I would say that the supply of the 80GB Zunes has been limited so that the "news" articles can hype "it's sold out".

    I completely fail to see how this is newsworthy. I mean we get automatically noticed of Firefox updates, so why oh why post about a minor update on the front page of Slashdot?

    --
    You just got troll'd!
  7. To what? by noidentity · · Score: 3, Insightful

    I am not understanding title article what

    1. Re:To what? by Anonymous Coward · · Score: 0

      iPhone Dev Team (not the Apple one, but a bunch of people who call themselves that)
      to Open Source (verb)
      Free (as in beer)
      Unlock (noun, AnySIM is an "Unlock")

    2. Re:To what? by rueger · · Score: 1

      iPhone Dev Team

      Gotta say that I'm a pretty rabid Slashdot reader, I also immediately took that phrase to mean Apple itself. Which seemed pretty damned strange, but then again every time that I use Finder I get the same feeling that some things Apple does make no sense whatsoever.

    3. Re:To what? by stormguard2099 · · Score: 1

      can we make this AC an editor?

      --
      http://greenobyl.com/ please.... think of the children!!
    4. Re:To what? by Goaway · · Score: 1

      I love how there's a verb used as a noun AND a noun used as a verb in that title.

    5. Re:To what? by egr · · Score: 1

      That's a new method to ensure that slashdotters read at least the summary before posting something irrelevant

    6. Re:To what? by Anonymous Coward · · Score: 0

      And to be honest, this is probably why trademark law exists.... :P

  8. Open Source by BigZaphod · · Score: 2, Informative

    The iPhone dev community is largely open source already and the closed nature of some of the hack projects has always bothered me. I've released all of my code from my iApp-a-day project which took place last month, and a lot of people are learning from it and building better things now. I know I'd be interested to see how something like AnySim actually works under the hood. It's one thing to have an academic knowledge of how these things work, but quite another to see and experiment with it first hand.

  9. Much safer by bit01 · · Score: 4, Insightful

    Enough with the "closed source is inherently superior" propaganda. Whether you like it or not open source for the user is everything that closed source is. Plus the source is available.

    The idea that "closed source" is magical security pixie dust needs to die.

    this move could 'open a lot of possibilities for the future,' mainly in terms of the speed of the updates and avoiding sloppy and possibly dangerous binary patches.

    Ugh. This is just another version of "open source code is more secure because you can review it and compile it yourself."

    No, it hasn't. Try to understand that it's not just you reviewing the code but potentially many other parties apart from the originator. Are you trying to tell us independent third party review is not a good idea?

    Open source code can be more secure

    No, open source is likely to be more secure. Because many independent third parties can review it. Not just a vendor who has a commercial, ego or "not-enough-manhours" incentive to hide mistakes.

    , because a qualified individual can conduct a lengthy security audit,

    No, because many different individuals with many different levels of expertise can conduct all sorts of audits, security and otherwise, and in addition use the code in ways the the original author[s] never even envisaged.

    and maybe catch some malicious or insecure code."

    Better than no chance at all.

    * virtually nobody that uses the code will be even remotely qualified to even understand how the code works, much less be able to tell if it'll screw up their phone.

    So, out of a population of billions that leaves a population of thousands, or more, who are more than qualified to look at it. Think the statistics.

    * Opening development to more people makes the chances of someone SUBMITTING (note, I said "submitting", not "successfully getting away with putting malicious code into an official release) go up; now the few people who know what they're doing have to spend a lot of time reviewing code not just for correctness but malicious intent, something they may not be qualified to do.

    Malicious code is a strict subset of incorrect code. You check all your code for correctness, right? If you're not qualified to do that then you're not a programmer.

    * Releasing the source code now makes it exceptionally easy for people to trojan the code and release a compiled version. The bar has been lowered from "knows assembler and iPhone internals" to "is decent with C."

    No, it hasn't. Let me know when you've managed to break code signing and vendor repositories. Every binary package I use was either compiled/signed by the vendor or compiled by myself from vendor signed source code.

    ---

    I want a free and open market. Do you?

    1. Re:Much safer by TheSeer2 · · Score: 2, Funny

      The idea that "open source" is magical security pixie dust needs to die.

    2. Re:Much safer by bit01 · · Score: 1

      The idea that "open source" is magical security pixie dust needs to die.

      I know you're joking but nobody says it is, just that open source gives more options. Independent third party review is important, in everything from politics to crime to code.

      ---

      Keep your options open!

    3. Re:Much safer by ultramkancool · · Score: 0

      Hah! As far as this "makes it easier to trojan" nonsense goes, take any closed source app + a "binder"... seems even easier then hacking the source.

    4. Re:Much safer by Cheapy · · Score: 1

      You're absolutely right. Many third parties can review the code.

      But do they?

      --
      Would you kindly mod me +1 insightful?
  10. The real reason by prxp · · Score: 1

    The real motive for opening the source for AnySIM is that the iPhone Dev Team doesn't have the time to work on the project by themselves anymore. The other dev team (iPhone Elite Team) was able to patch the binary so it works with the new firmware (sort of) before any update form the iPhone Dev Team. They are so out of time that they still didn't reverse engineered the basic functions from iTunes that are necessary for the jailbreak process of newer firmwares. These are the functions iTunes uses for restoring the phone's firmware and stuff like that. Every thing was figured out for firmwares 1.0.2 and under, but ever since the Firmware 1.1.1 was out the process no longer used these funcitions directly. Instead, it relies on minor flaws in the update process like leaving some symbolic links that are no erased afeter the update or device files. Although these techniques work, you always have to downgrade the firmware, create the symbolic link or the device file, then update the firmware (the update process doesn't erase the links nor the device file). Ok, one might say they came up with a neat solution with the jailbreakme.com site, that uses a buffer overflow in Safari, but still, the old way was a lot better (since it used iTunes native calls) and faster. Don't get me wrong, I'm not complaining or anything, these guys are awesome. They simply don't have the time anymore. They have their families and their jobs. It's a cool project if you crack the phone just once and that's it, but when you're faced with the need to maintain the jacks, now that's not so cool. That's why they are opening anySIM, even though this will give apple much more information regarding the bugs that are being exploited. And I agree with them. After all, "Better off alone" just makes sense when you're actually doing something.

    1. Re:The real reason by Anonymous Coward · · Score: 0

      prxp shares: "The real motive for opening the source for AnySIM is that the iPhone Dev Team doesn't have the time to work on the project by themselves anymore. (...) They have their families and their jobs." Well, yes, usually school, and their parents monopolizing their time asking them to keep their room clean, or taking out the trash, could have an adverse effect on long term development.

      Then again, isn't Christmas Holidays right around the corner? That ought to allow them some time to catch up with some more rushed code to push out the door, to claim some remainder of their 15 minutes, right?

      Suddenly, iPhoneSimFree doesn't sound like such a bad proposition anymore - yeah, $60 but certainly well supported by a RESPONSIBLE developer.

      Anyway, after February, most of these hacks will well be a thing of the past. Watch the crying and screaming then...

    2. Re:The real reason by prxp · · Score: 1

      iPhoneSimFree relies on hack too. It modifies the baseband's seczone so it reflects a known seczone, and then proceed with the unlock. Since the seczone is unique to each phone, it's never modified nor erased by firmware updates. And that's why the unlock keeps working, not because it was developed by "responsible" people. Also, this hack is dependent in a bug in the firmware (because the code isn't signed), so If any new firmware update solves this bug the phone will go back to the locked state in a heart beat. Also, unlocking the phone this way is only reversible if you backup your seczone, a feature that's is not even offered by IPSF's software. So much for "resposible developer", huh?

    3. Re:The real reason by prxp · · Score: 1

      Just to complement my previous post, IPSF isn't maintaining anything. They don't even talk to you directly. Every contact you have with them is through their resellers, an the resellers are far from being able to solve the major technical issues regarding firmware updates. Also, the IPSF software is totally dependent on the DevTeam jailbreak. You can only install the unlock software in the phone after you jailbreak it! That means that if the dev team stops working, bye bye IPSF! How can anyone possibly thing going IPSF is even reasonable, let alone good????

  11. More iPhone Dev team stupidities? Great! by Anonymous Coward · · Score: 0

    Oh, wonderful - so now the same group of retards whose original sloppy work resulted in tons of iPhones initially getting bricked, have come with another masterplan to further endanger the safety of iPhones -- by essentially open sourcing code that deals directly with the innards of the iPhone, and stands the potentially to seriously screw up people's systems. Brilliant!

    Personally, I see this as a desperate attempt to counter the efforts of the 'iPhone Elite Team', who, for my money, are a far more reliable group of coders, and actually take their pursuits seriously (for the record, while the 'iPhone Dev Team' has promised lots of stuff, including unbricking of phones they previously bricked), the 'iPhone Elite Team' has actually delivered. For all I'm concerned, the 'iPhone Dev Team' is merely coasting along on the fame and recognition they originally garnered, and really hasn't done much - this open sourcing idea is motivated more by their search for relevance, than actually providing a worthwhile product.

    You combine that with a dawning realization that most likely by February exploits on iPhone will be mostly eradicated, and that backdoor hacks won't work in the era of the iPhone SDK(*), and these kids most likely see their 15 minutes ticking to a close.

    (*)Undoubtedly followed by howls of anger directed at Apple (particularly a drivel of passive aggressive articles from Erica Sadun), when these kids realize their hacking days have been severely curtailed... while the rest of us have stable and reliable iPhones with the occasional useful app for it.

  12. This is very confusing by Punto · · Score: 1

    By "iPhone dev team" do they mean the team at Apple that develops the iphone? why would they get to decide if the tool gets released without input from their corporate overlords? or is it just a bunch of people in their mom's basement who have nothing to do with apple that like to call themselves 'the iphone dev team'? in that case, why wasn't this open source in the first place? who runs a binary that can probably brick your iphone without having the source?

    --

    --
    Stay tuned for some shock and awe coming right up after this messages!

    1. Re:This is very confusing by Sancho · · Score: 1

      That was my thought.

      If I saw a headline which read, "Windows Dev Team to foo" I would assume that it was someone associated with Microsoft.

    2. Re:This is very confusing by kneemoe · · Score: 1

      "who runs a binary that can probably brick your iphone without having the source?" oh, i don't know, just about every single person out there with a free'd up iPhone.

      --
      My Sig Sucks
  13. It's all moot by Anonymous Coward · · Score: 0

    with the new bootloader anyway. None of the established software unlockers will work unless a new vulnerability is found in the baseband bootloader. Since Apple and Infineon seem to have done their homework this time, these unlocks might never work again. Not much fun to be had with maintaining dead code ;-)

  14. Re:Sold out? by QuietLagoon · · Score: 1

    :)

  15. is this really a good idea? by cjdkoh · · Score: 1

    yeah, let's show apple how we're cracking their phone. 'cause that's a good idea. sure, open sourcing it would mean that it would be developed faster assuming that apple don't see it. unfortunately that won't be the case.

  16. Widespread use in countries where it is not sold by kbahey · · Score: 1

    Here in Canada, Apple has not released the iPhone yet. Rumors last month said that Rogers will announce it before Christmas.

    However, you see some people here who use iPhone.

    Even in places as far away as Qatar, the iPhone is widely used there.

    Since all the sets had to come from USA (or recently from Germany and UK), they have to be unlocked in order to work with the "normal" GSM carriers. Which means it is a widely used practice.

    Perhaps Apple's dev team are just bowing to the inevitable. But how does that fare with AT&T and the exclusive contract.

  17. Apple already undercover? by Anonymous Coward · · Score: 0

    Apple may very well already have an inside man in the iPhone dev team, so keeping the source closed wouldn't make much sense in that case. I think Apple has more to win than to loose when the iPhone can get unlocked.

    The reason for this is probably that Apple doesn't want to miss out on the iPhone audience that doesn't want to tie themselves up to a 2-year contract with AT&T. If those potential customers cannot unlock the iPhone it means $0.00 revenue from them. Selling an iPhone without getting shared revenue from AT&T is better than nothing fro Apple.

    Obviously, they can't be promoting this because it would seriously fuck up further revenue sharing deals with mobile operators. Therefore they also "brick" the iPhone from time to time, just to discourage non-contract use and make a statement to mobile operators that Appple remains committed to their exclusivity.

    Just my 2 cents.

  18. Anyone else think "iPhone Dev Team" by SteeldrivingJon · · Score: 1

    is awfully self-aggrandizing on their part?

    The iPhone Dev Team is at Apple. These people are, at best, the iPhone Hack Team.

    --
    September 2011: Looking for Cocoa/iOS work in Boston area Cocoa Programmer Quincy, MA
  19. hacking iphone video by darrinallen · · Score: 1

    Fastcompany.com had a really good video of various exploits on the iphone.

  20. Idiot... by Anonymous Coward · · Score: 0

    Perhaps Apple's dev team are just bowing to the inevitable. But how does that fare with AT&T and the exclusive contract.

    Uh huh. You realize, of course, that the "iPhone Dev Team" is unassociated with Apple, and is merely a group of hackers that unlocked iPhones before Apple started adopting countermeasures, yes? No, of course you didn't, because you didn't read the article, nor bother to even read the abstract or other commentary before publicly posting your speculation about what an interesting strategic move this is for Apple. Oh what a good move for Apple! They're not doing it, asshat.

    I suppose I shouldn't blame you though. I guess it was hard to bother yourself to understand anything about the story, what with my cock in your mouth and all.

    Here in Canada,
    Canadian piece of shit... don't they teach you god damned caribou eating freaks to read in that armpit of a country? Why don't you fucking play some ice hockey, you fucking Francophone asshole Canuck. We'll be by to conquer you later.
  21. Re:Widespread use in countries where it is not sol by Baumi · · Score: 1

    Perhaps Apple's dev team are just bowing to the inevitable. But how does that fare with AT&T and the exclusive contract. iPhone Dev is not Apple's team. They're a bunch of hackers dedicated to allowing 3rd party apps on an iPhone.