Slashdot Mirror
Apple IOS 4.3.4 Jailbroken Hours After Update
Stoobalou writes "The cat and mouse game between Apple and the jailbreaking community continues unabated as an updated version of PwnageTool hits the web just hours after apple updated its iOS mobile operating system to lock out the JailbreakMe PDF-based exploit."
Here is a fixed title: Apple IOS 4.3.4 Drive-By Exploit Released Hours After Update
All a malicious person needs to do is make a porn site for iPhone and iPad users and use the PDF exploit to gain root. Then they can for example install a hidden app that calls and sends sms to premium rate numbers, or do anything else they desire with the device. But somehow this exploit gets turned as a great thing all while the same users are touting how secure their Apple products are.
Did you expect otherwise?
In the words of Stanley Jobson, from the film Swordfish, "Nothing is impossible."
Note: "There was an unknown error in the submission", constantly. I suspect you think this is spam, or the hamster in your wheel has died. so please let this post go through, comment system.
Haa haaa!
Tethered is much easier to do, and much less useful, since it requires re-doing it after every device reboot.
Thanks to your desire to run any software you wish, you're finding security holes for Apple, free of charge.
Keep up the good work.
Although it did take /. longer to have the follow up to this story.
Time to offend someone
No, this isn't a new jailbreak. It's an existing exploit which uses the same hardware exploit found by Geohot MONTHS ago. The exploit install software is now configured for the new iOS version is all. This is why it's a TETHERED exploit, as the untethered exploit add-on no longer works in 4.3.4.
Is anyone technical even working at Slashdot anymore?
This jailbreak requires you to have your phone connected to your computer at every reboot in order to root it, and root is lost if phone is rebooted without connecting to the computer.
The PDF font handling vulnerability gave you perma-root (unthethered) and could also be used as a drive-by exploit.
In short, misleading title is misleading.
Finally had enough. Come see us over at https://soylentnews.org/
They're using the hardware exploit, which requires changes to the hardware to fix, and requires you be tethered to perform it. Nothing new here, Seriously.
Is there anything that is quite as effective as bragging rights to drive innovation (besides Economics, of course)? I don't know if security on iOS could get any better faster if you didn't have a determined group trying to break it publicly.
Friends help you move. Real friends help you move bodies.
Never forget: 2 + 2 = 5 for extremely large values of 2.
You wish death on Steve Jobs for removing security holes in his products?
The relevant question is: How many days until they come up with an untethered break? I give it no more than 2 weeks, tops.
Don't buy an iPhone.
Really? Why? Slow-news-day perhaps?
Is that what they're calling locking down a device these days?
By your logic, if the black helicopters showed up on your front lawn and hauled you and your family away to a detention camp they'd be "removing security holes".
In a way, you'd be right, too.
Remember what Ben Franklin said about security. If you're willing to give up your freedom for security, you don't deserve either. By Franklin's logic, Apple users deserve nada.
You are welcome on my lawn.
>
Remember what Ben Franklin said about security. If you're willing to give up your freedom for security, you don't deserve either. By Franklin's logic, Apple users deserve nada.
I have always felt this way. "It just works" is a good way to describe the way the Burmese regime works. Of course it just works, there is not allowed to be any dissention among the ranks. If the large population of iDiots that purport to have superior products, security, etc ad nauseum actually looked at everything they were giving up just to have their comfy blanket of apple security, they'd be a little disappointed.
I got here through a series of tubes
Is that what they're calling locking down a device these days?
No, that is what we call removing arbitrary privileged code execution vulnerabilities in web browsers.
...who (try to) secure the iphone. They're obviously going to be clever people and very capable engineers, and even though it must be satisfying to solve these problems, I sometimes wonder if they ever have any qualms about working all day to deliberately limit the functionality of a really amazing bit of kit. All the best programmers I've worked with have that tinkering, hacker (in its original sense) mentality, and if I was in their position I'd probably be wondering about the overall worth of spending my time preventing users from accessing their own filesystem.
Then I'd shrug and think about my stock options to make myself feel better ;-p
/. should really have a macro for that quote as much as it gets used here.
Type BFQ and autoexpand from there.
I guess "iOS 4.3.4 Prevents Hacking and Jailbreaking" wasn't true after all.
Correct title is. The same LimeRa1n exploiot that cannot be patched is still open.
It's a shame Sprint has abandoned the HPalm line. Hopefully it will gain traction on Verizon and ATT. No 'jailbreaking' necessary. The platform is open and easy to modify to your heart's content. HP actively recognizes, encourages, and works with the homebrew community.
http://www.webos-internals.org/wiki/Main_Page
Is that what they're calling locking down a device these days?
No, that is what we call removing arbitrary privileged code execution vulnerabilities in web browsers.
Definitely. It's the same thing Google did with Android in 2008. They patched an exploit that was also used to jailbreak phones.
This is the internet... we normally don't require MLA citations for things that are more or less common sense.
But if something is contested, it'd be nice to have a URL or at least proper Google keywords to research the issue. Hence the "citation needed" meme that started at Wikipedia.
I didn't buy an iPhone. But what should I buy instead of an iPod touch? Samsung Galaxy Player didn't appear available last time I looked, and Archos devices don't have Android Market.
In two separate stories now, it has been put forth that Apple pushed out this fix with the mustache-twirling intent to stop jailbreaking.
Well obviously not, since the problem that lets tethered jailbreaking work is without issue. The REAL reason Apple "broke" untethered jailbreaking is that it was a gaping flaw in PDF handling that would let an attacker gain control of the system.
I realize Slashdot has a more general readership these days but surely anyone can see that leaving an exploit like that unlatched is bad. In fact other companies have been chastised for leaving holes like that open for too long, and rightfully so...
So please let us drop the pretense that every security patch is Apple out to stop jailbreaking. Apple in fact does not really care if you jailbreak, and is using it covertly to see what new features might be good to add to the platform by viewing the experimental jailbreak community... sometimes not so covertly as the case of them hiring the guy who did jailbroken notification handling to fix notification handling in iOS5! I can't think of a clearer signal that jailbreaking has at least covert approval within Apple.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
When I saw that the IOS 4.3.4 Un-jailbreakable! story was still on the front page when this came out. And remains there as of this writing.
Who did what now?
The security hole was real, and could be used to run arbitrary code on your phone, not necessarily to give you control over it.
Slashdot used to be run by technical editors
Slashdot has been run by the Promote Australia At Every Turn dept. for quite some time.