iOS 6.1.3 Beta 2 Patches evasi0n Jailbreak

hypnosec writes "Apple released iOS 6.1.3 beta 2 to developers, patching at least one of the vulnerabilities used by evasi0n thereby rendering the jailbreak tool useless — the time zone settings vulnerability. David Wang aka @planetbeing, has confirmed that iOS 6.1.3 beta 2 does patch one of the vulnerabilities that they exploited in their evasi0n tool."

Comments

The Apple Monoculture:

[Hartree]

Apple: Doing our best to remind you it's OUR gadget, not yours.

Re:The Apple Monoculture:

[cshark]

Right. That's exactly it. It's a clear message to power users, and it's hard to mistake it for anything else. What they're saying is, "don't buy our gadgets."

Re:The Apple Monoculture:

[amicusNYCL]

I've always wondered why jailbreaking exists. If people wanted to do whatever they wanted to their phones, why would they get an iPhone? The reason I've never even considered an iPhone is because of Apple's attitude towards it.

Re:The Apple Monoculture:

[cshark]

Well, the way I remember it, jail-breaking came about because someone noticed that you can run a full on unix command line on an i-phone. This was before we had Android phones, and it was really fucking novel at the time. I can't tell you how many times I had to sit there, and hear the fan boys ask me things like, "So, can you ssh into your Nokia?" To which I always told them, "Look dude, if I wanted a command line, it would have a real fucking keyboard."

Re:The Apple Monoculture:

[dreamchaser]

I've always wondered why jailbreaking exists. If people wanted to do whatever they wanted to their phones, why would they get an iPhone? The reason I've never even considered an iPhone is because of Apple's attitude towards it.

It shouldn't matter. If you buy something it is yours, and you should be able to do whatever you want with it. I prefer Android (I use an Asus Transformer Prime as my tablet) but work gave me an iPhone. I don't care for it, but not because of the walled garden. I just like Android better. That being said, if I did decide to buy my own iOS device I should be able to do whatever I want with it and its software. That is why jailbreaking exists.

Re:The Apple Monoculture:

[MightyYar]

Most Android devices are locked, too. Sometimes you buy a product for other considerations and if you can root it... great.

Re:The Apple Monoculture:

[cheater512]

They didn't know about the N900? The one where you could ssh in and had xterm installed by default?

Yeah it had a real keyboard too. :P

Re:The Apple Monoculture:

[Microlith]

Caveats, caveats everywhere.

Android, even on devices with a locked bootloader, allows for installation of software from sources other than the Play Store. On iOS devices, you cannot install any software from sources other than the App Store, period.

Android vendors that lock the bootloader quite often catch a lot of shit, so I don't really see how this is equivalent.

Re:The Apple Monoculture:

[Microlith]

The iPhone and its local SSH server predated the N900 by about 2 years.

Re:The Apple Monoculture:

[DigiShaman]

Depends on if you believe in the concept of a 'contract' or not. The problem isn't that Apple refuses to let you use the hardware as you see fit. The problem is that Apple hasn't clarified the expected and blatant terms of use. It's pretty obfuscated if you ask me.

Let me give you an example of future GPU (Video cards) and CPU technology. Suppose the yields are so good, and yet the R&D costs are naturally expensive. What if there was just one hardware production run whereas "cores" are unlocked based on the serial code you enter into the BIOS. Want an upgrade? Upgrade your serial code. It saves you money, it saves the manufacture money. Impulse purchasing and upgrading all from the seat of your desk. Everyone wins right? Economic theory would say yes. But the idea you own the hardware - yet can't touch it (because you're not licensed for it) is a big taboo among crowd here.

Re:The Apple Monoculture:

[Kyusaku Natsume]

Yeah, it is not like the vulnerabilities used by jailbreak tools could ever be also used by malware or anything.

Re:The Apple Monoculture:

[Microlith]

Slapdown? Just pointing out fact. My N900 and N9 still see regular use and will until something I actually want to buy comes along.

Re:The Apple Monoculture:

[jonwil]

Please explain what makes the Nexus 7 and Nexus 10 tablets worse than an iPad...

Re:The Apple Monoculture:

[FyRE666]

I own a Nexus 7, Nexus 10 and the latest iPad (also owned previous iPads, iPhones, and numerous other Android phones/tablets). The build quality and battery life of the iPad is certainly higher than the Nexus devices. It's pretty obvious if you've used both extensively. I've also had more glitches on the Android devices (e.g. current Google Nexus phone not ringing when people call after it's been running for a week or so, sometimes staying on lock screen when a call comes in, occasional UI quirks). Also the iPad mail app is much better than the Android offerings. Nexus 7 has terrible sound quality through external speaker - not a show stopper, but really should be addressed.

That said, I much prefer using the Android devices for day to day use. I also spend far more time developing for Android than iOS (in fact let my iOS dev license expire now) and I recommend Android to clients for the type of work I do - my apps are generally not available to the public. I hate being tethered to iTunes, forced to distribute apps via the Apple iTunes store, and Apples general lack of innovation or improvement (not adopting NFC for example).

So that's my experience; day to day I carry a Nexus 7 around with me, along with my Nexus phone. If I'm anticipating doing a lot of email, I'll either take my laptop, or the iPad2 instead. Im not a fanboi of either camp - just use what I think is most suitable.

Re:The Apple Monoculture:

[SilenceBE]

Because of the bigger range of quality apps to be honest.

And btw I'm an android developer but my main tablet for example is still an iPad. The thing that harms andriod seriously is fragmentation, bad documentation (quality, not quantity) , less strictness which results that a lot of hw companies are sloppy, weak support for older devices, no really good design guidelines,... . For me it is the Drupal of the mobile world. Not a bad platform, but it sometimes drives me nuts.

People that say things like "they think the software is better... And are greatly mistaken" have never used the two platforms on a daily basis. Android is slowly getting there, but the really big problem is that a lot of devices are still suck on 2.3 gingerbread. It would be nice if android hw companies would support their older devices as Apple does with older hardware. An iPad 1 being stuck on iOS 5 is nothing in comparison with a lot of android situations. And the number of normal people (non geeks) that root their phone is zero to none.

To be honest with Android I have the feeling that a lot of love gets into the advertisment or google services part of the os, but it lacks in the other departements. The Android API (especially the older versions) sometimes amazes me in stupidity.

Re:The Apple Monoculture:

[AK Marc]

There are viruses and anti-virus for Android. The closest to that is a small amount of malware for iOS that requires jailbreaking and manually installing. Apple is safer for not offering the choice.

Re:The Apple Monoculture:

[AmiMoJo]

Android is like VHS and iOS is like BetaMAX. VHS was open and anyone could implement it, resulting in some really terrible VCRs but also some really good ones. BetaMAX was pretty much limited to just Sony and eventually lost out because VHS outsold it.

BTW, having recently done some Android development I think the documentation is fine, certainly no worse than most systems. Admittedly I have not done any iOS development for comparison, but most of the people raging about Android on Stack Exchange are the ones who don't really get the mobile app paradigm.

Re:The Apple Monoculture:

[AmiMoJo]

The Nexus 10 is on a par with any iPad for build quality. The Nexus 7 does feel a little bit less high end but then again costs half what an iPad Mini does, and it has a better screen. It is by no means cheap and the textured back cover makes it very easy to hold.

Battery life seems about the same for each, except that you can replace the Nexus 7 battery easily so there is no need to go easy on it.

Vulnerabilities

[thadman08]

Why is there so much outrage at this? Jailbreaking works by first finding bugs and vulnerabilities and then exploiting them. Yes, Apple is preventing jailbreaking, but they're also securing their OS.

Re:Vulnerabilities

[Desler]

Such as?

Re:Vulnerabilities

[Moridineas]

I have owned an iPhone 3GS and currently an iPhone5. I have jailbroken both of them. I was very happy when evasi0n was released, and immediately downloaded biteSMS and several other great Cydia apps.

Everyone who buys an iPhone knows exactly what they are getting in to. Nobody is conned or tricked or forced to buy an iPhone.

Apple has every right to patch security holes in their OS and software. Even as a jailbreaker, I expect nothing less. Should Apple have left a PDF rendering buffer exploit that allowed the easiest jailbreak in history (jailbreakme.com) open just so people could jailbreak? Obviously not. That's an easy example, but just which security holes should Apple leave open for jailbreakers?

I wish Apple would allow easy legitimate rooting. But, they don't. I made the choice that I still like the iOS world and hardware. I might feel differently in 2 years, but that's where I am now. Furthermore, Apple does give you some pretty granular control over tracking, ads, location services, etc. You're really getting offtrack on to tangential issues what that tack.

No need for the disingenuous hysterics about "morally inferior" people, etc. One can imagine that you would be complaining if Apple was NOT patching security holes... Keep it straight--attack the walled garden and Apple's choice to lockdown directly. Don't coat it in a guise of outrage over bug patching.

Re:Maybe I'm missing something...

[Nerdfest]

Jailbreaking is done by exploiting security holes. If the holes are left, they'll be exploited by others for less noble means. There have been a couple of jailbreaks that merely involved visiting a web site. They must be patched.

Re:Sigh, there goes another hope shot down

[Moridineas]

Allow me to introduce you to evasi0n, the subject of this (RTF)Article.

http://evasi0n.com/

I think you will be pleased!

I seriously wish Apple would simply

[aussersterne]

get with the program. I don't have a problem with a secured OS that can't be jailbroken.

But I do have a problem with the way in which Android offers compelling features that Apple doesn't—like applets that display information on the launcher screen, and a notification system that doesn't suck. All of which are only available to iOS through Cydia. Grrrr.

I also wish Apple would release a phablet-sized iPhone.

I'm caught between two worlds. I'm a Mac user and an iPad user and until recently an iPhone user. But I switched to Android because it did things that iOS simply doesn't do right now without jailbreaking (which I get tired of—I want OS updates *and* features, not a choice between the two), and because Apple seems dead set against a phone with a large display.

But now, with a Galaxy Note II, I'm stuck with the crashiness, laggishness, UI inconsistency, and comparatively crappy apps available for Android. It's a no-win situation.

There's no comparison between iOS and Android when it comes to UI consistency and the smoothness and transparency of the system, or the app store. iOS wins hands down, and it isn't even close.

But there's also no comparison between iOS and Android when it comes to features, flexibility, and form factor. Android wins hands down.

But I hate having to choose between these when it's clearly technically possible for humans to build a great device with great UI consistency, smoothness, and transparency, great apps, and great features, flexibility, and form factor.

As a user, it's like being caught in a battle between two self-centered idiots.

"Power users" don't jailbreak

[Pausanias]

I used to jailbreak during iOS 4-5 days. Spent a lot of time installing this or that tweak, feeling like such a cool "power user." Oh my, animated wallpaper and SSV Normandy replacing the words "AT&T" on the upper left corner of my screen. This or that tweak that let me access this or that feature with one less gesture than before.

What a freaking waste of time. And at what cost? Random applications written by anonymous people on the net running as root on your iPhone, with full access to your private data if they wanted it? You are putting yourself at extremely high risk by circumventing the iPhone's security and running all this closed source software as root.

Jailbreaking is a security nightmare, and you're not worthy of the term "power user" if you allow someone called chpwn or BigBoss to run closed source shit as root on your personal communication device. By the way, that jerk BigBoss wouldn't let me run his software if I blocked ads on my hosts file. WTF dude, let us live a little?

If you really want flexibility, at least go to Android, where they publish their source.

It finally took cold turkey---bought an iPhone 5 when it came out, with no jailbreak for months---to learn that I really like my iPhone the way God intended it: nice and stable and closed---and even if not 100% secure, still better than giving some random dude called p0sixninja full access to my device. I get more stuff done now---you know, real work that I need to get done for my real career and not messing with a half-assed implementation of Expose that causes my phone to reboot half the time (yeah---the instability and the random reboots are yet another downside of jailbreaking).

Re:"Power users" don't jailbreak

[blind biker]

to learn that I really like my iPhone the way God intended it:

You are allowed to cal God by His real name - Steve Jobs.

Comment removed

[account_deleted]

Comment removed based on user account deletion

I understand the concept

[YesIAmAScript]

But if you have a problem with a device that is a walled garden, why did you buy it?

If you buy DRMed content expecting it'll be cracked, that works, until it doesn't. Meanwhile, you bolster the financial argument for selling DRMed content by buying it. And you diminish the importance of offering unrestricted content.

If you buy a walled garden device expecting it'll be cracked, that works, until it doesn't. And again, you bolster the financial argument for selling walled garden devices.

And then after a while, you find that the DRM isn't being cracked so easy anymore. And the walled garden devices you have been buying stop being cracked so easy too, maybe at all. And meanwhile the devices you can control are gone, because no one bought them. Companies got the message they don't need to offer more open devices, and so they didn't.

If you want to be able to buy open devices in the future, buy open devices today. Don't buy closed devices and then complain when they are re-closed.