Slashdot Mirror
Evad3rs Announce iOS 7 Jailbreak For Latest Apple Devices
hypnosec writes "Evad3rs, the famous iOS jailbreak team, has announced an iOS 7 jailbreak that will work in all iDevices including iPhone 5S, iPhone 5C and iPad Air running iOS 7.0 through to iOS 7.0.4. The iOS 7 jailbreak was announced without much of a hype, unlike the one for iOS 6. 'Merry Christmas! The iOS 7 jailbreak has been released at http://evasi0n.com/! All donations will go to @publicknowledge, @eff and @ffii,' tweeted evad3rs."
Reader FrogBlastTheVentCore adds a note of caution: "They recommend restoring your device to iOS 7.0.4 if it has received OTA updates before attempting to jailbreak."
iOS 7.1 is probably coming next month... now surely whatever exploit was used will be analyzed by Apple and double-patched for the final 7.1 release.
You'd think they could have waited just a little bit more!
Now if only Apple would bring out new iPod Touch hardware...
Twinstiq, game news
I just finished applying it to my 4th generation iPad. It took about 10 minutes, which was longer than I expected. It uploads an app to your device, which you then run to apply the jailbreak. If Apple would just include a Dvorak keyboard, my main reason for jailbreaking would be gone. Or rather, it would only be driven by my desire to tinker and not from any real need.
Or that there's so much broken code that they manage to keep finding new ones? Back in the 90's one of the contracting gigs I did was auditing the C standard library source for Data General, as part of their B2-secure certification process. Fast forward a decade or so and you never see anyone doing that. Someone I mentioned this to said it's because automated tools catch the same problems that people reading the code do, but there's plenty of code out there that obviously has never had those automated tools run against it. Hiring people to audit your code is expensive, licensing security-scanning software and developing processes to scan your code for exploits is expensive, saying you're sorry after someone exploits a security hole in your code is cheap. If no one ever does, or you never actually find out it's happening, it's free.
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
This jailbreak is completely broken, and according to multiple other jailbreakers the evasion team took money to include a piracy app store from china. You can see all the fun on twitter as they yell at each other.
Regardless of where the code is or when it was written, I have a root-level vulnerability that makes my phone insecure. I wish jailbreaking were both unneeded (because you could easily install your own software through official means) and impossible (because there weren't any security holes to exploit).
Dewey, what part of this looks like authorities should be involved?
" The fact that you can jailbreak your iPhone means that another party is able to compromise mine."
Well, yes. Though in a more global sense, practically every open OS on the planet, and most closed ones, are also "vulnerable" in this way. Linux doesn't require "jailbreaking" to load your own kernal patches - it's already "vulnerable" in the sense you're promoting.
And given that this essentially requires a very specific set of circumstances to achieve, including physical access to the hardware, it isn't the kind of vulnerability that causes me to lose sleep.
Is it just my observation, or are there way too many stupid people in the world?
Just because you're staying at the downtown Hilton doesn't mean you want to eat every meal at the in-house restaurant.
Is it just my observation, or are there way too many stupid people in the world?
Read Stefan Esser's Twitter feed for some off the problems with this jailbreak relating to a mandatory Chinese app store that get installed for some users (featuring pirated apps). They also left other members of the community like Saurik out, which is just odd. I wouldn't trust my devices with personal information with the current jailbreak.
It'd definitely harder now, and I see that as a very good thing. Remember the drive-by website that was basically a remote root exploit? There's a vast difference between requiring physical access and operator permission, and being able to root a system through the owner visiting a web page.
Dewey, what part of this looks like authorities should be involved?
The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
If they have physical control of the device, yes. Why would you trust any device you lost physical control of?
A leaked copy of the App Store Review Guidelines listed several things that no iOS app is allowed to do. For example, there's no public API for seeing which wireless access points are available, making network troubleshooting apps impossible. Nor can a developer create an app launcher that's more accessible to individuals with disabilities. Nor is there any web browser that implements HTML5 features that Apple deliberately left out of Mobile Safari.
Define "broken". It seems to do what it says it does. Why should I care that a Chinese app store that isn't available to me has been included?
When you jailbreak you're running random code from the internet that was specifically advertised as a security exploit. I don't know what sort of naive expectations you have.
Found here.
So there's no confusion, "jailbreaking" is exactly identical to "finding and exploiting a security vulnerability". By definition, someone is using an unpatched problem to root your device and replace the system software with their own version. The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
Technically, you are correct (the very best kind of correct). However if you followed jailbreaking more closely you'd realize a couple things.
1) There is no single exploit involved. With the iOS 6 jailbreak, they had to chain a whole sequence of things together to get root on the device.
2) In the end, it requires physical control over the device. As I understand it, the iOS 6 jailbreak required an exploit that allowed you to side load an app onto your device. That app, running on your device, then did all the heavy lifting of putting the jailbreak into place - which required additional exploits to allow the app out of its sandbox.
So what you say is true; but it's not something I'd lose any sleep over. I think the people who do need to be concerned are actual jail breakers - they need to be sure they're getting the jailbreak from "legitimate" (so to speak) sources.
#DeleteChrome
On older iOSes (version 5), you could use ssh tunneling , unzip your app (.ipa is a zip file), and run "scp -r -P 2222 Payload root@localhost:/Applications/", that is copy it to the /Applications directory. In iOS 4 you needed to reboot your phone for it to show up. In iOS 6 you need to modify some plist file or something for it to show up.
You can also try the ideviceinstaller command. You might need to sign your app first using ldid. Using the codesign command with your own personal certificate that you generate yourself.
But lets be honest, if you can afford an iOS device you can afford a subscription. It's all a matter of budgeting priorities.
"First they came for the slanderers and i said nothing."
Well said. I wish I had mod points.
Even the hottest girl in the room has a guy that's sick of her.
But lets be honest, if you can afford an iOS device you can afford a subscription. It's all a matter of budgeting priorities.
What if somebody gave it to him?
Money is tight, so I'm short the Apple Tax to do iOS development. But I have a jailbroken device.
What do I do to install my own App, that I developed myself, on my own jailbroken device?
IIRC $99 bucks to be legit or you could run them in the emulator. Putting them on your own device is not required to do development. Write something cool and you'll have volunteers.
Furthermore, while the jailbreak is considered "untethered", that only means you can reboot the phone without requiring a USB cable to a host computer (an important requirement in my book.) But as far as I know most jailbreaks still initially require the user to connect a USB cable to the device to load a special boot loader that injects the exploit.
John
Because they are installing the Chinese store with root access, meaning the code can do whatever it wants with the information on your device and send that information to wherever they want. Jailbreaking always comes with risk, but this basically compromises your device with unknown and unreviewed code. But hey, if you feel like dancing with the devil, go for it.
Don't see any Chinese app stores. Just Cydia. All working well. Biggest problem: Nothing on Cydia is yet compatible with iOS 7.x, so in a way there's no point unless you just want system access—there's next to nothing that you can install and use. But hopefully that will change in time.
STOP . AMERICA . NOW
It throws the "It's only for homebrew, I swear"-rationale out the window.
In general, many of these bugs (both in iOS and Android) do not necceserily require physical access, even if that is the easiest way to use them. Ultimately they are just a regular app without any special permissions that, once up and running, use a traditional privilege-escalation type of exploit to gain root privileges on the device and complete its job.
Interesting...http://evasi0n.com/l.html
I love the idea of jailbreaking. Love it. I fully support your right to install whatever you want on the hardware you bought.
But.
So there's no confusion, "jailbreaking" is exactly identical to "finding and exploiting a security vulnerability". By definition, someone is using an unpatched problem to root your device and replace the system software with their own version. The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
Again, I support everyone installing whatever they want on their devices. I'm not thrilled that this can be done on an iPhone by hacking deep into the system through a chunk of broken code somewhere.
Hmm... I just realized something. If Apple provided a means to gain root on iOS devices, it's likely they would never have discovered any of these security holes. Interesting paradigm. Security through preventing customers from doing what they want.