3 ms·

Sounds like ios8 will be the last jailbreakable version. Shame.

userbinator 11y ago
If the last 8 versions were jailbreakable I think this one will be too - eventually - but it is certainly the case that devices are becoming more secure both for and against their owners. The tension between freedom and security is definitely increasing.
- rimantas 11y ago
  OTOH, Apple TV 3 was never jailbroken, iirc. Sure, that may just mean not enough interest.
- ikeboy 11y ago
  But who's going to release one publically when they can get $1 million for not doing so?
  - burkaman 11y ago
    You can only get a million for a really impressive jailbreak. If it involves plugging the phone into your computer and downloading something, or even just pushing a button, it doesn't qualify for this bounty.
    - ikeboy 11y ago
      Fair enough; but if you're a hacker looking for exploits, what do you search for first?
captainmuon 11y ago
I wonder if we will now see more hardware-based jailbreaks. It's a bit like with oil drilling. Once the easily accessible options are gone, people reconsider options that used to be considered too expensive to exploit or too damaging for the environment. Like fracking, oil sands, oil wells that are very deep or far up in the arctic, ... In the case of iOS explots, maybe you'll be able to jailbreak it over the lightning connector. Maybe you'll have to open the phone and hook up the circuit board to a device. Maybe someone in china will build a robot for phone shops that'll disassemble, jailbreak, and reassemble a phone in seconds (and replace a cracked screen while it is at it). Heck, maybe it'll become economic for criminals to bribe and/or blackmail Apple engineers to put a backdoor into iOS, or to leak keys?
- userbinator 11y ago
  Heck, maybe it'll become economic for criminals to bribe and/or blackmail Apple engineers to put a backdoor into iOS, or to leak keys? Or just become Apple engineers... I'm sure there's people out there who would be absolutely thrilled at the idea of working for Apple and writing code for iDevices while at the same time secretly subverting them.
kristofferR 11y ago
iOS 9 has already been jailbroken, but it's not going to be released: http://9to5mac.com/2015/09/10/ios-9-jailbreak-video/ http://9to5mac.com/2015/09/10/ios-9-jailbreak-video/
saurik 11y ago
I am under the impression that the large companies in China (the equivalents of Google, Microsoft, and Ebay/PayPal), who have essentially been funding the jailbreaks of iOS 7 and 8, have been paying quite hefty sums as well (if not a million dollars, then I would argue "close enough" that even people who only see "sort of a problem" with selling weaponized exploits to arms dealers might still value the ethical advantages of a public release at least highly enough to cover the marginal utility of the price difference), as they use them as part of a proxy war to "control mobile" by providing an alternative App Store (with actual "Apps", unlike Cydia) for Chinese users; so like, this might change the game slightly, and I do know people in our community whose hats are sufficiently dark that they would be swayed by this, but it isn't a done deal or anything. (Further, I will point out that most jailbreaks don't even involve a remote and silent deployment: while there are tons of possible exploitable bugs found in WebKit all the time, Apple has sandboxed the living daylights out of that process, and a lot of the kernel bugs people find don't work even in processes that have the lightest of sandboxes. The standard stack for a jailbreak is usually something that requires the device to be pincode unlocked and plugged into a computer that the device has been told to "trust", in order to take advantage of the attack surface provided by the protocols iTunes and Xcode use to talk to the device over USB, which often will touch the filesystem in complex ways, at least indirectly if not directly as part of something like "restore a backup". If you find this kind of limited stack, you usually don't just "throw it back" and keep fishing ;P.)
- lawnchair_larry 11y ago
  Yeah, totally missed that they want silent deployment, and they lose the benefit of the owner unlocking the device. So this probably isn't actually a game changer at all.
casperc 11y ago
If the objective is (and correct me if it isn't) to be able to install arbitrary software on iOS, isn't that possible now with Xcode 7 and free provisioning? Personally I am hoping Github will be the new way through which to install non-store apps.

If the last 8 versions were jailbreakable I think this one will be too - eventually - but it is certainly the case that devices are becoming more secure both for and against their owners. The tension between freedom and security is definitely increasing.

rimantas 11y ago
OTOH, Apple TV 3 was never jailbroken, iirc. Sure, that may just mean not enough interest.
ikeboy 11y ago
But who's going to release one publically when they can get $1 million for not doing so?
- burkaman 11y ago
  You can only get a million for a really impressive jailbreak. If it involves plugging the phone into your computer and downloading something, or even just pushing a button, it doesn't qualify for this bounty.
  - ikeboy 11y ago
    Fair enough; but if you're a hacker looking for exploits, what do you search for first?

captainmuon 11y ago

I wonder if we will now see more hardware-based jailbreaks. It's a bit like with oil drilling. Once the easily accessible options are gone, people reconsider options that used to be considered too expensive to exploit or too damaging for the environment. Like fracking, oil sands, oil wells that are very deep or far up in the arctic, ... In the case of iOS explots, maybe you'll be able to jailbreak it over the lightning connector. Maybe you'll have to open the phone and hook up the circuit board to a device. Maybe someone in china will build a robot for phone shops that'll disassemble, jailbreak, and reassemble a phone in seconds (and replace a cracked screen while it is at it). Heck, maybe it'll become economic for criminals to bribe and/or blackmail Apple engineers to put a backdoor into iOS, or to leak keys?

userbinator 11y ago
Heck, maybe it'll become economic for criminals to bribe and/or blackmail Apple engineers to put a backdoor into iOS, or to leak keys? Or just become Apple engineers... I'm sure there's people out there who would be absolutely thrilled at the idea of working for Apple and writing code for iDevices while at the same time secretly subverting them.

kristofferR 11y ago

iOS 9 has already been jailbroken, but it's not going to be released: http://9to5mac.com/2015/09/10/ios-9-jailbreak-video/ http://9to5mac.com/2015/09/10/ios-9-jailbreak-video/

saurik 11y ago

I am under the impression that the large companies in China (the equivalents of Google, Microsoft, and Ebay/PayPal), who have essentially been funding the jailbreaks of iOS 7 and 8, have been paying quite hefty sums as well (if not a million dollars, then I would argue "close enough" that even people who only see "sort of a problem" with selling weaponized exploits to arms dealers might still value the ethical advantages of a public release at least highly enough to cover the marginal utility of the price difference), as they use them as part of a proxy war to "control mobile" by providing an alternative App Store (with actual "Apps", unlike Cydia) for Chinese users; so like, this might change the game slightly, and I do know people in our community whose hats are sufficiently dark that they would be swayed by this, but it isn't a done deal or anything. (Further, I will point out that most jailbreaks don't even involve a remote and silent deployment: while there are tons of possible exploitable bugs found in WebKit all the time, Apple has sandboxed the living daylights out of that process, and a lot of the kernel bugs people find don't work even in processes that have the lightest of sandboxes. The standard stack for a jailbreak is usually something that requires the device to be pincode unlocked and plugged into a computer that the device has been told to "trust", in order to take advantage of the attack surface provided by the protocols iTunes and Xcode use to talk to the device over USB, which often will touch the filesystem in complex ways, at least indirectly if not directly as part of something like "restore a backup". If you find this kind of limited stack, you usually don't just "throw it back" and keep fishing ;P.)

lawnchair_larry 11y ago
Yeah, totally missed that they want silent deployment, and they lose the benefit of the owner unlocking the device. So this probably isn't actually a game changer at all.

casperc 11y ago

If the objective is (and correct me if it isn't) to be able to install arbitrary software on iOS, isn't that possible now with Xcode 7 and free provisioning? Personally I am hoping Github will be the new way through which to install non-store apps.