3 ms·
No, due to full userspace codesigning.
by HappyTypist 11y ago
No, due to full userspace codesigning.
- ikeboy 11y agoThen what can it do on iOS <9.3? You can load any code you want by signing it yourself, so if this lets you escalate from there it should work for a jailbreak, although a more complex one than usual. IIRC some jailbreak releases used developer certificates to get the first code running.
- ikeboy 11y agoFrom reddit: >it doesn't yield kernel code execution (except on OS X where you can just load kexts with the right entitlement), and it requires execve (which you cannot call under the container sandbox profile on iOS). https://www.reddit.com/r/jailbreak/comments/4bm9ka/news_project_zero_race_you_to_the_kernel/d1ahphr https://www.reddit.com/r/jailbreak/comments/4bm9ka/news_proj...