3 ms·
This is stupid. Anyone interested in writing jailbreaks for iOS would have already had access to these binaries. People are blowing this way out of proportion.
by dguido 10y ago
This is stupid. Anyone interested in writing jailbreaks for iOS would have already had access to these binaries. People are blowing this way out of proportion.
- willstrafach 10y agonot true. 64-bit kernel was previously not possible to examine. additionally: we now know what Watchtower looks like, something that was previously a mystery and even incorrectly thought to be something that ran on SEP instead of the AP.
- dguido 10y agoIf Stefan says it will you believe me? https://twitter.com/i0n1c/status/745922795977187329 https://twitter.com/i0n1c/status/745922795977187329 You just used a kernel privesc that you probably already had to read it. NOT A BIG DEAL.
- jevinskie 10y agoThat gets you a kernel dump, a decrypted kernelcache gives you very handy MachO headers. And as Will said, the well known kernel dumping methods do not dump Watchtower. I'm not sure if anyone has privately been able to dump Watchtower with a kernel privsec or if it has only been possible with the kernelcache keys.