4 ms·
Except jailbreaks are historically much harder to find than root exploits. iOS 10 still has no public jailbreak. You can see this reflected in the going rates
by ikeboy 10y ago
Except jailbreaks are historically much harder to find than root exploits. iOS 10 still has no public jailbreak.
You can see this reflected in the going rates for vulnerabilities, respectively. A remote iOS jailbreak can net you a cool 1.5
million, while Android goes for $200,000.http://arstechnica.com/security/2016/09/1-5-million-bounty-for-iphone-exploits-is-sure-to-bolster-supply-of-0days/ http://arstechnica.com/security/2016/09/1-5-million-bounty-f...
- m_eiman 10y agoIs there any reason to suspect that the same technique wouldn't work to get root on iOS? Then there's the slight problem of rootless that makes it harder to do a permanent jailbreak, but getting root should be a pretty decent step along the way.
- userbinator 10y ago"rootless" is no real obstacle, Rowhammer is almost an arbitrary memory modification exploit. All you need to do(!) is find and modify the appropriate bits, and you will have full control. With "sufficient" effort you should be able to get files in persistent storage modified too, and from there get a permanent jailbreak.