2 ms·
So your scenario is >code gets leaked >incentive to find bugs in signing increased >bug in signing found Offhand I would think the value of an exploitable s
by ikeboy 9y ago
So your scenario is
>code gets leaked
>incentive to find bugs in signing increased
>bug in signing found
Offhand I would think the value of an exploitable signing bug is an order of magnitude greater than the cost of making a custom software. At the very least it trivially allows jailbreaks, which puts it in the million dollar range depending on how exploitable it is, and I think creating iOS software that skips the passcode would at worst be in the low six figure range if it didn't need signing, more likely mid five figure.
Saurik said it could be done in a week by a talented programmer (see https://news.ycombinator.com/item?id=11153022 https://news.ycombinator.com/item?id=11153022), so even though the supply of such programmers is limited I'm still confident the total cost would be 5 figures.
So the additional incentive would be pretty insignificant compared to the existing incentive.