3 ms·
With the Bootloader exploit on iPhone X and older, its actually worth looking at them now.
by amiga-workbench 6y ago
With the Bootloader exploit on iPhone X and older, its actually worth looking at them now.
- fastball 6y agoCheckm8 is a tethered exploit, so probably not super useful if you want to sideload another OS and not have a bad time.
- Nextgrid 6y agoI remember back in the days of the iPhone 3G(s?) there was an attempt at a battery-powered dongle that could re-jailbreak a phone in the field in case of a reboot. The same technology could be built into a battery case or similar, not to mention recent technological advances mean it can be done in a small package the size of a Lightning connector or a Yubikey and you can carry it on your keyring.
- ThatPlayer 6y agoThere's a similar product for Nintendo Switch jailbreaking: NS-Atmosphere or RCMLoader. Since it's a bigger device, some of them are soldered internally using a Trinket M0
- vageli 6y agoDoes this mean you'd have to walk around with an unlocked bootloader all the time?
- Nextgrid 6y agoGiven the vulnerability we're talking about, the boot loader is already unlocked (because it's vulnerable) and can be exploited by any malicious USB device if the phone is placed in DFU mode. The dongle idea I'm talking about would be to have a convenient way to exploit the vulnerability for the benefit of the user to boot the device into a jailbroken mode in case of an unexpected restart (battery runs out and you're away from your computer).
- fastball 6y agohttps://twitter.com/SamGuichelaar/status/1177685513807024128?s=09 https://twitter.com/SamGuichelaar/status/1177685513807024128...
- neurostimulant 6y agoIf the jailbreak script can run on arm linux, you probably can get close enough by using a raspberry pi and a power bank. Configure the pi to automatically run the jailbreak as script on boot or when the phone connected via USB and you'll get a portable plug and play jailbreaking device.