20 ms·
A new jailbreak for a new era
- z5h 6y agoI clearly hang out here, and I’m not clear on exactly what Odyssey is or why someone might want it.
- xeroaura 6y agoLooks to be iOS jailbreak for any device on a version of iOS 13. Some quick searching indicates previous most popular tool unc0ver only went up to iOS 13.5 (vs newest 13.7 that this tool jailbreaks). Edit: Actually looks like another tool called checkra1n already covers those iOS versions, but this one covers more devices.
- skinnymuch 6y agoYes, especially many newer devices outside 2020 ones that never came with iOS 13. Covering 2017-2019 devices is huge. I’m going to be getting an iPhone 11 Pro deal from T-Mobile, my carrier, now. After I re-confirm the in store device is on 13.7 or earlier.
- grishka 6y agocheckra1n exploits an unpatchable bootloader vulnerability.
- olah_1 6y agoI’ve never used jailbreak on an iOS device. But I’ve been staying on iOS 13 to avoid the contact tracing. Phone is old anyway so I might try this.
- mshroyer 6y ago> I’ve been staying on iOS 13 to avoid the contact tracing Huh? You know it's an opt-in feature, right?
- shhsshs 6y agoAnd that it is done using an ostensibly secure/traceless/anonymous algorithm so I’m not sure why it would matter.
- prh8 6y agoWell a lot of people care more about absolutism for "privacy" more than pragmatism. Quote marks since just having a cell phone is already sharing more than those anonymous tokens.
- skinnymuch 6y agoNot just a cell phone. But having a cell phone from the very company they fear is doing illegitimate things.
- conradev 6y agoYes, it is functionally equivalent to having Bluetooth enabled. When Bluetooth is on, your iPhone broadcasts itself with a rotating random MAC address (a feature now called Bluetooth LE Privacy). It rotates at a fixed interval, something like every 5 minutes. With contact tracing enabled, your phone broadcasts another random identifier, and that identifier rotates at the same interval as your MAC address. The random identifier is actually cyphertext, and the key to decrypt it is stored on your phone. I think it should have been turned on by default if Bluetooth is turned on by default, but people would have complained very loudly.
- gruez 6y ago>When Bluetooth is on, your iPhone broadcasts itself with a rotating random MAC address (a feature now called Bluetooth LE Privacy). It rotates at a fixed interval, something like every 5 minutes. Isn't this only when the iPhone is "discoverable", which is pretty much never the case unless you have bluetooth settings open?
- SwaraLink 6y ago
- prh8 6y agoNot only is the exposure notification opt-in, but you also need to specifically download an app from your locality. Upgrading to iOS 14 does not magically turn it on.
- skinnymuch 6y agoiOS 13 or 14 have nothing to do with having you use contact tracing in any way you don’t enable yourself. I don’t get this. If you don’t trust them for this. Why are you using their phone at all.
- thamer 6y agoAs others have pointed out, you explicitly have to turn it on and install a local exposure notification app for the feature to even be enabled. But I would also suggest you learn how this feature works in the first place, it's an interesting design that makes clever use of Bluetooth and cryptography. It's likely much more private than the way you have your device set up right now. The complete specs, including what is being broadcast over Bluetooth and the cryptography used to preserve privacy, are available here (the Google and Apple system are one and the same): https://www.google.com/covid19/exposurenotifications/#exposure-notifications-and-privacy https://www.google.com/covid19/exposurenotifications/#exposu... These are pretty technical, but this is a good high-level overview: https://www.google.com/covid19/exposurenotifications/#grid-homepage-how-it-works https://www.google.com/covid19/exposurenotifications/#grid-h...
- joosters 6y agoAll that effort on designing a pretty looking website, and yet virtually no effort spent on making the install instructions friendly and readable!
- ihuman 6y agoIf you scroll down to the "download" section, it tells you how to install it
- joosters 6y agoI found the install instructions, my point is that they clash with the rest of the presentation. How can you brag about a jailbreak being 'Fast. Really Fast' when your install process is long and convoluted?
- fabiensanglard 6y agoI am always thankful to see something open sourced. But as someone interested in understanding how it works without a lot of time on my hands, I would have loved a high level explanation to support a "genuine windows of interest". As is, I will not be able to extract much knowledge from it.
- daniel_iversen 6y agoNot sure about others but it’s been many years since I felt the need to jailbreak my iOS devices. One of the reasons is that there’s just no “killer apps” available for me by jailbreaking anymore, iOS generally does 100% of what I want it to do, and the way I like it to do it.
- somehnguy 6y agoSame boat here. From the iPhone 3G to the 6 I was always jailbroken, including even the tethered jailbreaks. Then at some point I just stopped caring. It's so much effort to keep up with this stuff (same reason I don't use Android devices, with all the alternative firmwares and such). My stock iOS device is about as reliable as a device can get and I'm relatively happy making the complete freedom tradeoff. I'm not sure how bad of a thing that is however. Occasionally I'll want to do something like spoof my location and get annoyed that it's not easy. But I just...don't care 99% of the time.
- SulfurHexaFluri 6y agoI'm like you, there are things I would like to do with my phone that I am prevented from doing but the alternative is too much effort and I don't care enough to take it. It does seem that slowly iOS/ipadOS is getting more fully featured as they try to make the ipad a real laptop alternative.
- mattwad 6y agoSame here, but with Android. Since at least a few major versions back!
- vaccinator 6y agoCant you install a browser that is not Safari by jailbreaking? I dont know because I avoid Apple.
- sevencolors 6y agoYeah you can run Firefox (or others) as your default browser now
- Wowfunhappy 6y agoI haven't been following Jailbreak news for a while, because I'm very happy with my Jailbroken iOS 12 setup and I feel no desire to upgrade anything. Even so, looking at this project, I can't help but recognize some names among the primary developers. I don't even remember what all the drama was about—as I recall, it was exceedingly stupid—but I know it was nasty enough to drive Saurik and much of the rest of the old guard away from the Jailbreak community for good. I really, really hope that ugliness is behind us. The Jailbreaking scene could use everyone's talent.
- colejohnson66 6y agoIt didn’t help that the more popular jailbreaking became, the more demanding the community seemed to become.
- evad3r 6y agoFor sure, /r/jailbreak is a cesspit at the best of times. Probably doesn't help it's overrun by presumably teenagers.
- perardi 6y agoHacker News thinks jailbreaking is for an abstract concept of liberation. Reddit thinks it’s a way to permanently store nudes from Snapchat.
- xmprt 6y agoIronically the people who jailbreak their iPhones to save nudes from Snapchat are also the same people who have never received a nude on Snapchat.
- saagarjha 6y agoIt's still somewhat fragmented. This jailbreak is of course coming from one of those fragments.
- apatheticonion 6y agoBy jailbreaking the iphone, could we use Chrome or Firefox with their own web engines and features (such as web push notifications and install to desktop)?
- lrvick 6y agoAnd forgo any security updates in the process. An Android device with AOSP firmware will likely suit these needs better.
- colejohnson66 6y agoYou could, but good luck getting updates. You’d probably have to modify the source yourself and keep the patches up to date, recompiling each release.
- protoman3000 6y agoI remember having used jailbreaks years before I even knew how to use the terminal. Adding one untrusted source here and another untrusted source there, download some package from some shady forum, on public wifi with root:alpine... Oh boy, what security risk we took only to change the default font of the system...
- josephcsible 6y agoKeep in mind that the only reason you had to jailbreak to do that was because of Apple's "security" measures.
- wil421 6y agoHow is flashing any random android ROM any riskier than jail breaking? It’s surely easier but not much safer.
- xd1936 6y agoYou don't need to in order to get the same level of customizability
- djeiasbsbo 6y agoWell, it's moreso about even having the possibility to do so. Building AOSP from source and flashing it on my own device seems more "secure" than using your device vendors distribution. But this is out of the question with closed source proprietary software like iOS running on hardware with a closed down bootloader.
- mattkevan 6y agoAh man, back in 2013 or so I had a full Apache-MySQL-PHP development stack running on my iPad retina, along with multi-windowing, SSH, file-sharing via AFP and Bonjour and much more. Amazing what the jailbreak community could do - and that seven years later it’s still not possible to do some of that stuff officially on iOS.
- Ar-Curunir 6y ago> it’s still not possible to do some of that stuff officially on iOS uhh why would apple support developer-oriented things that 99% of the audience wouldn't use, on a consumer-oriented device
- yjftsjthsd-h 6y agoFor the same reason that the iPad pro and macbooks exist?
- chipotle_coyote 6y agoI've come to strongly believe that Apple take the premise that Macs are general purpose computers and iPads are application consoles as a core philosophy. Macs will never be locked down to the degree iOS devices are, and iPads will never be open to the degree Macs are. (Barring their hand being forced by government regulators, of course.) If you want to have an iPad that can also run Xcode, they're going to point you at an Apple Silicon-based MacBook Air that can run iPad apps.
- Ninn 6y agoWhew, good thing you're not in charge then. To me it would seem that the vision for iPad OS is the exact opposite. An attempt at bridging towards having the iPad as a much more generic, almost laptop solution. Close to what the Surface has been trying.
- SulfurHexaFluri 6y ago
- 2bitencryption 6y agoIs "jailbreak" equivalent to "total root privileges"? In other words, does the existence of a jailbreak like this also imply the same strategy could work for malware? Or is "jailbreak" here a more targeted exploit, to allow sideloading apps? The reason I'm curious is because Apple seems to have put lots of effort into their "secure enclave" and specialized hardware to avoid this type of situation. So I'm curious if this bypasses all that, or only part of it.
- Wowfunhappy 6y agoAll Jailbreaks need full kernel access, but I don't believe any of them have ever gained access to the secure enclave, and most aren't even persistent after a reboot. Malware could probably use the same exploits, yes, but the exploits used for most Jailbreaks are pretty "noisy", and I have trouble imagining a situation where they could be used without the user's knowledge. It's certainly possible though.
- saagarjha 6y agocheckra1n has; the others have not. Jailbreaks are generally optimized for time-to-market and not discretion, but actual malware could certainly take the code and make it less likely to crash or do funny things that are easy to detect.
- o-__-o 6y agoThe su binary for android. Distributed on a mega.nz link and obfuscated. How large was the embedded botnet and what were the rare cases of good it was used for? Me deciding not to install supersu 10 years ago. I think it’s finally been replaced with an open sourced utility but I’ve already moved on
- saagarjha 6y ago> Is "jailbreak" equivalent to "total root privileges"? Somewhat. Apple designs multiple layers of security into their devices and jailbreaks these days compromise some set of these, and plus the security model of iOS is really "the user vs. everything else on the operating system" so the concept of "root" is much less important. You could consider it equivalent to "rooting”, however. > In other words, does the existence of a jailbreak like this also imply the same strategy could work for malware? Yes.
- fnord77 6y agoI can't get over how polished and professional their website looks. Is there funding behind it? Are people somehow making money off jailbreaks, perhaps downstream?
- saagarjha 6y agoAs far as I understand, they get a fairly decent amount of donations from "eta wen" people who are desperate to theme their phones.
- wingerlang 6y agoThe latest unc0ver jailbreak was sponsored. I’m sure you’re capable of making money if you can crack iOS. You can also sell tweaks and themes and earn quite a lot of money. That being said their website looks pretty standard imo.
- freedomben 6y agoCan I ask an honest question of the people that use iOS and like to jailbreak? I don't intend this question as a troll. I'm legitimately interested in understanding your perspective. Doesn't it make you mad that Apple makes it so hard for you to jail break your device? If you are jail breaking your device, I assume you aren't part of the "I like Apple to protect me from myself" crowd, so wouldn't an Android device with an unlocked boot loader be a more attractive platform for you?
- saagarjha 6y agoThis appeals to people for which Android isn’t an attractive platform.
- freedomben 6y agoI'm sorry, what what do you mean by "this?" What appeals to people for which Android is an attractive platform? I'm specifically asking people who buy iOS devices and then want to jail break them why they aren't more attracted to an unlockable Android instead since they obviously don't like the restrictions that Apple puts in place.
- saagarjha 6y agoTypo, sorry. I’m just saying that people jailbreak because they don’t want to use Android.
- aspaceman 6y agoPeople want to hack on things. If they bought a superwidgetV2.X and the superwidget doesn't allow homebrew, people would hack the superwidget for homebrew. It's just how it is.
- freedomben 6y agoI totally agree, people want to hack on things. I love hacking on things. But I buy things that are specifically more hackable than other things to facilitate that desire. Or are you saying they will hack on what they have, but don't like to enough to go out and find hackable things?
- jacobjuul 6y agoWhat kind of skills are required to get started in jailbreaking? I am guessing some assembly and C would be helpful. Not even sure what to search for to get started. I am not really interested in jailbreaking iPhones, but I have some equipment from the early 2000s running software that are no longer maintained that I'd love to tweak.
- goldenkey 6y agoIt's just reverse engineering. You want to find some kind of actions that let you cause non-standard behavior in the implementation of privileged libraries.
- valuearb 6y agoFrom my experience looking at open source jailbreak repos, I’d say writing commented, maintainable code with good error checking is not a required skill.
- ngcc_hk 6y agoFeel sad about the maintainer who has quit due to illness abd those RIP message to him whilst he is still with us. So sad.
- nbzso 6y agoI stopped jailbreak practice long time ago. Personally I am in a point where idea of owning "smartphone" is actually nonsense. Convenience is king but mental clarity is a must for me. From 3 years on I have build a habit to avoid my iPhone and have tracked use cases in which I really need it. There are very small real use cases: 1. Phone call. 2. Messaging . 3 Banking apps. 4. Maps for navigation. My ideal phone is actually only a phone plus internet hot spot. In the future I can see my self using VPN firewall and replacing the list: 1. Voip 2. Mail. 3. Web browser with e certificate. 4. Separate GPS device. I know that all of this sounds extreme, but the mental benefits are of the chart. I have enormous focus, no "fear of missing out", no "notification hell", no "social media" rush. So no jailbreak or any form of functionality will bring me back to this time waisting mental bonanza. If smartphones are the future of mandatory personal identification governments must offer them free of charge. Just saying:)