4 ms·
Nearly all jailbreaks since iOS ~5~ 9[0] (besides checkm8 for A11 and earlier devices) have been via sideloading an app and running an exploit chain of sandbox
by judge2020 3y ago
Nearly all jailbreaks since iOS ~5~ 9[0] (besides checkm8 for A11 and earlier devices) have been via sideloading an app and running an exploit chain of sandbox escape->kernel exploit->some form of r/w mounting root (amongst other steps). The attack surface for the sandbox is so large it's basically impossible to ensure absolutely nothing bad happens inside it.
After some exploit gets patched is when all the inventory sitting in logistics become at risk of interception and compromise.
0: https://canijailbreak.com/ https://canijailbreak.com/
- saagarjha 3y agoYou can just restart the device and the infection will disappear.
- sambazi 3y agoi guess this is true for most and the mentioned jailbreak, but not for all?
- saagarjha 3y agoThis would require a sophisticated exploit to get around.
- sambazi 3y agoi'll take that as a yes
- Dylan16807 3y agoIf you're worried about "all" jailbreaks, then there's no need at all to use sideloading.
- sambazi 3y agoi'd consider myself interested
- HPsquared 3y agoCouldn't it just 'pretend' to reboot?
- saagarjha 3y agoNot if you hold down the power button
- sp332 3y agoThat's not the most reliable way to make sure it rebooted. https://blog.zecops.com/research/persistence-without-persistence-meet-the-ultimate-persistence-bug-noreboot/ https://blog.zecops.com/research/persistence-without-persist...
- saagarjha 3y agoYeah just hold it for long enough and it will reboot
- deleted 3y ago[deleted]