3 ms·

> cannot be rooted https://en.wikipedia.org/wiki/IOS_jailbreaking https://en.wikipedia.org/wiki/IOS_jailbreaking

• SV_BubbleTime 3y ago
  Remind me what the bounty is for an iPhone jailbreak right now, would you please?
  • e44858 3y ago
    Can't find prices for a jailbreak, but a zero click full chain exploit with persistence is $2.5M for Android, $2M for iPhone: https://zerodium.com/images/zerodium_prices_mobiles.png https://zerodium.com/images/zerodium_prices_mobiles.png Seems iPhone exploits got cheaper because they're too abundant: https://twitter.com/Zerodium/status/1260541578747064326 https://twitter.com/Zerodium/status/1260541578747064326 Apple has released phones with major vulnerabilities hard-coded in the silicon. When the checkra1n jailbreak was released, the only fix was to buy a new phone because it exploited flaws in the bootrom & secure enclave silicon. https://www.malwarebytes.com/blog/news/2019/09/new-ios-exploit-checkm8-allows-permanent-compromise-of-iphones https://www.malwarebytes.com/blog/news/2019/09/new-ios-explo... https://checkra.in/news/2020/09/iOS-14-announcement https://checkra.in/news/2020/09/iOS-14-announcement
    • goblin89 3y ago
      (That was in 2020, as of iOS 13 IIRC. It’d be interesting how much of that works against the current iOS 17, and whether Zerodium simply had cashflow issues at the time.)
      • e44858 3y ago
        checkra1n was abandoned, but palera1n seems to use the same vulnerabilities and works with iOS 17. https://en.wikipedia.org/wiki/IOS_jailbreaking#Table_of_tools https://en.wikipedia.org/wiki/IOS_jailbreaking#Table_of_tool...
        • goblin89 3y ago
          17.3, and not a zero-click exploit but a jailbreak tool.