6 ms·
Shame it doesn't happen in the browser this time around. That PDF exploit last year was slick.
by JonnieCache 14y ago
Shame it doesn't happen in the browser this time around. That PDF exploit last year was slick.
- MichaelGG 14y agoIf it was a browser exploit, wouldn't that put all users at a great risk, and also put more pressure on Apple to rapidly patch?
- 0x0 14y agoYes. Good thing it's not.
- StavrosK 14y agoI do agree, though, that visiting a page, pressing a "jailbreak" button and finding Cydia installed and running, was, to use the scientific term, slick.
- jiggy2011 14y agoIn such a case what is to stop a malicious site having a "free porn" button which installs something much more nasty.
- StavrosK 14y agoNothing, of course.
- jiggy2011 14y agoIn which case I'm surprised there wasn't a widespread epidemic of malware infected iOS devices.
- xmodem 14y agoBecause that would require someone to invest time and money in writing malware which will only ever make it on to a handful of devices and will be removed when those devices are updated.
- jiggy2011 14y agoThere are a huge number of iphones in circulation. If the malware had jailbroken privileges would it not be able to disable the update mechanism on the phone?
- NamTaf 14y agoIn the case of JailbreakMe 2.0 (the exploit last year), the makers of the JB actually released a Cydia patch for that exact reason. In that instance, the JB'ed device was in that regard more secure than the stock device.
- natem345 14y agoApple will want to rapidly patch this either way. They still see it as a large security flaw, even if it needs a physical connection, and they hate jailbreaking.
- nwh 14y ago4.2.1 is still vulnerable to a remote safari exploit, capable of gaining root. There's no way for iPhone 3G users to update past that point. They don't care about security.
- britta 14y agoDo you mean the JailbreakMe web-based exploits? JailbreakMe is not available for iOS 4.2.1. It's available for 3.1.2-4.0.1 and 4.3-4.3.3 - see http://en.wikipedia.org/wiki/JailbreakMe#Compatible_iOS_versions http://en.wikipedia.org/wiki/JailbreakMe#Compatible_iOS_vers... for details.
- Xuzz 14y agoYeah, but there's nothing stopping someone from porting JailbreakMe to 4.2.1 — it already works on 4.2.8 for the Verizon iPhone 4, and the other versions are similar enough. The hardest part would be the CPU (armv6 vs armv7), but it's clearly possible.
- jpxxx 14y agoTo be clear, you're arguing that [Apple doesn't show adequate concern] about (a theoretical) security (risk to a handset that was discontinued 2 years, 8 months ago)?
- nwh 14y agoA proven exploit that is publicly known, on a device that millions of people still browse the web with daily. Just because it is discontinued doesn't mean that it doesn't exist anymore.
- JonnieCache 14y ago
- Finster 14y agoIIRC, the first jailbreakme.com used a PDF exploit that Apple patched REALLY fast, for the very reason you cited.
- RandallBrown 14y agoThe original jailbreak was a browser exploit too. I believe it involved serving up a malformed TIFF. I remember stories of people going and jailbreaking every iPhone and iPod touch in the apple stores.
- drbawb 14y agoI remember an early PSP jailbreak (SKU PSP-1000/-2000) being based on an exploit in libtiff through an image loaded in the browser. I wonder if it was the same exploit.