5 ms·

From Jay Freeman's (saurik) twitter: So, I got no lead time on evasi0n7, nor was I asked for an official iOS 7 Cydia; I was not given builds, nor was I asked f

by DLay 13y ago

From Jay Freeman's (saurik) twitter: So, I got no lead time on evasi0n7, nor was I asked for an official iOS 7 Cydia; I was not given builds, nor was I asked for things to test. In fact, @evad3rs didn't even try my testing build of Substrate I gave core developers, so they didn't notice a fundamental incompatibility. This means they are going to have to push a new version of their untether to fix this oversight before I can push newer builds of Substrate. As there was also never a tethered jailbreak for iOS 7 that had fully working kernel patches I haven't been able to test much at all myself. I thereby have no clue what will or will not work, or even what evasi0n7 includes; I hope that people bear with me as I figure this all out. (In particular, I will point out that the build of "Cydia" included is not official, and couldn't really include the fixes I'd been making.) (Also, it's 5 AM here; I'm quite tired and had been intending to go to sleep, so I don't have the brain power to react to this all quickly.)

grugq 13y ago
Well, the reason that the Cydia store doesn't work, and that Saurik wasn't included in the discussions, is starting to become clear. A Chinese company paid the evad3rs a rumored 1 million dollars for the jailbreak, forcing their own App Store onto the phone. If the computer running the jailbreak has Chinese as the main language, then the Chinese 太极 (taiji) market app is install. Cydia is available as an option, but it is deselected by default. https://twitter.com/i0n1c/status/414784367215382528 https://twitter.com/i0n1c/status/414784367215382528 https://twitter.com/i0n1c/status/414783332040179712 https://twitter.com/i0n1c/status/414783332040179712 Confirmation: https://twitter.com/Cre4t/status/414782483956133888 https://twitter.com/Cre4t/status/414782483956133888 The default apps that get installed for Chinese users: http://twitpic.com/dpl5k5 http://twitpic.com/dpl5k5 (via: https://twitter.com/a_titkov/status/414778967070359552 https://twitter.com/a_titkov/status/414778967070359552) The install screen for Chinese users: http://twitpic.com/dpl4vz http://twitpic.com/dpl4vz (via https://twitter.com/a_titkov/status/414777987989774336 https://twitter.com/a_titkov/status/414777987989774336) So, if you want to run a heavily obfuscated application that exploits your phone, disables application signing, and installs uid 0 processes running on your phone... sponsored by China, go ahead. (The jailbreak app is heavily protected so that competing Chinese companies can't replace the Taiji app store with their own. But who knows what else is in there?)
- ashray 13y ago
  This sounds terrible. I just jailbroke my phone. What's the best path backwards ?
  - kevinchen 13y ago
    Erase all content and settings, then restore from your pre-jailbreak backup.
  - nwh 13y ago
    Restore and wait for an open source jailbreak not compiled by scumbags.
    - ihuman 13y ago
      Except that there is never going to be an open source jailbreak. If it were open source, then Apple would be able to easily see what exploits are being used and patch them. In the past, has there ever been an open source jailbreak?
      - zxcvgm 13y ago
        The details of exploits used in jailbreaks have typically been released [0] or reverse-engineered [1], so open-source or not, Apple will typically fix them in the subsequent release. [0] http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1%20-%20Pod2g,%20Planetbeing,%20Musclenerd%20and%20Pimskeks%20aka%20Evad3rs%20-%20Swiping%20Through%20Modern%20Security%20Features.pdf http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1... [1] http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-userland-component/ http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-...
      - 0x0 13y ago
        Apple will find the exploits for binary-only jailbreaks, no problem. Also, there's been several source code releases for jailbreaks before, like https://github.com/comex/star_ https://github.com/comex/star_
- 13y ago
xenophonf 13y ago
That right there put me off upgrading. It's bad enough that to jailbreak my phone, I basically have to accept the fact that I'm running an operating system with known (and unpatched) security vulnerabilities. That evasi0n basically bundles spyware is completely unacceptable.

by DLay 13y ago

grugq 13y ago

Well, the reason that the Cydia store doesn't work, and that Saurik wasn't included in the discussions, is starting to become clear. A Chinese company paid the evad3rs a rumored 1 million dollars for the jailbreak, forcing their own App Store onto the phone. If the computer running the jailbreak has Chinese as the main language, then the Chinese 太极 (taiji) market app is install. Cydia is available as an option, but it is deselected by default. https://twitter.com/i0n1c/status/414784367215382528 https://twitter.com/i0n1c/status/414784367215382528 https://twitter.com/i0n1c/status/414783332040179712 https://twitter.com/i0n1c/status/414783332040179712 Confirmation: https://twitter.com/Cre4t/status/414782483956133888 https://twitter.com/Cre4t/status/414782483956133888 The default apps that get installed for Chinese users: http://twitpic.com/dpl5k5 http://twitpic.com/dpl5k5 (via: https://twitter.com/a_titkov/status/414778967070359552 https://twitter.com/a_titkov/status/414778967070359552) The install screen for Chinese users: http://twitpic.com/dpl4vz http://twitpic.com/dpl4vz (via https://twitter.com/a_titkov/status/414777987989774336 https://twitter.com/a_titkov/status/414777987989774336) So, if you want to run a heavily obfuscated application that exploits your phone, disables application signing, and installs uid 0 processes running on your phone... sponsored by China, go ahead. (The jailbreak app is heavily protected so that competing Chinese companies can't replace the Taiji app store with their own. But who knows what else is in there?)

ashray 13y ago
This sounds terrible. I just jailbroke my phone. What's the best path backwards ?
- kevinchen 13y ago
  Erase all content and settings, then restore from your pre-jailbreak backup.
- nwh 13y ago
  Restore and wait for an open source jailbreak not compiled by scumbags.
  - ihuman 13y ago
    Except that there is never going to be an open source jailbreak. If it were open source, then Apple would be able to easily see what exploits are being used and patch them. In the past, has there ever been an open source jailbreak?
    - zxcvgm 13y ago
      The details of exploits used in jailbreaks have typically been released [0] or reverse-engineered [1], so open-source or not, Apple will typically fix them in the subsequent release. [0] http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1%20-%20Pod2g,%20Planetbeing,%20Musclenerd%20and%20Pimskeks%20aka%20Evad3rs%20-%20Swiping%20Through%20Modern%20Security%20Features.pdf http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1... [1] http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-userland-component/ http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-...
    - 0x0 13y ago
      Apple will find the exploits for binary-only jailbreaks, no problem. Also, there's been several source code releases for jailbreaks before, like https://github.com/comex/star_ https://github.com/comex/star_
13y ago

xenophonf 13y ago

That right there put me off upgrading. It's bad enough that to jailbreak my phone, I basically have to accept the fact that I'm running an operating system with known (and unpatched) security vulnerabilities. That evasi0n basically bundles spyware is completely unacceptable.