5 ms·

Well, the reason that the Cydia store doesn't work, and that Saurik wasn't included in the discussions, is starting to become clear. A Chinese company paid the

• ashray 13y ago
  This sounds terrible. I just jailbroke my phone. What's the best path backwards ?
  • kevinchen 13y ago
    Erase all content and settings, then restore from your pre-jailbreak backup.
  • nwh 13y ago
    Restore and wait for an open source jailbreak not compiled by scumbags.
    • ihuman 13y ago
      Except that there is never going to be an open source jailbreak. If it were open source, then Apple would be able to easily see what exploits are being used and patch them. In the past, has there ever been an open source jailbreak?
      • zxcvgm 13y ago
        The details of exploits used in jailbreaks have typically been released [0] or reverse-engineered [1], so open-source or not, Apple will typically fix them in the subsequent release. [0] http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1%20-%20Pod2g,%20Planetbeing,%20Musclenerd%20and%20Pimskeks%20aka%20Evad3rs%20-%20Swiping%20Through%20Modern%20Security%20Features.pdf http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1... [1] http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-userland-component/ http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-...
      • 0x0 13y ago
        Apple will find the exploits for binary-only jailbreaks, no problem. Also, there's been several source code releases for jailbreaks before, like https://github.com/comex/star_ https://github.com/comex/star_
• conradev 13y ago
  Just some additions: - Taig[1] installs apps that run in the sandbox, not as root. - The Taig app itself runs as root. - Taig is removable if installed. - Taig appears to contain a lot of copyrighted material. - The evad3rs want to try to explain themselves[2] [1] http://www.taig.com http://www.taig.com [2] https://twitter.com/pod2g/status/414810704349499392 https://twitter.com/pod2g/status/414810704349499392
  • 0x0 13y ago
    Apparently it also calls home with encrypted data: http://bbs.weiphone.com/read-htm-tid-7417919.html http://bbs.weiphone.com/read-htm-tid-7417919.html
  • so898 13y ago
    Taig could install apps that run out of the sandbox, just like the apps that be installed by cydia. Taig is not removable, if you remove taig, your iOS will be to the DFU mode (Not safe mode).
• mortenjorck 13y ago
  Wow. This changes a whole lot of things. This is basically the worst-case scenario for Apple in terms of jailbreaks: For the first time, there's an unknown corporate actor calling the shots, and the high code-signing security of iOS 7 has backfired, causing this to be the only jailbreak on the market. If this becomes anywhere near as popular as Evasi0n for iOS 6.1 (over 7 million downloads in its first few days), Apple will have not simply lost control of the platform to a bunch of power users, but to a well-funded entity with unclear motives. Apart from trying some kind of political game in China to shut this down (I don't know how much pull they have there for this sort of thing), I see only one solution, which is to change the rules of the fight: Port Gatekeeper to iOS. Kill the market for jailbreaks altogether.
  • 0x0 13y ago
    Minor nitpick: "Port Gatekeeper to iOS" doesn't make much sense; the built-in FairPlay DRM and code signing stuff is already a "gatekeeper on steroids". It's exactly the type of protection that a jailbreak would work around.
    • srgpqt 13y ago
      Pretty sure that by "Port Gatekeeper to iOS" he's talking about giving the users the ability to choose whether or not to run signed (or unsigned) code that doesn't come from the AppStore, exactly like you have on the Mac (see the bottom of the "General" tab of "Security & Privacy" in System Preferences.
      • 0x0 13y ago
        Oh, you're right. That argument makes much more sense! Unfortunately though, I doubt we'll ever see Apple giving up control of its App Store. They'll patch this one and move on, like always, making future jailbreaks even more difficult to produce. At least the major publicity around jailbreaks means Apple will take these vulnerabilities seriously and patch them quickly. Which is a very good thing for the security of regular users. Scary to think of how long 0-day vulns like these would stay alive if there weren't in such demand by tweakers.
• mcintyre1994 13y ago
  I'm confused, nobody knows what's going on inside this jailbreak? People with enough technical knowledge to want to jailbreak will install something like that without it being open source?
  • cleverjake 13y ago
    I think you are overestimating the jailbreaking population. most of the people I know who jailbreak have very little technical knowledge at all. they just want to change their font, or keyboard, or something else of that nature. In fact not a single one of the people I know who actively jailbreak their phones probably even know what "open source" means, let alone the importance thereof
• lorenzopicoli 13y ago
  Saurik did know about the Chinese company and tried to warn Evad3rs about piracy, but I read that Evad3rs thought that the app had nothing to do with piracy. [1] (https://twitter.com/saurik/status/414836148737802240 https://twitter.com/saurik/status/414836148737802240) (https://twitter.com/saurik/status/414836169218592769 https://twitter.com/saurik/status/414836169218592769) EDIT: [1] "In our agreement with Taig, we contractually bind them to not have piracy in their store. This was an extremely important precondition of working with them." http://evasi0n.com/l.html http://evasi0n.com/l.html
• pdeuchler 13y ago
  FWIW the evad3rs team responded: http://evasi0n.com/l.html http://evasi0n.com/l.html