4 ms·

most interesting part: > I found nothing sketchy in my reversing, your phones most likely aren't being backdoored by Chinese.

• jjcm 13y ago
  Keep in mind: > This journey stops at root for now, since the /evasi0n7 binary is supa obfuscated good.
• bri3d 13y ago
  The part geohot reversed in this article is the non-persistent set of exploits used to get root. The persistent (and buggy) stage of the exploit used to "untether" (re-exploit on reboot) and patch the OS is obfuscated. That's where a backdoored exploit would be if there was one anyway. I think it's unlikely the evad3rs actually included a backdoor in their payload, but the way they handled their release was still silly enough that I won't install it. iOS jailbreaks are all taken on faith (after all, nobody but them knows what's in that obfuscated untether/patch binary) and they didn't do a lot to build any.
  • nwh 13y ago
    > I think it's unlikely the evad3rs actually included a backdoor in their payload They agreed to bundle an app store who's only purpose is piracy (0xabadidea and Paul Haddad worked to remove their piracy system previously) without in the slightest wondering what it would be used for. From what I've read there's still bits of the Chinese scumware installed when you jailbreak in another country, and given the opinion of the Chinese company involved.. I wouldn't put it past them. I truly hope that geohot or another skilled developer repackages their jailbreak with a copy of MobileSubstrate that actually works and a Cydia build that's built properly by saurik. The evad3rs have completely lost any trust they have, and from pod2g's tweets they're extremely aware of how badly they fucked this up.
    • stingraycharles 13y ago
      I've just come across this write-up by the evasion team, I'm not sure how to interpret it: http://evasi0n.com/l.html http://evasi0n.com/l.html
  • StavrosK 13y ago
    How did they handle the release? I don't have an iPhone so I haven't seen much, but I know there's some hubbub around this.
    • nwh 13y ago
      In short: • evad3rs released an iOS7 jailbreak unexpectedly due to a leak • it became apparent that it bundles some Chinese piracy store with no other legitimate purpose [0] • information is made public that the evad3rs were paid $1M USD to include the piracy store • evad3rs say they weren't aware it was for piracy (and never bothered to check) • evad3rs aren't even sure if the Chinese bundle is malicious, it sends home encrypted something [1] • evad3rs remove the Chinese bundles from their server and activate their kill switch [2] • pod2g promises to release a clean jailbreak [3] The end result is that the jailbreak ruined the trust of the community by including crapware and possibly malware, enabling mass piracy, ultimately not even bothering to check the binaries that they were paid to include. They've burnt Geohot's exploits for a 7.1 jailbreak, as the release timing means that they will be patched by Apple and be completely useless in the future. The jailbreak they released is worthless for the moment due to them not bothering to include the proper Substrate releases from saurik. [0]: https://twitter.com/pod2g/status/414810029376933889 https://twitter.com/pod2g/status/414810029376933889 [0]: https://twitter.com/pod2g/status/415114461473964032 https://twitter.com/pod2g/status/415114461473964032 [0]: https://twitter.com/pod2g/status/414820772931067905 https://twitter.com/pod2g/status/414820772931067905 [1]: https://twitter.com/pod2g/status/415116127292108801 https://twitter.com/pod2g/status/415116127292108801 [2]: https://twitter.com/pod2g/status/414942393830756352 https://twitter.com/pod2g/status/414942393830756352 [3]: https://twitter.com/pod2g/status/415125262989557760 https://twitter.com/pod2g/status/415125262989557760
      • StavrosK 13y ago
        Oh wow, thanks for that summary, very succinct. It sounds quite the cl*sterfuck...
      • samuel1604 13y ago
        tbh and not trying to defend them here but $1M is quite a bit, it make people thinks you know...