5 ms·

Is it really their fault if people jailbreak devices? I tend not to think it is.

MBCook 12y ago
The entire purpose of a jailbreak is to bypass the security protections on the device. It should be a known risk. I imagine many people don't know (friend told them "this is how you install this weird thing", "this lets you customize icons", "this lets you get apps for free"), but this is the purpose of jailbreaking.
- m0dest 12y ago
  After spending some time in Hong Kong, these are the motivations that I've seen for jailbreak: 1. Piracy. Apps are expensive on iOS, but Hong Kong loves brands. Having an iPhone is a fashion symbol. Also, access to pirated content (video/music) is a big deal in HK; content is often expensive or unavailable in the region. Content piracy apps, such as BitTorrent clients, Baidu music downloaders, and some MKV-friendly video players, are only available after jailbreaking. 2. Carrier unlock. iPhones sold in Hong Kong are carrier-unlocked, but imported iPhones are often carrier-locked. To force a carrier unlock, you must jailbreak your phone. As a result, a lot of iPhones in HK are either jailbroken to allow carrier unlock or use hardware-based SIM card hacks. 3. Tethering. In HK, most data plans did not allow for free tethering (at the time I was there). Jailbreak allows "illicit" tethering that uses the same data plan, without informing the carrier about how the data is being used. So, don't assume that jailbreakers are necessarily ignorant. It's unfortunate that jailbreaking comes with non-obvious security compromises.
  - wingerlang 12y ago
    I was under the impression that jailbreaking hasn't allowed for carrier unlocks in a long time. > It's unfortunate that jailbreaking comes with non-obvious security compromises. The 'dangers' are pretty obvious in my opinion. I might be biased though, as I'm a developer, which most people are not.
  - M4v3R 12y ago
    All the points that you raised are either plain illegal (piracy) or against terms of services you use (tethering). Not sure about carrier unlock in HK, because for example in my country (Poland) it's legal to unlock your phone and there's even this law that every carrier has to provide means to remove the simlock off the device after the end of their contract.
  - MBCook 12y ago
    Unlock and tethering are great points. I'd forgotten those reasons.
- saurik 12y ago
  Jailbreaking uses a weakness in the security of the device: that weakness is present even if the device hasn't yet been jailbroken.
  - drinchev 12y ago
    Sure, but the weakness is exploited using physical connection between the device and a computer ( I remember one or two jailbreaks in history were opening a pdf or something like this, but nowadays those are history as well ). And when you actually exploit this weakness, next phase is installing apps that can exploit your whole phone. Back in time I was keen on jailbreaking my device, because I wanted to see bash prompt and do whatever I want with it, but nowadays I left this for non-used devices that I have. I'm pretty concerned with security after the whole NSA revelations and I believe my device is more secure if it's not jailbreaked.
    - saurik 12y ago
      There is a known CoreGraphics exploit for versions of iOS before 8.0 for which there is a public proof-of-concept available in the form of an open-source project that generates an exploit PDF. If you are running iOS 7.1.2 you are more, not less, secure if you jailbreak your device and then patch the bug on your system.
- mikeash 12y ago
  The purpose of a jailbreak is to bypass the control mechanisms of the device. Unfortunately they're tied up with the security stuff, but it's not exactly the same.
ghshephard 12y ago
To some degree, yes. The ability to jailbreak a phone is indicative of a poor security framework. In theory, there should be a chain of security from the bootloader, to the kernel, the full operating system that should be secure. If someone is able to break that chain of security, then that demonstrates a weakness in security. The question then becomes how easy is it for an attacker to break that chain of security, and is the jailbreak remotely exploitable.

The entire purpose of a jailbreak is to bypass the security protections on the device. It should be a known risk. I imagine many people don't know (friend told them "this is how you install this weird thing", "this lets you customize icons", "this lets you get apps for free"), but this is the purpose of jailbreaking.

m0dest 12y ago
After spending some time in Hong Kong, these are the motivations that I've seen for jailbreak: 1. Piracy. Apps are expensive on iOS, but Hong Kong loves brands. Having an iPhone is a fashion symbol. Also, access to pirated content (video/music) is a big deal in HK; content is often expensive or unavailable in the region. Content piracy apps, such as BitTorrent clients, Baidu music downloaders, and some MKV-friendly video players, are only available after jailbreaking. 2. Carrier unlock. iPhones sold in Hong Kong are carrier-unlocked, but imported iPhones are often carrier-locked. To force a carrier unlock, you must jailbreak your phone. As a result, a lot of iPhones in HK are either jailbroken to allow carrier unlock or use hardware-based SIM card hacks. 3. Tethering. In HK, most data plans did not allow for free tethering (at the time I was there). Jailbreak allows "illicit" tethering that uses the same data plan, without informing the carrier about how the data is being used. So, don't assume that jailbreakers are necessarily ignorant. It's unfortunate that jailbreaking comes with non-obvious security compromises.
- wingerlang 12y ago
  I was under the impression that jailbreaking hasn't allowed for carrier unlocks in a long time. > It's unfortunate that jailbreaking comes with non-obvious security compromises. The 'dangers' are pretty obvious in my opinion. I might be biased though, as I'm a developer, which most people are not.
- M4v3R 12y ago
  All the points that you raised are either plain illegal (piracy) or against terms of services you use (tethering). Not sure about carrier unlock in HK, because for example in my country (Poland) it's legal to unlock your phone and there's even this law that every carrier has to provide means to remove the simlock off the device after the end of their contract.
- MBCook 12y ago
  Unlock and tethering are great points. I'd forgotten those reasons.
saurik 12y ago
Jailbreaking uses a weakness in the security of the device: that weakness is present even if the device hasn't yet been jailbroken.
- drinchev 12y ago
  Sure, but the weakness is exploited using physical connection between the device and a computer ( I remember one or two jailbreaks in history were opening a pdf or something like this, but nowadays those are history as well ). And when you actually exploit this weakness, next phase is installing apps that can exploit your whole phone. Back in time I was keen on jailbreaking my device, because I wanted to see bash prompt and do whatever I want with it, but nowadays I left this for non-used devices that I have. I'm pretty concerned with security after the whole NSA revelations and I believe my device is more secure if it's not jailbreaked.
  - saurik 12y ago
    There is a known CoreGraphics exploit for versions of iOS before 8.0 for which there is a public proof-of-concept available in the form of an open-source project that generates an exploit PDF. If you are running iOS 7.1.2 you are more, not less, secure if you jailbreak your device and then patch the bug on your system.
mikeash 12y ago
The purpose of a jailbreak is to bypass the control mechanisms of the device. Unfortunately they're tied up with the security stuff, but it's not exactly the same.

ghshephard 12y ago

To some degree, yes. The ability to jailbreak a phone is indicative of a poor security framework. In theory, there should be a chain of security from the bootloader, to the kernel, the full operating system that should be secure. If someone is able to break that chain of security, then that demonstrates a weakness in security. The question then becomes how easy is it for an attacker to break that chain of security, and is the jailbreak remotely exploitable.