Evad3rs Announce iOS 7 Jailbreak For Latest Apple Devices 110
hypnosec writes "Evad3rs, the famous iOS jailbreak team, has announced an iOS 7 jailbreak that will work in all iDevices including iPhone 5S, iPhone 5C and iPad Air running iOS 7.0 through to iOS 7.0.4. The iOS 7 jailbreak was announced without much of a hype, unlike the one for iOS 6. 'Merry Christmas! The iOS 7 jailbreak has been released at http://evasi0n.com/! All donations will go to @publicknowledge, @eff and @ffii,' tweeted evad3rs."
Reader FrogBlastTheVentCore adds a note of caution: "They recommend restoring your device to iOS 7.0.4 if it has received OTA updates before attempting to jailbreak."
iOS 7.1 (Score:2)
iOS 7.1 is probably coming next month... now surely whatever exploit was used will be analyzed by Apple and double-patched for the final 7.1 release.
You'd think they could have waited just a little bit more!
Re: (Score:3)
iOS 7.1 is probably coming next month... now surely whatever exploit was used will be analyzed by Apple and double-patched for the final 7.1 release.
You'd think they could have waited just a little bit more!
They may have downloaded the beta, realized the exploit had been patched, and released the jailbreak as a result, before a bunch of people update to 7.1 without thinking.
Pure speculation on my part, but the point is that we should wait to see if they say something about it before complaining that they were impatient. There may have been good reasons.
Re: (Score:2)
Considering it doesn't work on the beta it seems likely that Apple has already patched whatever hole they used.
Re: (Score:2)
Considering it doesn't work on the beta it seems likely that Apple has already patched whatever hole they used.
I don't have a device to try it on, but the included readme.txt says
SUPPORTED FIRMWARES:
- iOS 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1beta1, 7.1beta2
Re: (Score:2)
If they did that then apple would patch it in 7.1.1! My question is, is this tethered or untethered?
Re: iOS 7.1 (Score:2)
Could be a test? They're using LLVM obfuscator, presumably to make their exploits harder for apple to reverse engineer.
Maybe they want to see if apple can figure it out and patch it in time for 7.1?
Re: iOS 7.1 (Score:2)
Best they triple patch it, just to be sure.
Re: (Score:2)
The goal has never to been to JB the most current release. Pick one or the other.
Re: (Score:2)
What I really don't get, sense when was donating to a Twitter account, considered a good thing to do?
Re: iOS 7.1 (Score:5, Insightful)
Because the things you can do in user land are far more interesting to a lot of people that it is worth the trade offs in terms of stability, usability and security. Being able to customize the shit out of springboard, the keyboard, etc are really nice and fun but the charm of the OS isnt that I feel nice and fuzzy being in idiot mode, it's that I really don't feel the need to hack at it.
Don't get me wrong, I would love to customize the shit out of ios and run non App Store apps but I generally don't feel I need it to make the thing a nice place to live.
Re: (Score:2, Interesting)
it is worth the trade offs in terms of stability, usability and security.
This is, quite frankly, a false tradeoff. You can get the same stability, usability and security in several ways (like not running as root by default, like requiring extra steps to become root as with Android, etc), WITHOUT taking freedom away from users who would want it.
Remember, everyone has freedom of speech until they want to say something that is forbidden, but those times are when speech protections are most important.
Re: (Score:1)
He's talking about iOS. Focus.
Re: (Score:2)
Re: (Score:2)
I understood that some of the things you said have nothing to do with iOS. But do continue your mysterious rant.
Re: (Score:2)
Re: (Score:3)
This is, quite frankly, a false tradeoff. You can get the same stability, usability and security in several ways (like not running as root by default, like requiring extra steps to become root as with Android, etc), WITHOUT taking freedom away from users who would want it.
No, it's not.
That kind of interaction isn't free. Not as in beer and not as in freedom. You've now got to devote resources to supporting these features, documenting these features and helping users when they fuck up. Granted, yes, you could just leave users out in the cold when everything goes all pear shaped... However, that's kind of psychotic.
The freedom you want isn't free for the vendor. Not free as in beer and depending on device driver agreements, etc. may not be free as in speech. Granted that's a s
Re: (Score:3)
The "Free as in freedom" crowd had 30 years to bring UI and UX to this stage but no one really cared enough to actually do it. Instead we got everyone disagreeing with each other about KDE or Gnome.
I see, you just wanted to rant irrelevantly about open source, and thought this was a reasonable place to do it. Be gone, troll.
Re: (Score:3)
It takes more effort for the vendor to attempt to lock these devices down than it would to leave them open.
Aside from supporting the functionality, making sure all the APIs work nicely, having customer support in case the whole thing goes wrong...
I see, you just wanted to rant irrelevantly about open source, and thought this was a reasonable place to do it. Be gone, troll.
No, I *love* open source. Open source isn't the same movement as Free Software movement. The FSF had decades to get this right, but never did. It wasn't even on their radar.
Re: (Score:2)
Aside from supporting the functionality, making sure all the APIs work nicely, having customer support in case the whole thing goes wrong...
You're either drunk, an idiot, or have no idea what is involved in this thing.......seriously, are you even a programmer? Do you know what is involved in programming an OS? Have you even looked at the iPhone/Android APIs? Your ranting seems mainly orthogonal to reality.
Re: (Score:2)
I am a programmer, but my language of choice lately seems to be PHP. So I'm not banking on my taste or ability as any sort of authority.
If everything *can* run as root, then what might break? What the hell becomes a massive regression?
Free software isn't free as in beer when you've got to support it commercially. Have you ever worked with other human beings before? Do you know that people who really don't want to be power users exist and most of them are buying computing devices?
Re: (Score:2)
If everything *can* run as root, then what might break? What the hell becomes a massive regression?
Not everything needs to run as root, nor should it, unless the user specifically wants it to run it as root. Go look at the Android model sometime, you can see that becoming root is not easy, but it is reserved for the user. Your idea of 'support it commercially' is so inapplicable here that it mainly shows you haven't looked deeply into the subject, you are just whining.
Re: (Score:2)
Uh.
If you're doing testing, everything that *can* run as root needs to be tested *as* running as if it's root at some point during testing. You're the one questioning my ability as a programmer?
Further more, the Android security model isn't even close to perfect under the hood, Even if the user is the only user that can go as root, that still doesn't keep apps from doing awful things in the background.
Also, if your device ships with some feature X, and you don't give any sort of software support for feature
Re: (Score:2)
You're the one questioning my ability as a programmer?
Yes, yes I am.
Re: (Score:1)
Feature X := Firewall
I'd prefer to be the one in charge of what leaks off my phone, TYVM. However, since a firewall is difficult to support for Apple, so they didn't ship it. There's a great one on Cydia however.
While I can no longer make any sense of your debate, the truth is that Apple has prevented an iOS malware outbreak by not handing the users the keys to the car -- they'll just take you where you want to go, as long as it's on one of their streets. On the flip-side, they control who gets your info
Re: (Score:2)
Re: (Score:2)
that's also not to mention that the kind of user interaction that you'd get by featuring freedom is either more modals(whee, everyone remember UAC in Vista?), or having the entire device run as root or ...
The UX tradeoff isn't worth it. Have everything place nice in user land or get the fuck off my phone.
On a tablet or MID, there's less incentive to make things ultra stable, but iOS is still a nice place for most users to live.
Re: (Score:2)
^What does that have to do with iOS.
iOS takes away freedom from the user.
Re: (Score:2)
Re: (Score:2)
You are right.
Given the use that we generally give to such a device (reading stuff mostly and some games, taking notes, etc) I don't see a great urge to get a Bash terminal running or a developing environment (because it sucks big balls for coding, that's why).
I jailbroke 6 after getting my iPad3 (from my employer, else I would have continued very happily with my Acer One), I then just re-installed 6 and after updating to 7 I didn't even bother.
Re:iOS 7.1 (Score:5, Insightful)
Honestly, as an iOS user, I don't really see the need. I have jailbroken in the past and just didn't see much that was worth the effort or the inevitable wait for official updates. For those that do want/need/"need" root, then this is a good option (or just buy an Android device).
There are a few cool apps/tweaks on Cydia, but userland iOS also has tons of cool apps. For the vast majority of iOS users, jailbreaking isn't necessary.
Review Guidelines tell you what iDon't (Score:3)
Re: (Score:2)
Re: (Score:2)
The need is relative, of course. I have many Cydia apps that I refuse to give up, including several that are bought-and-paid-for. They include an outgoing firewall, tethering, various music and media controls, photos added to my contact list, PrivaCy, and many specific gestures to control things such as wi-fi and Bluetooth, all of which are banned by Apple.
Even more of a factor is that I have no burning need to rush to iOS7. Most apps that require iOS7 simply don't offer anything compelling to me. I'm no
Re: (Score:1)
It's really not so much about "all the cool stuff Cydia offers".
It's all about freedom and control. A non-broken device is effectively a leased piece of hardware where the owner tells you what you can and cannot do with it. It's like renting your house rather than owning it. Sure, it's nice that maintenance is taken care of for you; but most of us actually prefer to know that the thing we live in/with is controlled by us, not somebody with a different agenda whose interest in your happiness and satisfact
Console vs. HTPC (Score:1)
Why would anyone buy a computer that's designed specifically to prevent you from getting root? Even Windows is better than that.
For the same reason people buy game consoles instead of home theater PCs: it's in a convenient form factor, it's affordable, it's where the apps and media are, and maintenance is less complex.
The iPhone was first to market among the new breed of pocket-size computers. A lot of people bought an iPhone 3G (or bought an original iPhone and upgraded it to iOS 2, which introduced the App Store) before Android became widely available. Back then, the alternative was a laptop. And a lot of people bought an iPod
Re: (Score:2, Interesting)
I used to think this way, and avoided buying iOS devices for a while because of this thinking.
Then I realized, iOS devices are more like appliances and less like "computers". They're meant to do a specific task well. They're not meant to be general purpose computing systems.
If I need a real computer, that's what my laptop is for. It's FAR more capable hardware-wise than my phone or iPad. The phone and iPad are both good at what they do, and incredibly stable and reliable. Both times I've jailbroken them, I
iPod Touch (Score:3)
Nice, but... (Score:1)
I love the idea of jailbreaking. Love it. I fully support your right to install whatever you want on the hardware you bought.
But.
So there's no confusion, "jailbreaking" is exactly identical to "finding and exploiting a security vulnerability". By definition, someone is using an unpatched problem to root your device and replace the system software with their own version. The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
Again, I support everyone installing
Re: (Score:2)
Re:Nice, but... (Score:5, Insightful)
Re: (Score:2)
Well said. I wish I had mod points.
Re: (Score:3)
" The fact that you can jailbreak your iPhone means that another party is able to compromise mine."
Well, yes. Though in a more global sense, practically every open OS on the planet, and most closed ones, are also "vulnerable" in this way. Linux doesn't require "jailbreaking" to load your own kernal patches - it's already "vulnerable" in the sense you're promoting.
And given that this essentially requires a very specific set of circumstances to achieve, including physical access to the hardware, it isn't the
Re: (Score:3)
Re: (Score:1)
Re: (Score:3)
The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
If they have physical control of the device, yes. Why would you trust any device you lost physical control of?
Re: (Score:3)
So there's no confusion, "jailbreaking" is exactly identical to "finding and exploiting a security vulnerability". By definition, someone is using an unpatched problem to root your device and replace the system software with their own version. The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
Technically, you are correct (the very best kind of correct). However if you followed jailbreaking more closely you'd realize a couple things.
1) There is no single exploit involved. With the iOS 6 jailbreak, they had to chain a whole sequence of things together to get root on the device.
2) In the end, it requires physical control over the device. As I understand it, the iOS 6 jailbreak required an exploit that allowed you to side load an app onto your device. That app, running on your device, then did all t
Re: (Score:2)
Furthermore, while the jailbreak is considered "untethered", that only means you can reboot the phone without requiring a USB cable to a host computer (an important requirement in my book.) But as far as I know most jailbreaks still initially require the user to connect a USB cable to the device to load a special boot loader that injects the exploit.
Re: (Score:1)
I love the idea of jailbreaking. Love it. I fully support your right to install whatever you want on the hardware you bought.
But.
So there's no confusion, "jailbreaking" is exactly identical to "finding and exploiting a security vulnerability". By definition, someone is using an unpatched problem to root your device and replace the system software with their own version. The fact that you can jailbreak your iPhone means that another party is able to compromise mine.
Again, I support everyone installing whatever they want on their devices. I'm not thrilled that this can be done on an iPhone by hacking deep into the system through a chunk of broken code somewhere.
Hmm... I just realized something. If Apple provided a means to gain root on iOS devices, it's likely they would never have discovered any of these security holes. Interesting paradigm. Security through preventing customers from doing what they want.
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
How is "desire to tinker" not a real need?
Because "I want to do this" is not the same as "I need to do this."
Re: (Score:2)
Re: (Score:2)
Seems like there can be some pretty straightforward guidelines.
If you require a dvorak keyboard, and the lack of a dvorak keyboard is a dealbreaker, then it's a need.
If you want a dvorak keyboard and would use a dvorak keyboard if you could (but it's not a dealbreaker), then it's a want.
It's about degrees. If you limit wants/needs to "basic survival requirements" then pretty much the entirety of modern civilization falls into the category of "wants."
Re: (Score:2)
Re: (Score:2)
Right, but only if you define a need solely as a "basic survival requirement." I do not agree with this definition.
I would use a simpler definition in the context of cars/hardware/software/housing/etc (none of which are "basic survival requirements")--if it's a dealbreaker, it's a need. If it's not, it's a want.
Re: (Score:2)
I'm a "one app" jailbreak user too. For me, it's BiteSMS. BiteSMS is great--it's a messaging overhaul that implements popup sms/imessage that lets you compose orreply to messages without leaving your current app. You can schedule messages to send in the future, actually see timestamps, etc. Great program. If this is a legit jailbreak and bitesms works, I'll upgrade to iOS7 right away.
Re: (Score:2)
Not after they send you the letter.
Re: (Score:2)
I've been using tetherme since the iPhone 3G and they have never sent me "the letter".
Re: (Score:1)
I really thought every OS with keyboard input these days had dvorak as an option, once you go beyond serving the north-american continent, if you cant load a different layout you are rather screwed, once you are that far, adding dvorak is hardly much work (and likely would be done for free by volunteers if possible)
Seems odd not to add something that cost so little to include and harms none.
Jailbreak with broken Cydia and Mobile Substrate (Score:4, Informative)
This jailbreak is completely broken, and according to multiple other jailbreakers the evasion team took money to include a piracy app store from china. You can see all the fun on twitter as they yell at each other.
Re: (Score:2)
Re:Jailbreak with broken Cydia and Mobile Substrat (Score:5, Insightful)
Re: (Score:2)
Because they are installing the Chinese store with root access, meaning the code can do whatever it wants with the information on your device and send that information to wherever they want. Jailbreaking always comes with risk, but this basically compromises your device with unknown and unreviewed code. But hey, if you feel like dancing with the devil, go for it.
Re: (Score:2)
Just because you're at the Hilton... (Score:2)
Just because you're staying at the downtown Hilton doesn't mean you want to eat every meal at the in-house restaurant.
Re: (Score:2)
Even the hottest girl in the room has a guy that's sick of her.
DO NOT USE - Super sketchy stuff happening (Score:5, Informative)
Read Stefan Esser's Twitter feed [twitter.com] for some off the problems with this jailbreak relating to a mandatory Chinese app store that get installed for some users (featuring pirated apps). They also left other members of the community like Saurik out, which is just odd. I wouldn't trust my devices with personal information with the current jailbreak.
Re: (Score:2)
Read Stefan Esser's Twitter feed [twitter.com] for some off the problems with this jailbreak relating to a mandatory Chinese app store that get installed for some users (featuring pirated apps). They also left other members of the community like Saurik out, which is just odd. I wouldn't trust my devices with personal information with the current jailbreak.
While you may agree or disagree with Apples stance on controlling the apps in iDevices, one thing is certain is that "Jailbreaks" are Security Exploits with all the ramifications that that entails.
Re: (Score:2)
What is so bad about having the Chinese appstore included? Hell, I'd look at that as a feature.
The primary fear is that it would be a high risk vector for malware.
A secondary fear is that it opens the jailbreakers to lawsuits, if there are too many pirated apps on that website.
Re: (Score:2)
Re: (Score:2)
Well, given how much must be done to have a jailbreak, the fact it was paid for by the Chinese is probably the most interesting part. Very sketchy. Do we need to remind people of all the Android malware that seems to infect Chinese phones?
There's plenty of things that get executed and a lot of it runs are root. If you think An
Already used it (iPad 2) (Score:3)
Don't see any Chinese app stores. Just Cydia. All working well. Biggest problem: Nothing on Cydia is yet compatible with iOS 7.x, so in a way there's no point unless you just want system access—there's next to nothing that you can install and use. But hopefully that will change in time.
letter to the community from evasi0n (Score:1)
Re: (Score:2)
You can also try the ideviceinstaller command. You might need to sign your app first using ldid. Using the codesign command with your own personal certificate that you
Re: (Score:2)
But lets be honest, if you can afford an iOS device you can afford a subscription. It's all a matter of budgeting priorities.
What if somebody gave it to him?
Re: (Score:2)
Money is tight, so I'm short the Apple Tax to do iOS development. But I have a jailbroken device.
What do I do to install my own App, that I developed myself, on my own jailbroken device?
IIRC $99 bucks to be legit or you could run them in the emulator. Putting them on your own device is not required to do development. Write something cool and you'll have volunteers.
Evasi0n has issued a statement. (Score:5, Informative)