Apple Patches iPhone Jailbreaking Bug 36
Apple has released today an iOS security update to patch a bug the company accidentally un-patched in an earlier release, introducing a security weakness that allowed hackers to craft new jailbreaks for current iOS versions. From a report: The original bug, discovered by Ned Williamson, a Google Project Zero security engineer, allows a malicious app to exploit a "user-after-free" vulnerability and run code with system privileges in the iOS kernel. iOS version 12.4.1, released today, re-patches this bug that was initially fixed in iOS 12.3 but was accidentally unpatched in iOS 12.4, last month. Sadly, Apple's blunder didn't go unnoticed and earlier this month, a security researcher named Pwn20wnd released a public exploit based on Williamson's bug that could be used to jailbreak up-to-date iOS devices and grant users complete control over their iPhones. But while users taking a risk and jailbreaking their own devices doesn't sound that dangerous, a lesser-known fact is that malware operators and spyware vendors can also use Pwn20wnd's jailbreak as well.
And this time ... (Score:3)
Re: And this time ... (Score:1)
Re: Nobody really uses iPhone's anyway... (Score:1)
Re: (Score:1)
Not to piss in your corn flakes, but my origin HTC G1, the very first Android phone ever sold, still works fine, hardware-wise, even though it doesn't get updates. Battery is long dead, but that's what you get after north of a decade.
That said, I prefer the Galaxy series. Better performance, battery life, screen size--you name it.
Re: (Score:2)
Re: Nobody really uses iPhone's anyway... (Score:1)
Re: (Score:2)
How much have you spent on droids?
On average around $55 per year, apparently. That's including our ridiculous markups relative to the US prices. I just don't install crap.
Re: Nobody really uses iPhone's anyway... (Score:1)
Re: Nobody really uses iPhone's anyway... (Score:2)
Re: Nobody really uses iPhone's anyway... (Score:1)
Re: (Score:2)
Re: Nobody really uses iPhone's anyway... (Score:1)
Apple's being good? (Score:3, Interesting)
Apple left a method in place to allow users to obtain root on the devices they own safely without hackers taking over their devices, right? Because its all about keeping evil malware off the devices, and not keeping people who actually own the devices from exercising that ownership right, correct?
Thought not.
Min
Re: (Score:2)
"We detected a virus on your phone! It's so advanced that a simple app from the app store can't repair it! Let me walk you through the steps to installing our cleaner software and restoring your
user-after-free? (Score:4, Insightful)
Um, are you sure it isn't "use-after-free"?
iPhone never belonged to us anyway (Score:5, Interesting)
I strongly prefer to have full access to all the devices I own. I used to do the jail-breaking thing back during the early days of the first iphone and ipod. But it's just not worth it. If you want a device you actually own, you'll have to buy something other than an Apple device.
Unfortunately Android is a bit of a wasteland also, with its own share locked up phones, crappy cheap phones with dodgy firmware, and wasting hours pouring over long, unstructured forum posts. I think Android phones suck generally but I like them better than iPhones.
For the unwashed masses, I can understand why Apple locks things down the way they do. It's good for them, but it's also good for their customers.
Why have even tech-savvy folks (Score:3)
Re: (Score:2)
Unfortunately Android is a bit of a wasteland also, with its own share locked up phones, crappy cheap phones with dodgy firmware, and wasting hours pouring over long, unstructured forum posts.
Once upon a time two major designs had nearly all the desktop personal computer / business workstation market: Apple Macintosh (a walled garden - no programming tools available short of buying an Apple Lisa), and IBM PC and its clones (based on an open hardware design but with lots of variations in peripherals, main b
Re: (Score:2)
Despite these amazing open source projects, I just don't see ARM-based hardware (phones especially) ever becoming open in the same sense as the original IBM PC design became (despite IBM's attempts to stop it). ARM is a decent architecture but it's hobbled by proprietary boot loaders and chipsets, and a general lack of standardization requiring binary blobs for a lot of things. It's amazing Android runs on all these different phones as well as it does. I can't really see ARM supplanting Intel anytime so
Re: (Score:2)
It's a pity Nokia's Maemo didn't catch on because it run a full Linux system and gave the user more freedom than current OS (I'm not sure if it allowed root access).
Re:iPhone never belonged to us anyway (Score:5, Insightful)
I think "unwashed masses" is needlessly pejorative. In my 20s I ran my own mail server and had opinions on Linux (Slackware forever) vs. FreeBSD and now I just cannot be FUCKED to care about any of that. Faffing about with my phone like that holds no interest to me, any more than hacking my toaster oven might. My phone is a pocket internet appliance. I want it to work, I want it to be relatively secure, and when I want a new one, I want it to be an upgrade over the one I bought 4 years ago if possible. Probably in another 20 years I won't care about the upgrade part.
I want a company like Apple to take it seriously so I don't have to.
"Sadly?" (Score:5, Insightful)
Sadly, Apple's blunder didn't go unnoticed and earlier this month, a security researcher named Pwn20wnd released a public exploit based on Williamson's bug that could be used to jailbreak up-to-date iOS devices and grant users complete control over their iPhones.
What's with this "sadly" shit? It's a good thing for people to be able to control the devices that they purchase and own outright.
Re: (Score:3)
People include government agents, including customs officials who would love to "inspect" your phone. Or countries wher
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
Also, maybe if Apple would make some of the more standard tweaks available in iOS less people would want to jailbreak. Case in point...
iOS 4x4 : 4 icons in dock = 20 icons per page
Mine 5x6 : 5 icons in dock = 35 (reduced size by 80%)
And I could have more if I wanted. Why is simple customization like this still not available?
Re: (Score:2)
Re: (Score:3)
Re: "Sadly?" (Score:1)
Re: (Score:2)
At least in the US, if the phone goes off contract the phone company is required by law to unlock the phone. It has been that way for several years. They won't do it automatically, you have to ask.
Note to self: (Score:2)
Comment removed (Score:3)
Pegasus (Score:1)
Apple can go to hell (Score:1)
Thank Gawd (Score:2)