Untethered iPhone jailbreak works, but it won't be released
The hacker fears Apple will fix the bugs in iOS 6.1, making it harder to develop future jailbreaks
IDG News Service - A famed iPhone hacker has developed a fresh way to jailbreak Apple's iOS 6 operating system in order to install unauthorized apps, but he says he won't release it.
David Wang wrote on Reddit that he discovered several flaws that allow iOS 6 to be jailbroken, which would allow users to install applications not approved by Apple for its App Store.
But Wang, who goes by "@planetbeing" on Twitter, said he won't release the jailbreak. Apple moves quickly to repair such flaws, and showing his hand now might prevent Wang from being able to access the device's firmware in future.
"Releasing it would burn an exploit we want to save for ourselves so we can always get in to look at new firmware and help [jailbreaking] in the future," he wrote.
Jailbreaking the iPhone is legal under an exception in the U.S. Digital Millennium Copyright Act. But Apple hates the practice and can void the warranty on a phone whose software has been tampered with.
The jailbreak is an "untethered" one, meaning the iOS 6 device does not need to be connected to a computer in order to work. A tethered jailbreak exists for iOS 6 using "limera1n," which is a USB exploit. The problem with that jailbreak is that it is not persistent: an iOS 6 device would need to be jailbroken again if it is rebooted.
With this jailbreak, Wang has managed to overcome stronger security protections Apple engineered into iOS 6. With each new iteration of the OS, it has become more difficult to jailbreak. Hackers essentially need to find several bugs in order to be successful.
Wang said he used more than four software flaws for his latest jailbreak, which works on iOS version 6.0.2 on an iPhone 5. But Apple is likely to release iOS 6.1 soon, which means the company could fix the software to block Wang's exploit if it were disclosed.
The 6.1 version might also take away some other software bugs he's found, so "there's no point in sacrificing the many bugs" the update won't fix if the exploit isn't released, Wang wrote.
But jailbreak enthusiasts should not despair. There are likely more vulnerabilities in Apple's software waiting to be found, Wang wrote, "so while jailbreaking is getting harder, reports of its death are highly exaggerated."
Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk
- 12 iPhones Apps That Will Make You a Networking Star
- 10 Careers Robots Are Taking From You
- Big Data Gold Isn't Always Where You Would Expect It
- 6 Tips to Build Your Social Media Strategy
- A walking tour: 33 questions to ask about your company's security
- 15 social media scams
- The 7 elements of a successful security awareness program
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Red Hat JBoss Fuse Technology Overview Read the technology overview to learn more about the functional components and key features in Red Hat JBoss Fuse that will allow integration...
- Data loss prevention: Refreshing data security to meet an evolving threat environment CDW's reference guides provide a high-level, informative take on today's most pressing IT solution areas and related issues.
- Two-Factor Authentication This guide provide up-to-date summaries, strategic guidance and best practice tips on the technologies driving IT operations forward.
- DLP Is Not Just Good for Business, It's Vital for Business Data--every company's most vital intellectual asset,--is more vulnerable than ever. And data leaks, whether unintentional or malicious, often have the same results...
- Live Webcast
Get an Integrated Approach to Data Management - This KnowledgeVault Exchange is your one-stop resource center for designing a winning data management strategy with quantifiable top-line gains and bottom-line savings.
- Reduce Costs, Maximize Performance and Ensure High Availability of your Business Critical Applications This video highlights how three industry leaders - VMware, Cisco and NetApp have teamed to provide a solution that can help you lower...
- Content Analytics Explained Content Analytics Explained - Listen to Bob Foyle, Sr. Product Manager, IBM talk about Content Analytics and the Analytics Imperative. All Data Center White Papers | Webcasts