Should you risk jailbreaking your iPhone?
Chances are, if you don't know the dangers involved, you shouldn't jailbreak
Computerworld - Is a jailbroken iPhone for you?
The "evad3rs" team has published its "evasi0n" jailbreak tool (for free) to the iOS community. The team claims that in roughly a week, some 7 million users have used the tool to jailbreak their iOS devices. By any measure, the launch -- already up to Version 1.3 to support Apple's iOS 6.1.1 release on iPhone 4Ses -- has been wildly successful.
But is jailbreaking your device something you want to do? Let's consider a few issues before you dive in.
First, just what is jailbreaking? It's the process of removing the sandbox protections that Apple places in its iOS products. Its purpose is primarily to enable users to install unreviewed (by Apple) software on their iOS devices. Secondarily, it enables users to access files they normally wouldn't be permitted to, which opens up all sorts of possibilities for customizing an iOS system. Many technically inclined users find liberation in these things and loathe being locked into a sandboxed device.
There are entire unsupported (again, by Apple) communities where apps can be purchased or simply acquired for free. These communities don't have the strict curation policies that Apple employs in its App Store, and that is exactly its appeal to the jailbreakers. Indeed, many apps that were rejected by Apple over some policy violation or another have ended up in the jailbreak app communities.
Is it legal? Apparently it is, at least in the U.S. In 2010, the U.S. Copyright Office declared jailbreaking to be an exception to the Digital Millennium Copyright Act. But the situation is not exactly cut and dried. See here for more information, but it seems that jailbreaking an iPhone in the U.S. remains legal, while doing the same to an iPad is not. The bottom line is this: if you're at all concerned about the legality of jailbreaking your device, you're probably well advised to abstain. And be aware too that Apple maintains that jailbreaking may well void a device's warranty.
Is it safe? The answer probably has more to do with you than with anything else. Most jailbreaks completely remove iOS's app sandboxing features, even after the device has been booted up after the jailbreak process itself. At this point, all apps essentially run in a privilege state where they can all read/write pretty much anywhere on the device. This opens up a jailbroken device to possible malware, data exfiltration and so on. Essentially, a jailbroken device has all the file protections of a Windows 3.1 system. It's a single-user device, and every app can get to everything.
More by Kenneth van Wyk
- Kenneth van Wyk: We can't just blame users
- Kenneth van Wyk: If you want developers to give a hoot about security, take a lesson from the squirrels
- Kenneth van Wyk: Looking beyond Heartbleed
- Kenneth van Wyk: Where mobile apps go wrong
- Kenneth van Wyk: Apple's big fail
- Kenneth van Wyk: After Snowden
- Kenneth van Wyk: Target breach underscores how backward U.S. payment tech is
- Kenneth van Wyk: Enjoy your trip, but protect the data you take with you
- Kenneth van Wyk: Lingering faults with security by default
- Kenneth van Wyk: High hopes for iPhone's Touch ID
- Top 10 Reasons to Strengthen Information Security with Desktop Virtualization Regain control and reduce risk without sacrificing business productivity and growth
- Preventing Sophisticated Attacks: Anti-Evasion & Advanced Evasion Techniques McAfee Next Generation Firewall applies sophisticated analysis techniques specifically to detect advanced evasion techniques (AET).
- The Security Industry's Dirty Little Secret The debate over advanced evasion techniques (AETs) This report summarizes the findings of a McAfee commissioned research group to determine the level of understanding IT security professionals have about AETs...
- Demand More, Get the Most from the Move to a Next-Generation Firewall Beyond the basics in a next generation firewall, to protect your investment you should demand other valuable features: intrusion prevention, contextual rules, advanced...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities. All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!