Wednesday, September 22

iOS jailbreaking

iOS jailbreaking facts,
Jailbreaking is a process that allows iPad, iPhone and iPod Touch users to install homebrew applications on their devices by unlocking the operating system and allowing the user root access. Once jailbroken, iPhone users are able to download many extensions and themes previously unavailable through the App Store via unofficial installers such as Cydia. A jailbroken iPad, iPhone or iPod Touch is still able to use the App Store and iTunes.
Jailbreaking is different from SIM unlocking, which, once completed, means that the mobile phone will accept any SIM without restriction on, for example, the country or network operator of origin. Jailbreaking, according to Apple, can void Apple's warranty on the device, although this is quickly remedied by restoring the device in iTunes.
Cydia founder Jay Freeman estimates that over 10% of all iPhones are jailbroken.


History

2007
The first jailbreaking method was released on July 10, 2007, and a month later the first third-party game was released for the iPhone and iPod Touch.[4] Three months after the initial jailbreak, another method was discovered, which led to a cat and mouse game between Apple and hackers to patch and exploit security holes.

2008
In February the Italian hacker Zibri found the most important key inside the iPhone which then led to all upcoming jailbreak methods. Zibri himself coded and freely distributed ZiPhone. Upon the nearing release of OS 2.0 (previously iPhone OS), a hacker group called the iPhone Dev Team released a jailbreaking application named PwnageTool that used a graphical user interface to jailbreak 2G and 3G versions of the iPhone, and the first generation of iPod Touches then available. PwnageTool continues to be developed as of iOS 4.0.1.


2009
In January 2009, the iPhone Dev Team commenced work on jailbreaking the iPod Touch 2G On March 17, 2009, Apple announced the release of iOS 3.0, which remained unbroken until the iPhone Dev Team released PwnageTool 3.0 and redsn0w 0.7.2 three months later. The iOS 3.1 release in September 2009 again disabled jailbreaking, which was followed by a new version of PwnageTool able to jailbreak all devices except the iPod Touch 3G; the iPod Touch would remain unhacked for a month, until the release of George Hotz's blackra1n.

2010
On February 2, 2010, Apple released iOS 3.1.3, once again blocking jailbreaks. However, most iPhone and iPod Touch models can be downgraded. The iPhone 3GS and iPod Touch 3G can be downgraded only if the user saves the SHSH blob of their device with Cydia. Users can download the 3.1.2 firmware and then jailbreak with Blackra1n RC3.
On March 20, 2010, Wii homebrew developer Comex released the video "Spirit" showing an iPod Touch 3G booting up while jailbroken, or with an untethered jailbreak as opposed to the tethered jailbreak which George Hotz's Blackra1n used. He announced it would be a userland jailbreak, a much lighter and easily patchable jailbreak not used since 1.X firmwares. He said it worked perfectly fine for the iPod Touch 3G and the iPhone 3GS, and that it would probably work for the iPad too, when it is released.
On March 25, 2010, Geohot found another exploit to jailbreak (untethered) iPod Touch 3G and iPhone 3GS (MC Model) in software 3.1.3+. He said that the jailbreak will be entirely software-based, and was later revealed as "limera1n". The website has a green/lime raindrop on the screen (possibly becoming the link to download the limera1n application once it is released). However, George Hotz retired from jailbreaking before the completion of limera1n.
On April 9, 2010, shortly after the Chronic Dev Team's announced jailbreak, Geohot revealed another jailbreak for iPad Wi-Fi model, possibly untethered. The name of Geohot's jailbreak program was rumored to be Limera1n, and has no announced release date.
On May 2, 2010 shortly after the iPad 3G release date, Spirit was released. It works on all iPod touches, all iPhones, and all models of the iPad on 3.1.2-3.2, untethered. It is made similar to Blackra1n, with only a single button to jailbreak.
On June 21, 2010 hours after iOS 4 was released, redsn0w 0.9.5b5-3 was released by the iPhone Dev Team for iPod Touch 2G (Non-MC Models) and iPhone 3G (this also hacktivates the iPhone 3G).
On June 22, 2010 the day after iOS 4 was released, PwnageTool 4.0 was released for iPhone3G, iPhone3GS (Old Bootrom), and iPod Touch 2G (Non-MC Models).
On June 24, 2010 shortly after iOS 4 was released, sn0wbreeze 1.6.1 was released for iPhone 3G, iPhone 3GS (Old Bootrom), and iPod Touch 2G (Non-MC Models).
On July 15, 2010, Apple released iPad software version 3.2.1. It breaks the Spirit jailbreak.
On July 23, 2010, Planetbeing announced through his Twitter page that an unlock will be provided with the new jailbreak. In his words: "It will probably be the usual rump thing where you jailbreak and then install ultrasn0w from Cydia."
On July 25, 2010, the Library of Congress ruled that jailbreaking was explicitly exempted from provisions of the Digital Millennium Copyright Act.
On August 1, 2010, Comex released the first publicly available jailbreak for the iPhone 4 (and all other iDevices except all first gen iDevices) called JailbreakMe 2.0 (also known as 'Star'), the jailbreak is downloaded and activated by visiting a web page (JailbreakMe.com) on the device's web browser. The jailbreak is applied onto the iOS device right from within the Safari browser. This type of jailbreak has not been used since iOS firmware 1.1.1 on first gen iDevices. It is able to jailbreak firmware versions 3.1.2 to 4.0.1.
On August 11, 2010, Apple released iOS 4.0.2 for the iPhone/iPod Touch and iOS 3.2.2 for the iPad. These upgrades add no new features, but close the PDF Exploit which disables the user's ability to "slide to jailbreak", which ultimately renders the JailbreakMe.com method useless.
On August 20, 2010, Apple stopped signing firmware for iOS firmware released before 4.0.2 for the iPhone/iPod Touch and iOS 3.2.2 for the iPad. This forces users that must restore firmware to perform an upgrade to 4.0.2 firmware, which has all known vulnerabilities patched. Many users are outraged that they are forced to upgrade to iOS 4.x, when they have apps that will only run on iOS 3.x. This effectively stops iPhone 4 users from being able to jailbreak their iPhones unless they are running 4.0.1 or lower firmware.  However, 2G and 3G users are still able to jailbreak and 3GS users can still downgrade to 4.0.1 firmware 
On August 22, 2010, iPhoneBlogr.com began documenting all iPhone jailbreak and carrier unlock related information. iPhoneBlogr.com is a dedicated blogging website that provides up-to-date news on jailbreaking, unlocking, skinning and installing 3rd party applications on the iPad, iPhone and iPod Touch
On September 8, 2010,Chronic Dev Team's Member pod2g found out a way to exploit bootrom vulnerability as soon as Apple released iOS 4.1. This exploit has been named as SHAtter exploit. The bootrom exploit has been confirmed to work on iPhone 4, iPod Touch 4G, and iPad, which all contain new CPU, S5L8930. Bootrom level exploit means that the above mentioned devices are jailbroken for life until Apple makes changes at hardware level. p0sixninja from Chronic Dev Team posted some details on iPhone Wiki about the nature of SHAtter exploit, which were later removed. They earlier defined it as a tethered jailbreak like blackra1n, meaning that users have to plug the jailbroken device into a computer every time it needs to be restarted although it was mentioned that it can be used as a vector for untethered jailbreak (this exploit rumor has yet to be confirmed).
On September 18, 2010, Greenp0ison released a new jailbreak that could jailbreak 4.0.1 users.
On September 20, 2010, pod2g, the person who discovered the SHAtter exploit (also assisted with the discovery of 24Kpwn exploit) announces he will no longer be working with the Chronic Dev Team

Devices

Device Device Release Date First Jailbreak Release Date Latest Jailbreakable Firmware Version of iOS
(released) Latest Version of iOS that can be Installed
(Red - can't be Jailbroken, Green - can be Jailbroken)

iPhone
(Original, Discontinued by Apple) June 29, 2007 July 10, 2007 3.1.3 3.1.3
iPod Touch 1G (Discontinued by Apple) September 5, 2007 October 10, 2007[28] 3.1.3 3.1.3
iPhone 3G July 11, 2008 July 20, 2008[29] 4.0.1 (4.1 removes the phone feature and there are other known issues) 4.1
iPod Touch 2G
(2nd Generation) (MB model) September 9, 2008 March 11, 2009 4.1 4.1
iPhone 3GS
(Old Bootrom iBoot-359.3) June 19, 2009 July 3, 2009[31] 4.1 4.1
iPod Touch 2G
(2nd Generation) (8GB MC model) September 9, 2009 October 25, 2009 4.1 4.1
iPhone 3GS
(New Bootrom iBoot-359.3.2) October 4, 2009 October 25, 2009 4.0.1 4.1
iPod Touch 3G
(3rd Generation) September 9, 2009 October 11, 2009 4 4.1
iPad
(Wi-Fi model) April 3, 2010 May 2, 2010 3.2.1 3.2.2
iPad
(3G model) April 30, 2010 May 2, 2010 3.2.1 3.2.2
iPhone 4 June 24, 2010 August 1, 2010 4.0.1 4.1
iPod Touch 4G September 8, 2010 N/A N/A 4.1


Software used

Old (1.1.2 - 3.2)
Software Name Release Date Platform Hardware Firmware Publishers
ZiPhone February 2008 Windows, Mac OS X iPhone 2G, iPod Touch 1G 1.1.2 - 1.1.4
Untethered
Zibri
QuickPwn August 2008 Windows, Mac OS X and Linux iPhone 2G/3G, iPod Touch 1G 2.0 - 2.2.1
Tethered
iPhone Dev Team
redsn0w 0.3 April 12, 2009 Windows, Mac OS X and Linux iPod Touch 2G[sw 1] 2.2.1
Untethered
iPhone Dev Team
PwnageTool 2.0 July 19, 2008 Mac OS X iPhone 2G/3G, iPod Touch 1G 2.0
Untethered
iPhone Dev Team
PwnageTool 4.3 September 13, 2009 Mac OS X iPhone 2G/3G, iPod Touch 1G 4.0 - 4.0.2
Untethered
iPhone Dev Team
PwnageTool 2.2 November 21, 2008 Mac OS X iPhone 2G/3G, iPod Touch 1G 2.2 - 2.2.1
Untethered
iPhone Dev Team
PwnageTool 3.0 June 19, 2009 Mac OS X iPhone 2G/3G, iPod Touch 1G 3.0 - 3.0.1
Untethered
iPhone Dev Team
purplera1n July 2009 Windows and Mac OS X iPhone 2G/3G/3GS, iPod Touch 1G/2G 3.0
Tethered[37]
Geohot [38]
PwnageTool 3.1.4 October 13, 2009 Mac OS X iPhone 2G/3G/3GS, iPod Touch 1G/2G 3.1 - 3.1.2
Untethered
iPhone Dev Team
blackra1n RC3 November 3, 2009 Windows and Mac OS X iPhone 2G/3G/3GS,[sw 2] iPod Touch 1G/2G[sw 2]/3G[sw 1] 3.1.1 - 3.1.2
Tethered
Geohot
PwnageTool 3.1.5 February 7, 2010 Mac OS X iPhone 2G/3G/3GS,[sw 3] iPod Touch 1G/2G[sw 3] 3.1.3
Untethered
iPhone Dev Team
Spirit May 3, 2010 Windows, Mac OS X and Linux iPhone 2G/3G/3GS, iPod Touch 1G/2G/3G, iPad (All) 3.1.2 - 3.2
Untethered
Comex
PwnageTool 4.01 June 23, 2010[39] Mac OS X iPhone (3G, 3GS)[sw 3], iPod Touch 2G (non-MC models) 4.0
Untethered
iPhone Dev Team
JailbreakMe August 1, 2010[40] iOS Safari (on iDevice) iPhone (All), iPod Touch (1G, 2G & 3G), & iPad (All) 3.1.2 - 4.0.1 (except for 3.2.2)
Untethered
Comex

Current (3.2.1 - 4.1)
Software Name Release Date Platform Hardware Firmware Publisher
redsn0w 0.9.6b1 September 20, 2010[42] Mac OS X (x86)[43] iPhone 3G, iPod Touch 2G (MC Models tethered)[sw 3] 4.0, 4.1
Untethered (Beside MC Models)
iPhone Dev Team
sn0wbreeze 1.8 Beta July 16, 2010[44] Windows iPhone 3GS[sw 4], iPod Touch 2G, iPod Touch 3G 4.1 Beta
Untethered
iH8sn0w
JailBreakMe 2.0 August 1, 2010 iOS Safari (on iDevice) iPhone (All), iPod Touch (1G, 2G & 3G), & iPad (All) 3.1.2, 3.1.3, 4.0, 4.0.1, 3.2, 3.2.1
Untethered
Comex

Viruses/worms

The first iPhone worm appeared in early November 2009, created by 21-year-old Australian technical college student Ashley Towns of Wollongong. He told Australian media that he created the worm to raise awareness of security issues. "When people jailbreak their phone, it allows them to install a service on their phone called SSH... Generally you should always change the password after setting up an iPhone as all iPhones use the same password by default. This worm exploits people's tendency to not change the default password, changing their iphones wallpaper to Rick Astley. This virus was called iKill.
On 22 November 2009, F-Secure reported on a new malicious worm compromising bank transactions from jailbroken phones in the Netherlands.

United States legal issues

Jailbreaking an iPod or iPhone in the United States is legal "fair use", and does not violate copyright laws defined by the Digital Millennium Copyright Act. In response to a request by the Electronic Frontier Foundation, the U.S. Copyright Office explicitly recognized an exemption to the DMCA to permit jailbreaking in order to allow iPhone owners to use their phones with applications that are not available from Apple's store, and to unlock their iPhones for use with unapproved carriers. Apple had previously filed comments opposing this exemption and indicated that they did consider jailbreaking to be a violation of copyright (and by implication prosecutable under the DMCA). Apple's request to define jailbreaking as a violation of copyright was denied as part of the 2009 DMCA rulemaking. In their ruling, the Library of Congress affirmed on July, 26, 2010 that jailbreaking is legal under U.S. copyright law.
Tim Wu, a professor at Columbia Law School, argued that jailbreaking is "legal, ethical, and just plain fun." Wu cited an explicit exemption issued by the Library of Congress in 2006 for personal unlocking, which notes that locks "are used by wireless carriers to limit the ability of subscribers to switch to other carriers, a business decision that has nothing whatsoever to do with the interests protected by copyright" and thus do not implicate the DMCA. Wu did not claim that this exemption applies to those who help others unlock a device or "traffic" in software to do so. As of July 26, 2010, The U.S. Copyright Office has approved exemptions to the DMCA that allow iDevice users to Jailbreak their devices legally. These exemptions also allow phone users to unlock their phone in order to switch carriers. It is still possible Apple may employ technical countermeasures to prevent jailbreaking or prevent jailbroken phones from functioning, but they will not be able to sue users who jailbreak. It is also unclear whether it is legal to traffic in the tools used to make jailbreaking easy.


iPhone Dev Team
The iPhone Dev Team is a group of engineers in the iOS community who have developed many jailbreaking and unlocking applications not authorized by Apple Inc for the iPhone, iPod Touch and iPad devices, with the ability to sidestep the limitations placed on devices by the manufacturer—allowing for activities such as deep customization and SIM unlocking. The group and their tools have become emblematic for these activities, which are termed jailbreak and SIM unlocking respectively, to the extent that the Electronic Frontier Foundation have made them the primary example used in their petition to create a DMCA anti-circumvention exemption for jailbreaking and Apple executive Greg Joswiak (Vice President iPhone Product Marketing) has quoted them in his countering comment to the same petition.






(source:wikipedia)

No comments:

Post a Comment