Well lookey see here, sounds like v1.1.1 isn't all doom and gloom after all. The iPhone dev community's apparently not only
moved past accessing the nigh-unbreakable file system protections
Apple implemented in the latest
iPhone and iPod touch firmwares, they've also managed to hack the SpringBoard app into shape enough to properly launch 3rd party apps (which were, as expected, recompiled to function with the new iPhone frameworks). The iPod touch has apparently also been hacked for root access, and apparently those freshly recompiled apps are functioning there as well. But it's still not without some bad news: unfortunately, it sounds like most (if not all) of these new hacks rely solely on that single TIFF exploit in Mobile Safari, meaning that everyone's back to square one the moment Apple beams v1.1.2 to the public at large.
Read - Hacker toc2rta confirms the exploit and functionality
Read - iPhone jailbroken, apps installed
Read - iPod touch jailbroken
posted Oct 8th 2007 10:24PM
Think of all the great 3rd party apps these talented individuals could be writing instead of having to spend their time and efforts fighting Apple for the ability to do so. Thanks Apple.. I'm sure Apple will brick it again..
1.1.2 is going to be a Safari update that blocks TIFF images.
Is this the same john as in all the other posts?
there are an awful lot of us who didn't think through choosing the name for our comments. Some of us are lowercase j (see above), some are uppercase (
There's one thing that confuses me. Am I right in that these hacks all require taking advantage of an exploit? In other words... does that mean that we're on Apple's case for closing security holes that could be used to execute arbitrary code? I know that the 3rd parties writing these apps are doing it for the greater good, but couldn't someone use these same exploits for less honorable means?
I mean, if iPhones were having security problems we'd be bashing the hell out of Apple for leaving holes in the system.
I think I'm just confused. Can somebody tell me the diff between the good security holes and the bad ones?
I have a funny feeling that things will change when Leopard ships.
openmoko, nuff said...
@halfeatenfish
It's exactly what it looks like. Aside from clearing the Springboard plist, Apple redid the poor security from 1.0x thereby making it difficult for unauthorized 3rd party apps to get back in. A new security hole was discovered, and 3rd party apps are back. Theoretically, all the work used to hack native support again, could be used to hack the crap out of your phone, should you navigate to the wrong website.
You could find yourself with a new icon on your home screen, that you couldn't remove... automatically treating you to spyware and NSFW moments at its leisure... ON YOUR PHONE (I can see the YouTube spoof right now, cueue the music). I knocked Apple for the dialerbug problem (lets you fake the number the user okayed to call), and the WiFi flaw wasn't pretty either. Hopefully they get this one too. I'm going to hand it to these guys, but still wait for Apple's 3rd party solution. This isn't the way. I'm hitting the iPhone Tech Talk today here in Beantown.
@mushrooshi
Why not click on his name and see his profile and find out?
@Cleverboy - I agree that ultimately nasty types could also use these exploits for nefarious deeds, which is why i think Apple should just relent and provide everyone with an honest-to-goodness SDK for mobile OSX.
...And if they don't, we can always update and wait for the pirate versions of those Apple-supported apps that are obviously on the gravy train to Cupertino ;)
Another pic
http://www.hackint0sh.org/forum/showthread.php?t=10373
Awesome
Just as i said: "Its just a matter of time." hack the iphone!!!
You bless us with your mighty prediction, Oracle
Slap a gui on that sucker and make it a 1 click process.
Buying a $399 iPod Touch is only the beginning of the fun part~
See a Gateway laptop price is diving under $300!
I'd love to see you stuff that 15.4" widescreen laptop in your pocket.
This is really getting ridiculous. Steve Jobs said it himself: It's a cat and mouse game. I found it unbelievable that a company like Apple would play such a game. It is CLEAR that consumers want 3rd-Party Applications, so what is the business gain behind trying to disable them? I would see 3rd-Party apps as being a big marketing plus for Apple, and considering the number of tools already available based on hacked toolchains, if Apple wrote a real SDK imagine the possibilities. Seriously Apple, stop playing games and trying to disable useful/fun software that has already been written (without any assistance from you!)
Uh, the business gain in disabling 3rd party apps that consumers clearly want?
Oh, let's see...maybe the money Apple can make both charging a licensing fee to software developers AND charging their beloved customers for the software?
My guess would be that Apple wants a piece of the application profits. I'm not sure how they are considering implementing such a mechanism, but it must be the reason they are fighting this. Again, Apple COULD be doing this to ensure a high quality phone first, but I wonder.
You cannot create apps to curcumvent their carrier locks! That's disgracing the mighty Apple policy of screwing their fanbase over!
I think it has to do with more with ATT than simply Apple wanting to make more money selling apps. If you look from an ATT business model that they have used in the past, they cripple phones functions, make you pay data plans that cost more than the iphone data plan, charge you monthly fees for apps, ringtones, videos.
I saw a third party program that made the iphone gps-like by using triangulation. Well, ATT and other carriers like Verizon would rather charge you $10 a month for the kind of service so they force the manufacturers to cripple built-in GPS chips. Also crippling blutooth so that it can only be used with headsets rather than sending files is another example. I think Apple might be hamstrung by their contract with ATT, although they can always blame ATT for the contract while still taking in a percentage of the monthly fees that ATT brings in.
The thing is, now that Apple started the game, they can't just back out and give the cheese to the mouse. It makes the cat look weak.
Let me get this straight...
There is only ONE exploit that Apple needs to close to prevent the new jailbreak from working and engadget is TELLING them what it is?
Nice work guys. Keep it up.
Apple would have found out rather quickly, if not even for news/blogging outlets. All they have to do is peek into the hacking community and viola.
You know felines like to play with their prey before they GO for the kill...
As long as there is a demand for hacking apps and hackers willing to devote time to making them, this will continue. Apple ought to take a hint from the large number of Windows exploits over the years; people will always find a way around safeguards/restrictions/DRM.
Anyone else notice that open-source Linux is much more secure than Windows? That's because any developer can make improvements to it.
I'll keep my T-Mobile 1.02 for now. It's not like I'm gonna BUY music anyway. :)
WHY does this remind me of PSP homebrews...?
Because its very similar, only Sony were never stupid/evil enough to intentionally brick peoples PSPs
Because its very similar, only Sony were never stupid/evil enough to intentionally brick peoples PSPs as a scare tactic
Umm, Xavier Gill, Sony did show some malice - PSP's sporting TA-082 motherboards (and rumour has it one or two of the others) will brick if one tries to install a geniune PSP FW after having downgraded it before. Sony messed with the later FW so that if some checksums didn't match-up it bricked.
Actually, Sony made a specific PSP motherboard TA-082 that would brick when you tried to downgrade to the 1.50 kernel.
Needless to add (one would hope) that there is no proof whatsoever that Apple intentionally bricked the iPhones with 1.1.1. and as a matter of fact, according to none other than Erica Sadun, one of the core members of the 1337 hackers, Apple probably tried hard to PREVENT hacked iPhones from bricking. So...
ENOUGH WITH THIS CONSPIRACY THEORY FOR CRYIN' OUT LOUD. At least, stick with innocent until proven guilty.
Not saying they bricked them intentionally. Just the idea of cat and mouse with a new patch that breaks apps and then a new hack that makes it ok again then another patch that breaks and so on... it reminds me of PSP homebrew (which is a "war" no one will ever win)
Oops, sorry Yan, I was replying to Xavier. Shoulda made that clearer.
that title was a little misleading ryan. you got my hopes up for apps on the ipod touch, I think you need to reword that
Does this seem eerily familiar to anyone? Sounds like the same kind of stuff going on with Sony and the PSP - hee hee
I really hope Apple doesn't play the bullshit game of trying to beat hackers with new firmware, maybe someone should show them how successful that is (PSP anyone?).
So, does this mean full iCal on the touch or should i hold off on buying a touch for a while longer? I just want a freaking iPDA.
LOL!
I suggest holding off for iPDA. I sure am!..or an unlocked proper iphone, or a better phone from a competitor (that doesn't have sharing issues).
Great job Dev team. Anybody taking bets as to when the new firmware (bug fixes inc. safari exploit) will appear?
You know Apple, you better take it while you can. One day no one is going to care.
Can someone explain this TIFF exploit? Is this TIFF the same as the image format and how does that have anything to do with unlocking an operating system?
Maybe it sounds a lot like PSP because like, ya know, it's the same exploit and the same person?
Hmmm...
Just as i said: "Its just a matter of time." hack the iphone!!!
Can we not just have a separate iPhone section already so that those of us who don't care don't have to wade through every minute piece of non-news that gets posted?
I mean, seriously, on what other phone would be it news-worthy that someone has found a way of using your own ringtones? It's a farce.
Relax. That's all I have to say.
I am relaxed.
I'm just sick and tired of being bombarded with so much iPhone-related spam.
Um... How do i put this... There is a way. A separate feed. Eat the feed.
I second the motion for a seperate iPhone feed - but not because I am sick of the iPhone stuff. To the contrary, I can't really get enough. But perhaps it would be a good idea to have an Apple feed, not just a dedicated iPhone one.
from now on anytime engadget posts a news entry about samsung lcd's instead of skipping past them as I usually do, I'm going to click on them, then click to comment about how much disdain I have for said article.
why do these idiots keep popping up? STOP BREEDING!
I'm not after a feed, I'm after the ability to read a what is, otherwise, an excellent tech-related blog without every second story being something related to the iPhone which, if it wasn't made by Apple, would never come anywhere near being news-worthy.
And, 'kenpo' feel free to think or do what you want but I fear that your comments and actions will prove that only one of us is the idiot - and it won't be me.
If you can't see the ridiculous bias in coverage this one item gets over everything else and how many of the articles that are posted about the iPhone are completely redundant then, frankly, you must be blind. You say you'll spam every article about Samsung displays - so that'll be product releases and reviews, as opposed to separate news stories for every app released, every step in trying to unlock and re-unlock the iPhone, stories *counting down* to a commercial piece of software being released to unlock the iPhone.
Whilst I don't expect everyone to agree with me (ie not iPhone owners and Apple fanboys), my point is valid.
Mmmno it's not a valid point just because you say it is. Read what you want to read. Either you're lazy, or you don't have a scroll button on your mouse/ability to use window scrollers.
That or you have some sort of complexity in real life pertaining to being dramatic and gaining attention. I suppose we should stop feeding that monster, but you have to agree with the fact that nobody is going to support your argument here.
It's about making money there ace.
Engadget and the Weblogs Network aren't there because a new tech news outlet was needed.
They drive revenue. iPhones drive traffic. Traffic drives clicks. clicks drive dollar signs.
If you don't like it, I suggest you and the rest of you that don't want Apple stories like this to start supporting the economy of the 'click' on news stories that you feel ARE worth your time.
Until then, Apple users, typically with larger disposable gadget incomes, will easily have the upper hand in dictating the content.
::shrugs::
I'm sorry you find the non-Apple feed not up to your standards. I don't know what else to tell you. I'm almost ready to be done with iPhone news because I'm sick of having to listen to people like you prattle on in the comments section.
Engadget has bent over backwards to accommodate both parties, and if you don't think the iPhone is relevant news, perhaps find a tech blog that doesn't cover it like this.
P.S. Here's a clue, if you don't like, just scroll past it. Personally I could give a crap about the digital camera reviews, they almost never show anything I can afford, but I don't feel the need to show up in the comments section exasperated that it was a blog posting I didn't enjoy. Just a little scroll dude... It works on the mouse or the keyboard.
I don't have a point?
So, if it were some other product that garnered this ridiculous level of coverage, people like yourself wouldn't be annoyed? Just because this is an Apple product doesn't warrant the level of coverage it gets and, as I have touched on, were it any other product it wouldn't.
So, given that last time I checked Engadget was not supposedly an Apple- or iPhone-dedicated site, why should this one product get so much attention?
Also, why even if it is getting so much attention, why is it getting it for points that, frankly, aren't in any way special? Wow, you can use your own ringtones - it's only a standard feature on every other phone on the market, so where are the stories on every other phone just because you can choose your own ringtones?
I do have a point. Not because I say so but because there are a huge number of essentially useless iPhone stories get posted.
Also, as you so succinctly put it, you saying my point isn't valid doesn't make it so.
The only thing you managed to get right was the complete lack of support I'll find in here - because the only people who'll be looking at this are those who have an iPhone, the rest of us (the majority) are expected to just put up with the spam and move on.
@Adam: whilst I can't argue about your point regarding revenue, that doesn't the fact that the coverage on Engadget isn't well beyond a farce. Far beyond what is necessary, even from the point of view of the mighty dollar.
As for Engadget bending over backwards, at the very least they could limit this spam to the EngadgetMobile section, what with the iPhone actually being a mobile phone and all (I know, shock horror - it's just a phone).
But, they don't, they actually post it in both - overkill would be an understatement.
Also, you say you're sick of reading comments like mine on iPhone-related 'news' stories, do you not think that the fact that such comments keep appearing means that maybe there is a point to them? People wouldn't be complaining all the time if the coverage wasn't so grossly disproportionate.
P.S. thank you for getting all condescending at the end - it was, up until that point, a nice and well-reasoned response (very much in the minority in that respect), it's a shame you felt the need to finish it like you did.
lain, no it's not valid, really, because why would they post so many articles on the iPhone if the iPhone wasn't a gadget that is
(1) newsworthy
and
(2) will generate hits by posting about it?
What you're doing is akin to someone complaining that Engadget is heavily biased towards high-tech gadgets, when there are so many fantastic low-tech gadgets out there that they could cover (blender, juicer, rice-cooker--although the last could be quite high-tech). Yeah, sure, but not enough people are interested in them to warrant heavy coverage.
Conversely, if enough people weren't interested/invested in the iPhone, Engadget wouldn't be posting about it this much.
In a nutshell, the very fact that Engadget (and--let's face it pal--most high-tech gadget blogs worth their salt) IS making multiple posts about the iPhone, and that those posts are generating hits, in and of it self JUSTIFIES the heavy coverage.
So, what can you do to "rectify" the situation (in your eyes)?
Well, really only one effective way, and that is to skip over the article, and NOT click on the article link hence adding to the hit count, and certainly NOT to come all the way down to the comments section and adding to the comments count to boot.
Just my .02 worth of friendly advice.
i think it's suffice to say that somebody here doesn't recognise a popular product when it's staring right into his face
and since he doesn't recognise it he also thinks that other people don't recognise it, and that people who think that it's popular must be outta their minds.
Dude, try not to be a retard. Checking engadget's RSS feed right now yields a whole two iphone articles out of the forty one articles total.
If thats too much to handle perhaps you should just go away and leave the rest of us in peace.
hey buddy,
lets just say. You open up your house for a party FOR FREE. You provide food, entertainment FOR FREE. And for a party to be successful, it needs people. And to attract people, it needs food/entertainment that PEOPLE want. Oh, don't forget you are providing it for FREE.
Lets say. Everyone likes beef burgers. MOST people like beef burgers. So naturally, u provide beef burgers. Oh, don't forget, you are providing it for FREE. Why? So more people will come to your party.
Then. Then some idiot, comes into YOUR party, and demands VEGGIE burgers. Why? Cause he is a vegetarian. He says that the party is biased towards vegans and that everywhere is filled with beef. YET. In some failed logic, he failed to notice that it is not HIS party and people are providing, food/entertainment for FREE yet he is making such a big fuss over what HE wants. Remember, its YOUR party! YOU are giving all of this for FREE! And some guy comes and complain that there are no veggie burgers and that the whole party should be meat free. Idiot don't you think? He can just go to another party where there are probably more veggie burgers YET he stays around and bitches to YOU about how stupid and biased your party is by providing beef burgers.
Now, my question to you lain, is how will YOU feel if you were the guy hosting the party? What will YOU feel about the guy? Yea, whatever YOU feel, is what the engadget writers feel.
P/S: if you think, for whatever reason, that the vegan guy is correct in this matter, then, i can only hope that you see the light one day.
Dear Lain, (or is it "Lame" or maybe "Bill"?)
Quit your bitching, go grab a WinMo phone, then cry yourself to sleep in the corner with your $300 Gateway Laptop and Pink Zune. We're moving on now.
Sincerely,
Engadget Fans (who remember why Engadget is here...)
Dear Engadget Writers,
Keep it coming!!!
Thank you,
Engadget Fans
Fuck Apple.
Here is the TIFF exploit explained
http://tinyurl.com/2ked79
Give up Apple........ Iphone is unlocked again
You give up, we'll lock it again tommorow
- Apple
PS: next update will include a new feature: if you try to hack it, it will display a crying animation and say "you don't love me and you want Apple to die and Microsoft to win".
We're sure that will deter those hardcore Apple fans.
We're not quite sure what to do with those who just wanted a good smart phone though.
Yeah right. but until then... you keep jackin off while day dreaming on licking Jobs' arse
Breaking: iPhone 1.1.2 on UK phones this november. America still pending on it... (Just you wait...)
If apple blocks or patches the update this will be PROOF of their rejection of the open-source iphone community. Disagree? Please reply.
Let's see, this entire process relies on a "TIFF exploit in Mobile Safari." Maybe, just maybe, Apple will (should) block exploits available through Mobile Safari because ithey represent a security risk to anyone using Mobile Safari?
Very true, they should also acknowledge this in some way (like the warning on the last update). I'm sorry, i was just ranting, and hadn't thought this through!
Why dont they develop custom firmware for the already hacked iPhones!!! Learn from the PSP community!
Well this all brings back memories of my Psion Series 5 back in 1999, it did support 3rd party apps and they looked good at first but there was always something special about official Psion apps. Official apps would ultimately be the ones you went back to.
On this note why doesn’t Apple just bring out a catalogue of official apps (for iPhone and iPod) developed by their devs, downloadable from iTunes costing a few £ each. I'd feel much more comfortable. 90% of the official apps are much better than 3rd parties and you've got the Apple apps updates through iTunes.
Don't get me wrong they should allow 3rd Party apps as well, but if Apple do their dev work properly official apps will appeal to a wider audience. I just think Apple is up their own bottom at the moment trying to claw back revenue, don’t be scared Apple if your as good as you say you are your apps will shine through (just don’t take the piss with the price, micro payment, means micro ‘small’).
Open it up, Apple. If someone screws up their iphone then they can hit the magic reset to factory defaults button. You CAN do that, right? It's not that hard.
And why does everyone give AT&T a pass on this whole ordeal!?
I hope Apple as soon as possible update the iPod Touch and iPhone to stop this.
Hacking something like this relies on teamwork. Besides, it would be questionable for someone to release a jailbreak program that does things to your iPhone/Touch without telling you what it actually does.
This is a non-issue, Apple would figure out what is going on anyway.
"If apple blocks or patches the update this will be PROOF of their rejection of the open-source iphone community."
No, this is actually a security vulnerability that should be patched. And I say that as a Touch owner really, really, really looking forward to a jailbreak.
All of this hoopla and attention should kick Apple into gear with an official SDK and 3rd party software solution though, if the rumors are true that something is in the works.
And even if it isn't, Apple will try to hand out more goodies to encourage people to update next time. So people can decide which is better- more Apple features, or more non-Apple features.
Don't click on his link, it's spam.
One of those super annoying get a free iPod Touch scams
Well it good news so far may have been a jail break as you call it for apps and stuff but I guess with the release of v1.1.2 those apps running days will be over. Nonetheless good work to the guys I am sure we get it running soon enough. In the meantime I just be putting more movies,music & games on my iPod / iTouch at http://www.ipodtunesdownloads.com
ok so what the deal with this whole jailbreak thing. just a couple questions please answer
1. if you jailbreak your ipod touch and void the warranty can you simply reverse this by restoring it or is that not how it works
2. Does doing this change your space on the ipod or just change the internal system.{how does it work]
3. how can i prevent my ipod from being bricked afterwards
$ and the last one is if you use the latest jailbreak via www.jailbreakme.com can you still use itunes or do you have to change something
SORRY THIS IS ALOT OF QUESTIONS BUT I WOULD BE VERY THANKFUL IF SOMEONE COULD ANSWER THEM FOR ME