Jump to content

IOS jailbreaking

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Dngrogan (talk | contribs) at 11:46, 16 June 2010 (→‎History: "This summer" changed to specific date, and a little text clean-up). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

File:IPhonePineapple.jpg
The original Pwnage pineapple, an easily recognizable boot logo for jailbroken iPhones. Many other versions of the pineapple have been made since, most in color, and all making fun of the Apple boot logo used on "jailed" (non-jailbroken) iPhones and iPod Touches

Jailbreaking is a process that allows iPad, iPhone and iPod Touch users to run any software code on their devices, as opposed to only that code authorized by Apple. Once jailbroken, iPhone users are able to download many extensions and themes previously unavailable through the App Store via unofficial installers such as Cydia, as well as illegally pirated apps. A jailbroken iPhone or iPod Touch is still able to use the App Store.

Jailbreaking is distinct from SIM unlocking, which, once completed, means that the mobile phone will accept any SIM without restriction on, for example, the country or network operator of origin. Jailbreaking, according to Apple, voids Apple's warranty on the device, although this is quickly remedied by restoring the device in iTunes.

Cydia founder Jay Freeman estimates that 8.5% of all iPods and iPhones are jailbroken.[1]

History

The first jailbreaking method was released on July 10, 2007, which initially was meant to provide a way to use custom ringtones.[2] On August 6, 2007 the first third-party game was released for the iPhone and iPod Touch.[3]

On October 10, 2007, about 3 months after the original iPhone was released, another method to jailbreak the iPhone was discovered.[4] Apple and hackers then engaged in a cat-and-mouse game to patch up security holes and to exploit them. Hackers eventually released a tool to permanently jailbreak iPhone OS 1.0.

Upon the release of iPhone OS 2.0, a hacker group called the iPhone Dev Team released a jailbreaking application named PwnageTool that used a graphical user interface.[5]

In January 2009, the iPhone Dev Team commenced work on jailbreaking the iPod Touch 2G.[6] redsn0w lite was the code name for a tethered (tethered meaning that it required constant operation of the iPod and if the power ran down, the jailbreak status was lost) iPod Touch 2G jailbreak, and in April, redsn0w 0.1 was released.[7]

On March 10, 2009, the untethered jailbreak was released for the iPod Touch 2G utilizing an exploit found by the Chronic Dev Team, and developed with the help of iPhone Dev Team member planetbeing. It was released as a rough patch, and was not implemented into a GUI until the next month, when planetbeing made redsn0w based on QuickPwn sources.

On March 17, 2009, Apple announced the release of iPhone OS 3.0.[8] Three months later, the iPhone Dev Team released PwnageTool 3.0 and redsn0w 0.7.2, which allowed users of the original iPhone, iPhone 3G, and iPod Touch running the OS 3.0 to be jailbroken on both Macs and PCs.[9]

On September 9, 2009, Apple released iPhone OS 3.1, again disabling the ability to jailbreak the device. Once again the dev team released a jailbreak for all devices (except for the iPod Touch 3rd Generation), called Pwnage Tool 3.1-3.[10]

On October 11, 2009, George Hotz, known under the alias Geohot, released the tool blackra1n, which allows the jailbreaking of all iPhones (up to the old 3GS) and iPod touch (up to 3G) devices running iPhone OS 3.1.2 (although the iPod Touch 3G is tethered; it must be plugged into a computer, and blackra1n must be run to boot the device every time it shuts down).

On October 25, 2009 Geohot released a newer version of blackra1n, RC2, an update that was able to tethered jailbreak the new iPhone 3GS the new iPod Touch 2G 8GB MC model. All of the tethered devices feature an updated boot ROM in which Apple had closed the 24kpwn loophole exploited by the iphone and chronic dev teams. Geohot also released blacksn0w an unlocking application for the iPhone which was capable of unlocking the newest baseband version, 5.11.07. Released on November 2, 2009, blackra1n RC3 is the current version, which also includes blacksn0w.

Greenpois0n, a jailbreak program not unlike PwnageTool is currently in development by the Chronic Dev Team. It uses a type of jailbreak said to be different in kind from any earlier program, which would thus be effective for some time before Apple manages to patch up the exploit. Greenpois0n will most likely be released concurrently with the release of the iPhone 4G and iPhone 4.0 OS, scheduled for June 24, 2010. This may may prevent Apple from patching up the vulnerability before the new OS and iPhone come out. Greenpois0n will be an untethered jailbreak for the iPod Touch models, iPhone models, and iPad models when it releases.

On February 2, 2010, Apple released iPhone OS 3.1.3, which once again disables jailbreaking. However, most iPhone and iPod Touch models can be downgraded. The iPhone 3GS and iPod Touch 3G can be downgraded only if the user saves the SHSH blob of their device with Cydia. Users can download the 3.1.2 firmware and then jailbreak with Blackra1n RC3.

On March 20, 2010, Wii Homebrew developer Comex released the video "Spirit" showing an iPod Touch 3rd generation booting up while jailbroken, or with an untethered jailbreak as opposed to the tethered jailbreak which George Hots' Blackra1n used. He announced it would be a userland jailbreak, a much lighter and easily patchable jailbreak not used since 1.X firmwares. He said it worked perfectly fine for the iPod touch 3G and the iPhone 3GS, and that it would probably work for the iPad too, when it is released.

On March 25, 2010, Geohot found another exploit to jailbreak iPod Touch 3G, and iPhone 3GS new bootroom 3.1.3+ untethered. He said that the jailbreak will be entirely software-based, and which was rumored later to be revealed as Limera1n, a rumored upcoming untethered jailbreak for all iPod Touch, iPhone, and iPad models.

On April 4, 2010 the day after the iPad Wi-Fi model was released, the Chonic Dev Team tweeted a picture of their iPad jailbroken.

On April 9, 2010, shortly after the Chronic Dev Team's announced jaikbreak, Geohot revealed another jailbreak for iPad Wi-Fi model, possibly untethered. The name of Geohot's jailbreak program was rumored to be Limera1n, and has no announced release date.

On May 2, 2010 shortly after the iPad 3G release date, Spirit was released. It works on all iPod touches, all iPhones, and all models of the iPad on 3.1.2-3.2, untethered. It is made similar to Blackra1n, with only a single button to jailbreak.

Firmware

Firmware Device Jailbreak available Circumstances
1.0 - 1.0.2 iPhone Yes (any)
1.1 - 1.1.5 iPhone and iPod Touch 1st Generation Yes (any)
2.0 - 2.1 iPhone, iPhone 3G, and iPod Touch 1st Generation Yes (any)
2.1.1 - 2.2.1 iPhone, iPhone 3G, iPod Touch 1st Generation, and iPod Touch 2nd Generation Yes (any)
3.0 - 3.0.1 iPhone, iPhone 3G, iPhone 3GS (old bootrom), iPod Touch 1st Generation, and iPod Touch 2nd Generation (non-MC model) Yes (any)
3.1 - 3.1.2 iPhone, iPhone 3G, iPhone 3GS, iPod Touch 1st Generation, iPod Touch 2nd Generation, and iPod Touch 3rd generation Yes (any)
3.1.3 iPhone, iPhone 3G, iPhone 3GS, iPod Touch 1st Generation, iPod Touch 2nd Generation, and iPod Touch 3rd generation Yes (any)
3.2 iPad Yes (any)
4.0 iPhone 3G Yes For beta version 1 and 4

Devices

Device Jailbreakable Firmware Jailbreakable Jailbreak first available Device release date
iPhone Yes 1.0 - 3.1.3 July 10, 2007[11] June 29, 2007
iPod Touch 1st Generation Yes 1.1 - 3.1.3 July 10, 2007[11] September 5, 2007
iPhone 3G Yes 2.0 - 3.1.3 July 20, 2008[12] July 11, 2008
iPod Touch 2nd Generation (non-MC model) Yes[13] 2.1.1 - 3.1.3 March 11, 2009 September 9, 2008
iPhone 3GS (except iBoot-359.3.2 on 3.13 firmware) Yes 3.0 - 3.1.3 July 3, 2009[14] June 17, 2009
iPhone 3GS (with iBoot-359.3.2) Yes 3.0 - 3.1.3 November 4, 2009 June 19, 2009
iPod Touch 2nd generation (8GB MC model) Yes 3.1 - 3.1.3 November 2, 2009[15] September 9, 2009
iPod Touch 3rd generation (32 and 64GB models) Yes 3.1 - 3.1.3 October 11, 2009[15] September 9, 2009
iPad (Wi-Fi model) Yes 3.2 April 4, 2010 April 3, 2010
iPad (3G model) Yes 3.2 May 2, 2010 April 30, 2010

Software used

Old (2.0 - 2.2.1)

Software Name Platform Hardware Firmware Publisher
QuickPwn (replaced by redsn0w) Windows, Mac and Linux iPhone, iPod Touch 1st Gen, iPhone 3G 2.0 - 2.2.1 iPhone Dev Team[16]
redsn0w 0.3 Windows, Mac and Linux iPod Touch 2nd Gen 2.2.1 iPhone Dev Team and Chronic Dev Team[17]
redTool Windows iPod Touch 2nd Gen 2.2.1 Crizh4x[18]
Quick Freedom Windows iPod Touch 2nd Gen 2.2.1 Dancool999[19]
Pwnage Tool 2.0 Mac iPod touch 1st gen, iPhone 1st gen, iPhone 3G 2.0 iPhone Dev Team
Pwnage Tool 2.1 Mac iPod touch 1st gen, iPhone 1st gen, iPhone 3G 2.1 - 2.1.1 iPhone Dev Team
Pwnage Tool 2.2 Mac iPod touch 1st gen, iPhone 1st gen, iPhone 3G 2.2 - 2.2.1 iPhone Dev Team

Current (3.0 - current)

Software Name Platform Hardware Firmware Publisher
PwnageTool 3.0 Mac iPhone, iPod Touch 1st Gen, iPhone 3G 3.0 - 3.0.1 iPhone Dev Team[16]
PwnageTool Mac iPod Touch 1st Gen, iPod Touch 2nd Gen, iPhone, iPhone 3G, iPhone 3GS 3.1 - 3.1.2 (3.1.4), 3.1.3 (3.1.5) (with older boot ROM) iPhone Dev Team[16]
redsn0w Windows, Mac and Linux iPhone, iPod Touch 1st Gen, iPhone 3G, iPod Touch 2nd Gen, & iPhone 3GS 3.0 - 3.0.1 (0.8), 3.1.2 (0.9), 3.1.3 (0.9.4) (with older boot ROM) iPhone Dev Team [17]
purplera1n Windows and Mac[20] iPhone 3GS 3.0[21] Geohot [22]
blackra1n Windows and Mac iPhone (all), iPod Touch (all) 3.1.1 - 3.1.2 Geohot
sn0wbreeze Windows iPhone (all), iPod Touch (1G & 2G) 3.1.2 - 3.1.3 (with older boot ROM) iH8sn0w
Spirit (iPhone OS jailbreak) Windows, Mac and Linux iPhone (all), iPod Touch (all), iPad (all) 3.1.2 - 3.2 (with current boot ROM) Comex

Viruses/worms

The first iPhone worm appeared in early November 2009, created by 21-year-old Australian technical college student Ashley Towns of Wollongong. He told Australian media that he created the worm to raise awareness of security issues.[23] "When people jailbreak their phone, it allows them to install a service on their phone called SSH... Generally you should always change the password after setting up an iPhone as all iPhones use the same password by default. This worm exploits people's tendency to not change the default password, changing their iphones wallpaper to Rick Astley. Although the worm is harmless, the source code, initially released to the public, can become the basis for more malicious code. This virus was called iKee. As the source code was released for the virus, many [which?] new viruses have appeared although these ones are more harmful.[citation needed]

On 22 November 2009, F-Secure reported on a new malicious worm compromising bank transactions from jailbroken phones in the Netherlands.[24][25]

The legality of jailbreaking an iPod or iPhone remains unclear, particularly in the context of the Digital Millennium Copyright Act. As part of the 2009 DMCA rulemaking, the Electronic Frontier Foundation asked the US Copyright Office to recognize an exemption to the DMCA to permit jailbreaking in order to allow iPhone owners to use their phones with applications that are not available from Apple's store.[26] In response to this, Apple filed comments opposing this exemption and indicating that they do consider jailbreaking to be a violation of copyright (and by implication prosecutable under the DMCA). A ruling on this proposed exemption has not yet been made, but a decision is expected sometime later in 2010.

iPhone Dev Team

The iPhone Dev Team is a group of hackers in the iPhone OS community who have developed many jailbreaking and unlocking applications for the iPhone and iPod Touch devices, with the ability to sidestep the limitations placed on devices by the manufacturer—allowing for activities such as deep customization and SIM unlocking.

See also

References

  1. ^ "Cydia App Store Reports Huge Traffic Surge". iPhone Savior. Retrieved 2010-04-10.
  2. ^ Ricker, Thomas (2007-07-10). "iPhone Hackers: "we have owned the filesystem"". Engadget. Retrieved 2009-07-17.
  3. ^ Topolsky, Joshua (2007-08-06). "First third-party "game" app appears for iPhone". Engadget. Retrieved 2009-07-17.
  4. ^ Wilson, Ben (2007-10-10). "Official iPhone 1.1.1 jailbreak released with easy-to-follow instructions; does not require TIFF exploit". CNET.com. Retrieved 2009-11-10.
  5. ^ "PwnageTool 2.0 (2.0.1) to JailBreak Unlock iPhone 3G or 2.0 and iPod Touch Free Download". My Digital Life. 2008-07-22. Retrieved 2009-11-10.
  6. ^ "Dev-Team Blog - Thermonuclear pop!". Blog.iphone-dev.org. Retrieved 2009-07-17.
  7. ^ "redsn0w in june". iPhone Dev Team. Retrieved 2009-11-10.
  8. ^ Topolsky, Joshua (2009-03-17). "Live from Apple's iPhone OS 3.0 preview event". Engadget. Retrieved 2009-07-17.
  9. ^ "Dev-Team Blog - trois, drei, три, három!". iPhone Dev Team. Retrieved 2009-06-19.
  10. ^ Everything You Wanted to Know About iPhone 3.1 But Were Afraid to Ask
  11. ^ a b Wilson, Ben (2007-10-10). "Official iPhone 1.1.1 jailbreak released with easy-to-follow instructions; does not require TIFF exploit | iPhone Atlas - CNET Reviews". CNet. Retrieved 2009-07-17.
  12. ^ Wilson, Ben (2008-07-20). "Jailbreak for iPhone 3G released: how to use | iPhone Atlas - CNET Reviews". CNet. Retrieved 2009-07-17.
  13. ^ "Rough Untethered Released « Chronic Dev Blog". Chronic-dev.org. 2009-03-11. Retrieved 2010-04-10.
  14. ^ "On the iPhone: I make it ra1n". Iphonejtag.blogspot.com. 2009-07-03. Retrieved 2009-07-17.
  15. ^ a b "Blackra1n Jailbreak". Retrieved 2009-10-11.
  16. ^ a b c "Dev-Team Blog - Close the stable door!". Blog.iphone-dev.org. Retrieved 2010-04-10.
  17. ^ a b "3G unlock - official redsn0w devteam site". Redsn0w.com. Retrieved 2010-04-10.
  18. ^ http://www.redtool-dev.org
  19. ^ "QuickFreedom". QuickFreedom. 2009-06-30. Retrieved 2010-04-10.
  20. ^ "On the iPhone: purplera1n...for mac". Iphonejtag.blogspot.com. 2009-07-05. Retrieved 2009-07-17.
  21. ^ "purplera1in and 3.0.1". blogspot. 2009-08-03. Retrieved 2009-08-03.
  22. ^ "On the iPhone: I make it ra1n". Iphonejtag.blogspot.com. 2009-07-03. Retrieved 2010-04-10.
  23. ^ Australian admits creating first iPhone virus, Brigid Andersen, ABC Online, 2009-11-09. Retrieved 2009-11-10.
  24. ^ "New iPhone worm can act like botnet say experts". BBC News. 2009-11-23. Retrieved 2010-04-10.
  25. ^ "Malicious iPhone Worm - F-Secure Weblog : News from the Lab". F-secure.com. 2009-11-22. Retrieved 2010-04-10.
  26. ^ "Apple Says iPhone Jailbreaking is Illegal | Electronic Frontier Foundation". Electronic Frontier Foundation. 2009-02-12. Retrieved 2009-07-17.