Exploit

Hats off to the iPhone Dev Team!

In firmware 2.1.1, only in the iPod Touch 2G firmware. there is a little something that apple lefy behind that they probably should not have. It was most likely for diagnostics, but was not fixed until 2.2, but no big deal there because you can load a 2.1 iBEC over DFU and use that.

For the past few days I have been trying to mess witg it, but I am not able to really look into it because I have no other exploit to, for example, read forbidden areas of memory. Also, it has some hate for naked binaries being passed to it apparently, and i do not know the wrapper format.

Good for the JB community, dev team found a way to…
1. pass the new bootrom sigcheck
2. be able to craft their code in a way that the specific thing will execute it

Well, for the sake of being courtious to devteam, I will wait for RedSn0w releasr to give more info on this bug. I will also look into how they were able to actually run unsigned code and pass bootrom sigcheck with this bug.

Again, major props to devteam :)

Keep an eye on http://redsn0w.com and the devteam blog.

62 Responses to “Exploit”

  1. deincuk says:

    umm… well. you see. i don't there ever wa a time more appropriate to spread a little wootsauce than now. >:)

    WOOOOOOTSSAAAUCCEEEE ALL OVER MY PUSSSSYYYY

    and the pickles

  2. Murphman12 says:

    No they found a exploit so jb could Take a matter of DAYS

  3. Kafjk says:

    Sold both of my Touch b4 christmas, now i can't buy a 32gb from stores cause its sold out everywhere because of christmas sales…AAAHHHHH

    Anyway, goodjob and THANKS!!!!!

  4. Michael says:

    Great Job!

  5. muncher says:

    devteam kicks ass! i cant wait for this thing

  6. capi says:

    Jailbreak is fucken shit!!!

    Dev team – trestles

    And you are all provincial persons

  7. Shujat says:

    thank you so muchhhhhhhhhhhhhhh i really really appriciate your help guys…

  8. sOwL says:

    actually thats what i understand. If this works, we will be able to update officially because the exploit is low level, so it won't be changed with a software update. If thats the case, that will be the best jailbreak ever!

  9. David says:

    Couldn't find somewhere more relivant to post than here so Here we go:

    Simple, Why don't you work with the Devteam? Surely together you'd get through things much faster.

    Just a Thought.

  10. David says:

    Couldn't find somewhere more relivant to post than here so Here we go:

    Simple, Why don't you work with the Devteam? Surely together you'd get through things much faster.

    Just a Thought.

  11. imreadyimraedyimreadyimready says:

    I CANT WAIT YOU GUYS KEEP AT IT THIS IS AWSOME PLEASE UPDATED ASAP SO WE CAN GET CURRENT INFO ON THE MATTER

  12. [...] Earlier today, the iPhone Dev-Team released a rather cryptic message. It seems that they have found a way to run unsigned code on the iPod Touch 2G. This is extremely good news and await patiently for a public release of the tool and exploit – perhaps I don’t need to buy a Mac after all! There is some more information about the exploit at the Chronic Dev Blog. [...]

Leave a Reply