« Fake
Clarification »

Exploit

Hats off to the iPhone Dev Team!

In firmware 2.1.1, only in the iPod Touch 2G firmware. there is a little something that apple lefy behind that they probably should not have. It was most likely for diagnostics, but was not fixed until 2.2, but no big deal there because you can load a 2.1 iBEC over DFU and use that.

For the past few days I have been trying to mess witg it, but I am not able to really look into it because I have no other exploit to, for example, read forbidden areas of memory. Also, it has some hate for naked binaries being passed to it apparently, and i do not know the wrapper format.

Good for the JB community, dev team found a way to…
1. pass the new bootrom sigcheck
2. be able to craft their code in a way that the specific thing will execute it

Well, for the sake of being courtious to devteam, I will wait for RedSn0w releasr to give more info on this bug. I will also look into how they were able to actually run unsigned code and pass bootrom sigcheck with this bug.

Again, major props to devteam :)

Keep an eye on http://redsn0w.com and the devteam blog.

This entry was posted on Wednesday, January 14th, 2009 at 11:09 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Viewing 25 Comments