iPod/iPhone 3.1.X exploit proof

People have been accusing us of stealing geohot's exploit. While he found it independently (we don't know when), we certainly did not steal the exploit, but rather find it ourselves (pod2g/westbaer). Whether we or geohot discovered it first we do not know. All we can do is prove we have known about it for quite some time. The following text and it's hash were posted on July the 11th on various pastebins, which proves we were aware of the existince of the particular exploit for ~3 months.

Proof

Send a file and then usb_control_msg(0x21, 2, 0, 0, 0, 1000); to copy it to 0x0. To exploit, send a decrypted version of whatever is running (iboot / ibec / ibss / etc.) with whatever you want patched. This relies on a memcpy(); to an unchecked location.

Hash it for example here. Together with the pastebins, this hash proves that we have written the exploit description on the mentioned date.

SHA1 21d07b57edacb050719a3403ddf0cb3d39840a40
as posted here, here and here