Jump to content

iOS jailbreaking

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by The8thbit (talk | contribs) at 04:43, 2 July 2010 (changed "making fun of" to "parodying", as "making fun of" sounds more charged and less elegant.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

File:IPhonePineapple.jpg
The original Pwnage pineapple, an easily recognizable boot logo for jailbroken iPhones. Many other versions of the pineapple have been made since, most in color, and parodying the Apple boot logo used on "jailed" (non-jailbroken) iPhones and iPod Touches.

Jailbreaking is a process that allows iPad, iPhone and iPod Touch users to run any software code on their devices, as opposed to only that code authorized by Apple, which is essentially unlocking the operating system. Once jailbroken, iPhone users are able to download many extensions and themes previously unavailable through the App Store via unofficial installers such as Cydia and Rock Your Phone, as well as illegally pirated apps. A jailbroken iPad, iPhone or iPod Touch is still able to use the App Store and iTunes.

Jailbreaking is distinct from SIM unlocking, which, once completed, means that the mobile phone will accept any SIM without restriction on, for example, the country or network operator of origin. Jailbreaking, according to Apple, voids Apple's warranty on the device, although this is quickly remedied by restoring the device in iTunes.

Cydia founder Jay Freeman estimates that over 10% of all iPhones are jailbroken.[1]

History

2007

The first jailbreaking method was released on July 10, 2007.[2] On August 6, 2007 the first third-party game was released for the iPhone and iPod Touch.[3]

On October 10, 2007, about 3 months after the original iPhone was released, another method to jailbreak the iPhone was discovered.[4] Apple and hackers then engaged in a cat and mouse game to patch up security holes and to exploit them.

2008

Upon the nearing release of iOS 2.0, a hacker group called the iPhone Dev Team released a jailbreaking application named PwnageTool that used a graphical user interface.[5] It is capable of creating custom firmwares, to which devices can restore to.

2009

In January 2009, the iPhone Dev Team commenced work on jailbreaking the iPod Touch 2G.[6] "redsn0w" was the code name for a tethered (tethered meaning that it had to be connected to a computer in order to reboot) iPod Touch 2G jailbreak, and in April, redsn0w lite 0.1 was released. (The release was labeled "lite" because the jailbreak was tethered.)

On March 10, 2009, the untethered jailbreak was released for the iPod Touch 2G utilizing a vulnerability found by members of the Chronic Dev Team and the iPhone Dev Team, and developed with the help of iPhone Dev Team member planetbeing. It was released as a rough patch, and was not implemented into a GUI until the next month, when planetbeing made redsn0w based on QuickPwn sources.

On March 17, 2009, Apple announced the release of iPhone OS 3.0.[7] Three months later, the iPhone Dev Team released PwnageTool 3.0 and redsn0w 0.7.2, which allowed users of the original iPhone, iPhone 3G, and iPod Touch running the OS 3.0 to be jailbroken on both Macs and PCs.[8]

On September 9, 2009, Apple released iPhone OS 3.1, again disabling the ability to jailbreak the device. The iPhone Dev Team released PwnageTool 3.1-3 to jailbreak for all devices (except the iPod Touch 3rd Generation).[9]

On October 11, 2009, George Hotz, known under the alias Geohot, released the tool blackra1n, which allows the jailbreaking of all iPhones (up to the old 3GS) and iPod touch (up to 3G) devices running iPhone OS 3.1.2 (although the iPod Touch 3G is tethered; it must be plugged into a computer, and blackra1n must be run to boot the device every time it shuts down).

On October 25, 2009 Geohot released a newer version of blackra1n, RC2, an update that was able to tethered jailbreak the new iPhone 3GS the new iPod Touch 2G 8GB MC model. All of the tethered devices feature an updated boot ROM in which Apple had closed the 24kpwn loophole exploited by the iphone and chronic dev teams. Geohot also released "blacksn0w", an unlocking application for the iPhone which was capable of unlocking the newest baseband version, 5.11.07. Released on November 2, 2009, blackra1n RC3 is the current version, which also includes blacksn0w.

2010

On February 2, 2010, Apple released iPhone OS 3.1.3, which once again disables jailbreaking. However, most iPhone and iPod Touch models can be downgraded. The iPhone 3GS and iPod Touch 3G can be downgraded only if the user saves the SHSH blob of their device with Cydia. Users can download the 3.1.2 firmware and then jailbreak with Blackra1n RC3.

On March 20, 2010, Wii Homebrew developer Comex released the video "Spirit" showing an iPod Touch 3rd generation booting up while jailbroken, or with an untethered jailbreak as opposed to the tethered jailbreak which George Hots' Blackra1n used. He announced it would be a userland jailbreak, a much lighter and easily patchable jailbreak not used since 1.X firmwares. He said it worked perfectly fine for the iPod touch 3G and the iPhone 3GS, and that it would probably work for the iPad too, when it is released.

On March 25, 2010, Geohot found another exploit to jailbreak iPod Touch 3G, and iPhone 3GS new bootroom 3.1.3+ untethered. He said that the jailbreak will be entirely software-based, and which was rumored later to be revealed as Limera1n (to be released here), the website has a green/lime rain drop on the screen (possibly becoming the link to download the Limera1n application) it is a rumored upcoming untethered jailbreak for all iPod Touch, iPhone, and iPad models.

On April 4, 2010 the day after the iPad Wi-Fi model was released, the Chronic Dev Team tweeted a picture of their iPad jailbroken.

On April 9, 2010, shortly after the Chronic Dev Team's announced jailbreak, Geohot revealed another jailbreak for iPad Wi-Fi model, possibly untethered. The name of Geohot's jailbreak program was rumored to be Limera1n, and has no announced release date.

On May 2, 2010 shortly after the iPad 3G release date, Spirit was released. It works on all iPod touches, all iPhones, and all models of the iPad on 3.1.2-3.2, untethered. It is made similar to Blackra1n, with only a single button to jailbreak.

On June 21, 2010 hours after iOS4 was released, redsn0w 0.9.5b5-3 was released by the iPhone Dev Team for iPod Touch 2G(Non-MC Models) and iPhone3G(this also hacktivates iPhone3G).

On June 22, 2010 the day after iOS4 was released, PwnageTool 4.0 was released for iPhone3G, iPhone3GS (Old Bootrom), and iPod Touch 2G (Non-MC Models).

On June 22, 2010 Geohot revealed that he found a bootrom exploit which will jailbreak all current iDevices forever (including iPhone 4).

On June 24, 2010 shortly after iOS4 was released, sn0wbreeze 1.6.1 was released for iPhone3G, iPhone3GS (Old Bootrom), and iPod Touch 2G (Non-MC Models).

On June 26, 2010 a userland jailbreak for the iPhone 4 was developed, but it cannot be released to the public until the Apple proprietary code it uses is removed.

Devices

Device Jailbreakable Firmware Jailbreakable Jailbreak first available Device release date Latest firmware jailbreak available
iPhone Yes 1.0 - 3.1.3 July 10, 2007[10] June 29, 2007 Yes (3.1.3)
iPod Touch 1st Generation Yes 1.1 - 3.1.3 October 10, 2007 September 5, 2007 Yes (3.1.3)
iPhone 3G Yes 2.0 - 4.0 July 20, 2008[11] July 11, 2008 Yes (4.0)
iPod Touch 2nd Generation (non-MC model) Yes 2.1.1 - 4.0 March 11, 2009[12] September 9, 2008 Yes (4.0)
iPhone 3GS (Old Bootrom iBoot-359.3) Yes 3.0 - 4.0 July 3, 2009[13] June 19, 2009 Yes (If running or downgradeable to an older iOS) (4.0)
iPod Touch 2nd generation (8GB MC model) Yes 3.1 - 3.1.3 November 2, 2009[14] September 9, 2009 No (not yet released) (4.0)
iPhone 3GS (New Bootrom iBoot-359.3.2) Yes 3.1.2 - 3.1.3 November 4, 2009 October 4, 2009 No (not yet released) (4.0)
iPod Touch 3rd generation (32 and 64GB models) Yes 3.1-3.1.3 October 11, 2009[14] September 9, 2009 No (not yet released) (4.0)
iPad (Wi-Fi model) Yes 3.2 April 4, 2010 April 3, 2010 Yes (3.2)
iPad (3G model) Yes 3.2 May 2, 2010 April 30, 2010 Yes (3.2)
iPhone 4 Yes (not released to public due to use of Apple's proprietary code) [15][16] 4.0 Jailbreak not available June 24, 2010 No (not yet released) (4.0)

Software used

Old (2.0 - 3.2)

Software Name Release Date Platform Hardware Firmware Publisher
QuickPwn August 2008 Windows, Mac OS X and Linux iPhone 2G/3G, iPod Touch 1G 2.0 - 2.2.1 iPhone Dev Team[17]
redsn0w 0.3 April 12, 2009 Windows, Mac OS X and Linux iPod Touch 2nd Gen[sw 1] 2.2.1 iPhone Dev Team[18]
redTool Windows iPod Touch 2nd Gen 2.2.1 Crizh4x[19]
Quick Freedom Windows iPod Touch 2nd Gen 2.2.1 Dancool999[20]
PwnageTool 2.0 July 19, 2008 Mac OS X iPhone 2G/3G, iPod Touch 1G 2.0 iPhone Dev Team
PwnageTool 2.1 September 13, 2008 Mac OS X iPhone 2G/3G, iPod Touch 1G 2.1 - 2.1.1 iPhone Dev Team
PwnageTool 2.2 November 21, 2008 Mac OS X iPhone 2G/3G, iPod Touch 1G 2.2 - 2.2.1 iPhone Dev Team
PwnageTool 3.0 June 19, 2009 Mac OS X iPhone 2G/3G, iPod Touch 1G 3.0 - 3.0.1 iPhone Dev Team[17]
purplera1n July 2009 Windows and Mac OS X[21] iPhone 2G/3G/3GS, iPod Touch 1G/2G 3.0[22] Geohot [23]
PwnageTool 3.1.4 October 13, 2009 Mac OS X iPhone 2G/3G/3GS, iPod Touch 1G/2G 3.1 - 3.1.2 iPhone Dev Team[17]
blackra1n RC1 October 11, 2009 Windows and Mac OS X iPhone 2G/3G/3GS[sw 2], iPod Touch 1G/2G[sw 2]/3G[sw 1] 3.1.1 - 3.1.2 Geohot
sn0wbreeze Windows iPhone 2G/3G/3GS[sw 3], iPod Touch 1G/2G[sw 3] 3.1.2 - 4.0 iH8sn0w
PwnageTool 3.1.5 February 7, 2010 Mac OS X iPhone 2G/3G/3GS[sw 3], iPod Touch 1G/2G[sw 3] 3.1.3 iPhone Dev Team[17]
Spirit May 2010 Windows, Mac OS X and Linux iPhone (all), iPod Touch (all), iPad (all) 3.1.2 - 3.2 Comex

Current (4.0)

Software Name Platform Hardware Firmware Publisher
redsn0w 0.9.5b5-5 Windows, Mac OS X (x86)[24][25] iPhone 3G, iPod Touch 2G (non MC-Models)[sw 3] 4.0 iPhone Dev Team[18]
PwnageTool 4.01 Mac OS X iPhone 3G/3GS[sw 3], iPod Touch 2nd Gen (non MC-Models)[sw 3] 4.0 iPhone Dev Team[17]
sn0wbreeze 1.6.2 Windows iPhone 3G/3GS[sw 3], iPod Touch 2nd Gen (non MC-Models)[sw 3] 4.0 iH8sn0w
  1. ^ a b Requires the device to be connected to the computer upon rebooting the device.
  2. ^ a b Newer units only had a tethered jailbreak supported.
  3. ^ a b c d e f g h i Newer units were not supported due to changes in the read-only memory.

Viruses/worms

The first iPhone worm appeared in early November 2009, created by 21-year-old Australian technical college student Ashley Towns of Wollongong. He told Australian media that he created the worm to raise awareness of security issues.[26] "When people jailbreak their phone, it allows them to install a service on their phone called SSH... Generally you should always change the password after setting up an iPhone as all iPhones use the same password by default. This worm exploits people's tendency to not change the default password, changing their iphones wallpaper to Rick Astley. Although the worm is harmless, the source code, initially released to the public, can become the basis for more malicious code. This virus was called iKee. As the source code was released for the virus, new viruses may appear although these ones will be more harmful.[citation needed]

On 22 November 2009, F-Secure reported on a new malicious worm compromising bank transactions from jailbroken phones in the Netherlands.[27][28]

The legality of jailbreaking an iPod or iPhone remains unclear, particularly in the context of the Digital Millennium Copyright Act. As part of the 2009 DMCA rulemaking, the Electronic Frontier Foundation asked the US Copyright Office to recognize an exemption to the DMCA to permit jailbreaking in order to allow iPhone owners to use their phones with applications that are not available from Apple's store.[29] In response to this, Apple filed comments opposing this exemption and indicating that they do consider jailbreaking to be a violation of copyright (and by implication prosecutable under the DMCA). A ruling on this proposed exemption has not yet been made, but a decision is expected sometime later in 2010.

Tim Wu, a professor at Columbia Law School, has argued that jailbreaking is "legal, ethical, and just plain fun."[30] Wu cites an explicit exemption issued by the Librarian of Congress in 2006 for personal unlocking, which notes that locks "are used by wireless carriers to limit the ability of subscribers to switch to other carriers, a business decision that has nothing whatsoever to do with the interests protected by copyright" and thus do not implicate the DMCA.[31] Wu does not claim that this exemption applies to those who help others unlock a device or "traffic" in software to do so.

iPhone Dev Team

Main article: iPhone Dev Team

The iPhone Dev Team is a group of hackers in the iOS (previously iPhone OS) community who have developed many jailbreaking and unlocking applications not authorized by Apple Inc for the iPhone and iPod Touch devices, with the ability to sidestep the limitations placed on devices by the manufacturer—allowing for activities such as deep customization and SIM unlocking. The group and their tools have become emblematic for these activities, which are termed jailbreak and SIM unlocking respectively, to the extent that the Electronic Frontier Foundation have made them the primary example used in their petition to create a DMCA anti-circumvention exemption for jailbreaking and Apple executive Greg Joswiak (Vice President iPhone Product Marketing) has quoted them in his countering comment to the same petition.

The Dev Team's tools have been used on at least 1.6 million devices worldwide.[citation needed]

See also

References

  1. ^ Freeman, Jay. "Caching Apple's Signature Server". saurik.com. Retrieved 2010-06-30.
  2. ^ Ricker, Thomas (2007-07-10). "iPhone Hackers: "we have owned the filesystem"". Engadget. Retrieved 2009-07-17.
  3. ^ Topolsky, Joshua (2007-08-06). "First third-party "game" app appears for iPhone". Engadget. Retrieved 2009-07-17.
  4. ^ Wilson, Ben (2007-10-10). "Official iPhone 1.1.1 jailbreak released with easy-to-follow instructions; does not require TIFF exploit". CNET.com. Retrieved 2009-11-10.
  5. ^ "PwnageTool 2.0 (2.0.1) to JailBreak Unlock iPhone 3G or 2.0 and iPod Touch Free Download". My Digital Life. 2008-07-22. Retrieved 2009-11-10.
  6. ^ "Dev-Team Blog - Thermonuclear pop!". Blog.iphone-dev.org. Retrieved 2009-07-17.
  7. ^ Topolsky, Joshua (2009-03-17). "Live from Apple's iPhone OS 3.0 preview event". Engadget. Retrieved 2009-07-17.
  8. ^ "Dev-Team Blog - trois, drei, три, három!". iPhone Dev Team. Retrieved 2009-06-19.
  9. ^ Everything You Wanted to Know About iPhone 3.1 But Were Afraid to Ask
  10. ^ Wilson, Ben (2007-10-10). "Official iPhone 1.1.1 jailbreak released with easy-to-follow instructions; does not requir bulmpkine TIFF exploit | iPhone Atlas - CNET Reviews". CNet. Retrieved 2009-07-17.
  11. ^ Wilson, Ben (2008-07-20). "Jailbreak for iPhone 3G released: how to use | iPhone Atlas - CNET Reviews". CNet. Retrieved 2009-07-17.
  12. ^ "Rough Untethered Released « Chronic Dev Blog". Chronic-dev.org. 2009-03-11. Retrieved 2010-04-10.
  13. ^ "Musclenerd". twitter.com. 2010-06-26. Retrieved 2010-06-26.
  14. ^ a b "Blackra1n Jailbreak". Retrieved 2009-10-11.
  15. ^ "iPhone 4 Jailbroken Already !". 2010-07-27.
  16. ^ "p0sixninja reply to i_Enthusiast". Twitter. 2010-07-26.
  17. ^ a b c d e "Dev-Team Blog - Close the stable door!". Blog.iphone-dev.org. Retrieved 2010-04-10.
  18. ^ a b "3G unlock - official redsn0w devteam site". Redsn0w.com. Retrieved 2010-04-10.
  19. ^ http://www.redtool-dev.org
  20. ^ "QuickFreedom". QuickFreedom. 2009-06-30. Retrieved 2010-04-10.
  21. ^ "On the iPhone: purplera1n...for mac". Iphonejtag.blogspot.com. 2009-07-05. Retrieved 2009-07-17.
  22. ^ "purplera1in and 3.0.1". blogspot. 2009-08-03. Retrieved 2009-08-03.
  23. ^ "On the iPhone: I make it ra1n". Iphonejtag.blogspot.com. 2009-07-03. Retrieved 2010-04-10.
  24. ^ "Jailbreak iPhone 3G on iOS 4 With RedSn0w". http://www.iphonedownloadblog.com/. {{cite web}}: External link in |publisher= (help)
  25. ^ "all four one!". The iPhone Dev Team.
  26. ^ Australian admits creating first iPhone virus, Brigid Andersen, ABC Online, 2009-11-09. Retrieved 2009-11-10.
  27. ^ "New iPhone worm can act like botnet say experts". BBC News. 2009-11-23. Retrieved 2010-04-10.
  28. ^ "Malicious iPhone Worm - F-Secure Weblog : News from the Lab". F-secure.com. 2009-11-22. Retrieved 2010-04-10.
  29. ^ "Apple Says iPhone Jailbreaking is Illegal | Electronic Frontier Foundation". Electronic Frontier Foundation. 2009-02-12. Retrieved 2009-07-17.
  30. ^ Tim Wu. October 4, 2007. "The iPhone Freedom Fighters." Slate.
  31. ^ [1]
Retrieved from "https://en.wikipedia.org/enwiki/w/index.php?title=IOS_jailbreaking&oldid=371323688"