As easy as it was on every release - iOS15 jailbroken in minutes

[williamcll]

An exploit with safari's hyperlink have allowed the famed Pangu Jailbreaking team to gain elevated access to the new iphone 13 Pro and its iOS 15. Winning the team a decent award of $300,000 USD.

 

Quotes

Quote

According to the contest website, teams had to allow the iPhone 13 Pro to browse a remote URL, to allow the contestants a chance to "control the phone system." As part of the challenge, contestants had to bypass "PAC mitigation," with additional prizes offered for a sandbox escape or a jailbreak. Three tiers of prizes were associated with the iPhone 13 Pro, with remote code execution winning $120,000, while RCE with a sandbox escape securing the contestant $180,000. For the remote jailbreak, the prize is $300,000. The iPhone is only one of a number of targets in the overall competition, covering both Apple devices and products from other companies. Other targets include RCE attacks against Safari running on both Intel and Apple Silicon MacBook Pro models, as well as a Synology NAS, a Xiaomi Mi 11 smartphone, and Windows 10 and Google Chrome running on notebooks, among others.

 

My thoughts

Sadly for the rest of us, this exploit won't be publicized so everyone's gotta wait a bit longer for a iOS15 JB but it is a proof that a working jailbreak do exist for the newest iphones. What annoys me however is that many jailbroken apps are not compatible with consecutive updates at all.

 

Sources

https://appleinsider.com/articles/21/10/16/iphone-13-pro-remote-jailbreak-earns-researchers-300000-in-hacking-contest

https://www.ithome.com/0/580/926.htm

[leadeater]

6 minutes ago, williamcll said:

safari's

Web browsers, always the weakest link (I include the muppet using the browser in that heh)

 

Also damn, not a bad days pay.

[Lightwreather]

Huh, nice

Tho, tbf, The numbers of those who actually jailbreak have plummeted. (But I could be wrong)

[Sauron]

3 minutes ago, J-from-Nucleon said:

Huh, nice

Tho, tbf, The numbers of those who actually jailbreak have plummeted. (But I could be wrong)

If you're someone who would like the benefits of jailbreaking I see little reason to go for an iphone to begin with

[Arika]

2 minutes ago, leadeater said:

Also damn, not a bad days pay.

everything is an eSport these days. Even 5th place gets $30k

[williamcll]

1 minute ago, J-from-Nucleon said:

Huh, nice

Tho, tbf, The numbers of those who actually jailbreak have plummeted. (But I could be wron

My guess is just that the people who wanted phones with elevated access moved to android, where rooting can be passed on on every OS update and can be applied on most phones. That and rooted apps also work on newer rooted android releases unlike iOS.

[Video Beagle]

Man, I'd love to understand all of this.....how it's done, what is done...it's just such a beyond my knowledge area thing.

[leadeater]

1 hour ago, Video Beagle said:

Man, I'd love to understand all of this.....how it's done, what is done...it's just such a beyond my knowledge area thing.

Footage at the event of the team hard at work

 

[TVwazhere]

2 hours ago, Video Beagle said:

Man, I'd love to understand all of this.....how it's done, what is done...it's just such a beyond my knowledge area thing.

[Spindel]

4 hours ago, J-from-Nucleon said:

Huh, nice

Tho, tbf, The numbers of those who actually jailbreak have plummeted. (But I could be wrong)

I would speculate that JBing of iPhones have plummeted a lot because of apps moving to freemium/subscription model instead of a one time purchase. 

 

Because let's not kid ourselves, at least 10 years ago almost everyone (that I know at least) that JBed their iPhone did it because not having to pay for apps. 

[StDragon]

5 hours ago, leadeater said:

Footage at the event of the team hard at work

Apple. What a bunch of slackers. The fact the OS was 0wned this quickly just goes to show how infectively a near infinite amount of money can help. This isn't a funding problem; it's a leadership / management issue at Apple.

[RejZoR]

18 hours ago, williamcll said:

My guess is just that the people who wanted phones with elevated access moved to android, where rooting can be passed on on every OS update and can be applied on most phones. That and rooted apps also work on newer rooted android releases unlike iOS.

Good luck with movie streaming and banking apps. They are notorious for whining overroot. Hell, even if your phone is not rooted, just with unlocked bootloader they'll refuse to work. Been there, seen that. And I don't have time to jerk around with stupid Magisk every time to hide things from apps.

[Master Disaster]

19 hours ago, leadeater said:

Footage at the event of the team hard at work

 

I didn't realise freddy mercury was also a magician.

 

20 hours ago, Video Beagle said:

Man, I'd love to understand all of this.....how it's done, what is done...it's just such a beyond my knowledge area thing.

Honestly, most of the time they just do the same thing they did on the last version. If that doesn't work then they look for known CVEs. Spending weeks/months with a soldering iron, debugger and an IDE is not really all that common anymore.

[Video Beagle]

1 hour ago, Master Disaster said:

I didn't realise freddy mercury was also a magician.

 

Honestly, most of the time they just do the same thing they did on the last version. If that doesn't work then they look for known CVEs. Spending weeks/months with a soldering iron, debugger and an IDE is not really all that common anymore.

He's parodying Doug Henning, a magician from the 70's/early 80's. (You may know that, but Henning has sorta been lost to history, though I rmember him being very big when I was young).

 

re: what they're doing.. no the whole thing..the whole doing something and gaining access etc bit.. it's really beyond my level of comprehension...I did once jailbreak a nook iirc...following a specific set of instructions, but I couldn't tell you what I did and how (or why at this point...it was many years ago). Like I guess they do blah which overloads a memory section in the computer causing an error state that they can take advantage of, but shurg.

[StDragon]

5 hours ago, Master Disaster said:

I didn't realise freddy mercury was also a magician.

LOL . I can totally imagine Freddy hacking to the song "Don't Stop Me Now"