Return of Jailbreak: Most of the iOS devices were subject to vulnerability, which Apple could not eliminate

The AXI0MX hacker has published an exploit program that allows you to get the rights of a superpoler on almost all Apple devices issued by the company from 2011 to 2017. The vulnerability is called Checkm8, literally “Shah and Mat”. It cannot yet be used by a mass user - with its help you can already get full access to the file system, but so far it will not work out in the usual way to install third -party, not approved Apple Programs. The Apple's error that the Axi0MX used in his exploit is hardware and eliminating its California company, most likely will not be able to.

The discovery of a new vulnerability can be considered a significant victory of the hacker community - the last time Jailbreak in Apple devices was found in 2010 , and since then the possibility of “unhangers” of the company’s new devices was not actually among users. The new vulnerability differs in that it is enclosed in the Boot Rom - the unchanged part of the software code, which is sewn into the device at the hardware level and is launched primarily when it is turned on. Until now, Apple has quickly released updates covering the possibility of a jailbreak of the operating system. To eliminate the new vulnerability of software updates is not enough. The company would need to withdraw all the devices subject to Checkm8, which Apple will most likely not go.

There is a new vulnerability in all chips of iOS devices, starting with the A5 processor and ending with A11. Thus, the possibility of Jailbreak of a huge number of devices opens - from the iPhone 4s to the iPhone X. According to Counterpoint, last year the iPhone X turned out to be the most popular smartphone of the planet .

The possibilities of exploit on the moment can only be used by hackers who specialize in the hacking of iOS devices-it gives access to the file system and allows you to launch the executable code without approval of Apple, but it is not yet possible to install a popular store for iOS (“twigs”) Cydia.

Exflicts are still “attached”, that is, when the smartphone or tablet is rebooted, the possibility of complete access to the system disappears. The creation of a “unrelated” version of Jailbreak can be expected in the near future. Also, from the AXI0MX instructions, it follows that the exploit can only be launched using Apple desktop computers.

Jailbreak (in the literal translation “Escape from Prison”) allows the user to get full access to the file system and control the device on iOS. In particular, without a jailbreak, it is impossible to install applications from somewhere else except the official store of the company App Store, or change the cell operator (in cases where the device is sold with reference to a certain tariff).

Obtaining the rights of a super -user that means Jailbreak is also fraught with danger. Working with such rights increases the chances that personal data can be stolen, and unverified applications are able to freely execute the malicious code. Jailbreak deprives the user of the Apple official warranty, but the company leaves the opportunity to establish the latest official IOS version - it will be impossible to detect signs of hacking.

The first Jailbreak was released in July 2008 by the IPhone Dev Team hackers team. It was called Pwnagetool and could break the iPhone 3G. Since then, a race of vulnerabilities with new updates began to detect vulnerabilities between Apple and the Kharax Teams.

Vyacheslav Shushurikhin