Jailbreakali iPhone usred Apple Storea!

http://www.gadgeterija.net/2010/08/03/video-jailbreakali-iphone-usred-apple-storea/

Browser-based iOS 'jailbreak' utilizes 'scary' PDF security hole


The latest browser-based "jailbreak" for iOS devices, including the iPhone 4, utilizes a PDF exploit that one prominent security expert called both "scary" and "very beautiful work."

Sean Sullivan, security advisor with F-Secure Corporation, revealed on Tuesday the technical details of the jailbreak process, which is done entirely in the Mobile Safari browser. The jailbreakme.com site includes 20 separate PDFs for different combinations of hardware and firmware.

The same PDF files crash both Adobe Reader and Foxit on Windows platforms, relying on a corrupt font. On the iPhone, PDF viewing is built into the Safari browser, and the attack crashes the Compact Font Format handler.

Sullivan also linked to comments made via Twitter by security researcher Charlie Miller, who was also analyzing the code behind the browser-based jailbreak.

"Very beautiful work," Miller wrote. "Scary how it totally defeats Apple's security architecture."

While the jailbreakme.com URL itself is not intended for malicious purposes, the PDF exploit it uses could be utilized by hackers to more nefarious ends. Miller said that with this method, a hacker does not need physical access to an iPhone, iPod touch or iPad -- they just simply need to have the user visit a vulnerable website.

Last year, Miller exposed a dangerous SMS exploit that could allow a hacker to remotely control an iPhone. He notified Apple of the flaw, and the company quickly released a patch to plug the exploit.

Apple is likely to quickly act once again and plug the vulnerability that affects all iOS devices -- all models of the iPhone, iPod touch and iPad. When that happens, hackers who want to jailbreak iOS devices to run unauthorized code and operating system modifications blocked by Apple will have to find another method.

The member of the iPhone Dev Team who goes by the handle "comex" said this week that he has other potential exploits he will look to when Apple inevitably patches the PDF flaw.

"Maybe I'll rely on USB based stuff for the next jailbreak so that Apple won't patch it so fast," he said.



Ironically, jailbreakers have already developed a workaround solution that can help users avoid being hacked through the PDF exploit. Developer Will Strafach on Tuesday released an application  available on the jailbroken Cydia store that will warn users when a Mobile Safari page is loading a PDF file. The solution does not patch the hole, but helps to prevent users from visiting sites with all PDF files to avoid the exploit.

izvor

iPhone 4 unlock available now



It's the moment that many of you have been waiting for: the Dev-Team's ultrasn0w carrier unlock for iPhone 4 is out. You'll find version 1.0-1 of ultrasn0w in Cydia on jailbroken  devices. If not, just add the repo666.ultrasn0w.com repository. It works for iPhone 4 baseband 01.59 and 3G/3GS basebands 04.26.08, 05.11.07, 05.12.01 and 05.13.04. If none of this makes sense then you've got no reason unlocking your device in the first place, buddy.



izvor

Sad kad sam ja narucio drugi telefon oni izdaju unlock za Iphone 4! 

Nije mi jasno kako se radi aktivacija posto ovaj jailbreak zahteva da ti telefon bude aktiviran, a to je moguce uraditi sa original sim karticom ili sa nekom phonebook karticom... mislim da ne postoji neki drugi nacin aktiviranja kod iOS4.x

Activaciju ti ne trazi jailbreak vec upgrade. Znaci samo ako uradis neki upgrade onda ce ti iPhone zatraziti aktivaciju, bez obzira da li ces posle uraditi jailbreak ili ne. Ja sam uradio jailbreak na jednom 3GS koji je vec imao iOS4 na njemu i nije trazio aktivaciju.
Ako ides sa 3.1.x na 4.0.x onda ce ti trebati aktivacija.

mozda ovako:

Ovaj 3GS trenutno ima 3.1.2 i ako uradim upgrade ili restore na 4.0.1 moracu prvo da ga aktiviram da bih mogao da mu uradim jailbreak, a potom i unlock... a to je problem Kod verzije 3.1.2 mozes sve to offline da uradis i u tom slucaju program uradi aktivaciju (hacktivated) i sve ostalo... a kod ovoga jailbreakme.com ti vec moras da imas aktiviran telefon da bi mogao da pristupis tom sajtu


Hm, to mi deluje kao da je u pitanju iPhone 2g ili mozda je i 3g, nisam siguran... jer pre 3 godine kada sam dobio moj 2g, tako nesto sam radio da bih ga jailbreak-ovao i unlock-ovao ali to je nesto bilo za software 1.1.2 ili tako nesto... dok se ovde nista od toga ne spominje, pa ne bih da se igram da uradim restore sa 4.0.1 i onda da mi telefon tako stoji

Ako ti sve radi kako treba, onda nemoj ni da apdejtujes na 4.0.1. Ja se sada kajem sto sam apdejtovao telefon na iOS4 jer ima nekih aplikacija iz Cydie na koje sam navikao na 3.x.x, a koje vise ne rade kao sto su Safari Download Manager, AttachmentSaver, MxTube, YourTube, iBlueNova.
Probao sam da se vratim na 3.1.3 fw, ali bez uspeha - iTunes mi prijavljuje gresku 1015 prilikom restore-a tako da sam morao ponovo da ubacim 4.0.1.

-Ardzuna,a ima li kakvih (bitnih) prednosti 4.0.1. u odnosu na 3.1.3 ?