Hackers claim iPhone 2.0 breakthrough

By Tom Krazit, CNET News.com
Thursday, March 13, 2008 11:21 AM

It hasn't even been released yet, but iPhone hackers claim to have already figured out a way to jailbreak Apple's iPhone 2.0 software.

The iPhone Dev Team said Tuesday it has figured out a way to hack into the iPhone's bootloader by taking advantage of the way the iPhone authorizes code that can be written to memory, according to a report on Gizmodo. After some modifications, this apparently allows any code to be written to the iPhone, such as applications that haven't been authorized by Apple, and it should work with any new software version Apple releases, according to the team.

The team released a screenshot of what is supposedly an iPhone running external applications on the beta 2.0 software, which can be obtained by downloading the iPhone SDK. It's hard to tell exactly which version is shown in the screenshot, although the inclusion of the App Store is a pretty big hint. Still, Adobe sells a lot of copies of Photoshop for a reason.

Unlike previous hacks, this one isn't specific to the latest firmware version, it exploits the way that Apple designed the iPhone's main bootloader. According to the iPhone Dev Team, the iPhone verifies whether or not firmware code has been signed with an RSA certificate before allowing it to be written to memory. The team has apparently figured out a way to disable that check and allow unsigned code to be written to memory. A detailed explanation of the exploit can be found here.

The hacking community believes this jailbreaking method (which will also let you unlock your iPhone) can't be fixed by Apple in a production version of the 2.0 software. Even though Apple has released the SDK, it seems pretty likely that hacking will continue as long as the company maintains its one-carrier, one-country policy and if Apple chooses to exclude lots of third-party applications that conflict with its goals.

This article was first published as a blog on CNET News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Never use dynamic variable names

Internet Security

How to dynamically name variables is a common subject of programming questions. That's a great way to create security problems, though.


Read more »



 
Virtualize your way to cost savings
Build an infrastructure that is flexible, scalable, and economical, as you strive to become a truly agile business.

Red Hat Outlines Its Virtualization Strategy and Roadmap for 2009
» Watch the video




Are telcos new drivers of outsourcing industry?

Blog thumbnail

The recent TPI Index from TPI highlighted an interesting trend where a few very large Telco-to-Telco contracts--instances where one telecommunications carrier outsources its network operations requirements to another telecommunications service..... by Michael Rehkopf

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web