Clarification on how the new bootrom hack works (not another tethered moaning thread)

[eshroom]

"[Redsn0w] uses our original Pwnage bootrom exploit for iPhone 2G, iPhone 3G, and iPod 1G. (Because it's a bootrom exploit, it can't be fixed by Apple without a new hardware release.) Note that redsn0w 0.9 does use the USB exploit for iPhone 3GS and iPod 2G+3G running 3.1.2, but that exploit will be fixed in Apple's next FW release." http://wikee.iphwn.org/howto:rs9

So, the hack for old bootroms is untouchable by Apple, i.e. every new firmware update will be a doddle to hack, as has always been the case.

What about new bootroms? USB exploit? Fixed in next FW release? Does this mean that new bootroms will be 'tethered' to 3.1.2 for the foreseeable future?

 

[pixelated]

What about new bootroms? USB exploit? Fixed in next FW release? Does this mean that new bootroms will be 'tethered' to 3.1.2 for the foreseeable future?

Probably. Any hackers who might have a solution to the tethered JB are most likely unwilling to release it as apple will create a fix before the next update.

I wouldn't imagine that we will see a solution for tethered JB's until the next FW update is out

 

[pcs are junk]

hopefully we will...even just a semi-tethered jailbreak will be fine. i just cant imagine that time when my phone is off and someone is trying to cut off my arm...hopefully that wont happen. lol.

 

[dhlizard]

I will stake my reputation (for whatever that is worth) that if there is a known exploit for an un-tethered jailbreak for the new bootrom, you will not see it until after Apple releases the new 4G (or whatever it is called) iPhone come this May, June or July.

Otherwise Apple will just change the hardware so it will be a waste of an exploit.

It just isn't gonna happen.

@ pcs are junk

And I have to ask ......what is a semi-tethered jailbreak ??

It's either tethered or not tethered !

 

[Applejuiced]

hopefully we will...even just a semi-tethered jailbreak will be fine. i just cant imagine that time when my phone is off and someone is trying to cut off my arm...hopefully that wont happen. lol.

What's a semi-tethered jb?

 

[Penguissimo]

@ pcs are junk

And I have to ask ......what is a semi-tethered jailbreak ??

It's either tethered or not tethered !

Actually, pcs are junk isn't totally out in left field re: his use of the term "semi-tethered". The Greepois0n guys used this term to describe the possibility of a jailbreak that would allow you to reboot away from a computer (in case you lose power or your phone crashes), but this reboot would only allow you to run Apple-approved apps. With this "semi-tethered" jailbreak, you'd have to re-run a jailbreaking program to again enable the use of jailbroken apps:

http://chronic-dev.org/blog/2009/11/greenpois0n-what-it-is-and-what-it-is-not/

Current plans are releasing a "lite" greenpois0n that supports only iPod touch 3G, as well as the updated bootrom ipt2/3G. After gplite is applied, your device will be able to be used normally with Apple and App Store apps on a normal boot, then when you connect to our program and boot you will be able to use your Cydia apps as well. This is known as a “semi-tethered” jailbreak, basically meaning you can reboot normally (especially important for people with new 3G) and use it as a normal iPod / iPhone, and then connect to your computer and boot when you get home or whatever to use Cydia apps and such. Later on, a full featured version of greenpois0n will be released, followed closely by the source for the backend.

Of course, these guys seem to have disappeared off the face of the planet, so who knows whether this is still among their plans, or if they're ever planning to release; hopefully they're mostly finished and just waiting for the next iteration of iPhone hardware to come out...

 

[dhlizard]

Actually, pcs are junk isn't totally out in left field re: his use of the term "semi-tethered". The Greepois0n guys used this term to describe the possibility of a jailbreak that would allow you to reboot away from a computer (in case you lose power or your phone crashes), but this reboot would only allow you to run Apple-approved apps. With this "semi-tethered" jailbreak, you'd have to re-run a jailbreaking program to again enable the use of jailbroken apps:

http://chronic-dev.org/blog/2009/11/greenpois0n-what-it-is-and-what-it-is-not/



Of course, these guys seem to have disappeared off the face of the planet, so who knows whether this is still among their plans, or if they're ever planning to release; hopefully they're mostly finished and just waiting for the next iteration of iPhone hardware to come out...

Well, perhaps that is similar to what Geohot referenced when he tweeted about a dongle for tethered jailbreaks, although he never gave any specifics.

Thanks for the info, I never paid much attention to GreenPoison as they were a flash in the pan group.

By the way, based on your posts, I see you "know your stuff" regarding the iPhone and jailbreaking/unlocking. This is a perfect example.

Thanks for helping on the forum.

 

[thelatinist]

Of course, these guys seem to have disappeared off the face of the planet, so who knows whether this is still among their plans, or if they're ever planning to release; hopefully they're mostly finished and just waiting for the next iteration of iPhone hardware to come out...

Thanks for the info, I never payed much attention to GreenPoison as they were a flash in the pan group.

I decided to treat everything Chronic-Dev says with a healthy dose of skepticism when they 1) accepted donations before they even started working on their application and 2) published the 24kpwn on the Internet in a huff when their contributors started to think they were a scam. Four months later I don't see any evidence that they're any more real than Appuloha1l.

 

[eshroom]

There seems to be some confusion so I'll clarify.

The new 3GS is "hacked" through a USB exploit found in 3.1.2, without this there would be no jailbreak, tethered or untethered.

The old 3GS has an iBoot hack allowing it to run jailbroken firmware.

Since the USB exploit will be patched in 3.x (where x > 1.2) does that mean new 3GS users will be left in the cold with 3.1.2 while older 3GS users needs are met much more swiftly??

 

[thelatinist]

There seems to be some confusion so I'll clarify.

The new 3GS is "hacked" through a USB exploit found in 3.1.2, without this there would be no jailbreak, tethered or untethered.

The old 3GS has an iBoot hack allowing it to run jailbroken firmware.

Since the USB exploit will be patched in 3.x (where x > 1.2) does that mean new 3GS users will be left in the cold with 3.1.2 while older 3GS users needs are met much more swiftly??

Your question assumes that there will be another 3.x release. I highly doubt that this is true.

 

[Penguissimo]

Well, perhaps that is similar to what Geohot referenced when he tweeted about a dongle for tethered jailbreaks, although he never gave any specifics.

Thanks for the info, I never payed much attention to GreenPoison as they were a flash in the pan group.

By the way, based on your posts, I see you "know your stuff" regarding the iPhone and jailbreaking/unlocking. This is a perfect example.

Thanks for helping on the forum.

It could be what Geohot meant, although you're right that he never really gave any specifics, and at this point he seems so turned off by the "reception" to blackra1n that it'd be surprising if he comes back to the iPhone anytime soon. It's a shame, really—the guy seems to have a brilliant mind. To think of what could have been, had he not been hassled by so many entitled morons...

And yeah, the GreenPoison guys are either out of the game or trying to lay low to avoid the same kind of harassment Geohot got. Unfortunately, like thelatinist says, this would probably have worked better if they hadn't solicited donations, gotten snippy, and then blown through their promised release date with no word. Now their blog activity seems to be centered mainly around calling out the angry people posting comments, although to be fair, a lot of those people are idiots. On the other hand, a lot of those people donated money thinking they were getting an untethered jailbreak...ugh, what a mess.

And thanks for your kind comments I'm no pro, or even an amateur hacker, but I do like to stay informed about this kind of thing! It's a nice way to unwind from my day job

 

[eshroom]

Your question assumes that there will be another 3.x release. I highly doubt that this is true.

Anyway, my point seem true, it seems that for 3G and old iBoot 3GS users, 3.1.3 will be hacked soon using the the iBoot exploit and custom IPSWs will be makable. As for new iBoot 3GS user, a whole new exploit will be needed...