http://www.engadget.com/2009/06/26/iphone-3gs-exploit-confirmed-jailbreak-and-unlock-coming-shortl/
From Gizmodo:
And so it continues. Geohot has returned with some help from hacking buddies chronic, posixninja, and pod2g with news that the same "24kpwn" exploit used to cracked open the iPod touch 2G will work on the iPhone 3GS. That means a jailbreak and unlock can be launched just as soon as the existing tools are updated for the iPhone 3GS (which won't be long). As George Hotz laments,
On a personal note, I'm sad. Apple, it took me a week to break through your new defenses. And to let us reuse an exploit like that; 24kpwn was so 5 months ago. Although I imagine it must have been painful watching the devices roll by on the assembly line, knowing they all had a hole in them and you couldn't fix it.
Oh George.
From iPhone Dev-Team:
About 5 hours ago (Thursday evening, less than a week after the 3GS launch), we were able to verify that the 24Kpwn exploit that the hybrid team used on the iPod Touch 2G is still applicable to the bootrom of the iPhone 3GS. That means we can use the same sort of technique used by our current redsn0w tool to jailbreak and unlock the iPhone 3GS.
This is great news, but how did it happen? Why didnt Apple fix this in their normal cat&mouse fashion? Well it seems this bootrom was cut in about the August 2008 timeframe, so the unintended early reveal of 24Kpwn earlier this year didnt affect the iPhone 3GS.
For our technical notes on where the 24Kpwn exploit is in the 3GS, see here (pastebin hash of it is here). Our original blog post for when this exploit was first found is here.
And yes, ultrasn0w will be able to be used on the iPhone 3GS for you unlockers! (In fact, without any modifications whatsoever!)
Important: Apple has not given up on the cat&mouse game, and in fact there are challenging aspects of the 3GS jailbreak that arent in the other devices. Itll take some time to safely work these into our tools, but the fundamental weaknesses are there: The bootrom is exploitable via 24Kpwn, and the baseband is exploitable via ultrasn0w. (And just like with the 3G, ultrasn0w for 3GS requires that you not update your baseband when Apple comes out with new firmware.)
From Gizmodo:
And so it continues. Geohot has returned with some help from hacking buddies chronic, posixninja, and pod2g with news that the same "24kpwn" exploit used to cracked open the iPod touch 2G will work on the iPhone 3GS. That means a jailbreak and unlock can be launched just as soon as the existing tools are updated for the iPhone 3GS (which won't be long). As George Hotz laments,
On a personal note, I'm sad. Apple, it took me a week to break through your new defenses. And to let us reuse an exploit like that; 24kpwn was so 5 months ago. Although I imagine it must have been painful watching the devices roll by on the assembly line, knowing they all had a hole in them and you couldn't fix it.
Oh George.
From iPhone Dev-Team:
About 5 hours ago (Thursday evening, less than a week after the 3GS launch), we were able to verify that the 24Kpwn exploit that the hybrid team used on the iPod Touch 2G is still applicable to the bootrom of the iPhone 3GS. That means we can use the same sort of technique used by our current redsn0w tool to jailbreak and unlock the iPhone 3GS.
This is great news, but how did it happen? Why didnt Apple fix this in their normal cat&mouse fashion? Well it seems this bootrom was cut in about the August 2008 timeframe, so the unintended early reveal of 24Kpwn earlier this year didnt affect the iPhone 3GS.
For our technical notes on where the 24Kpwn exploit is in the 3GS, see here (pastebin hash of it is here). Our original blog post for when this exploit was first found is here.
And yes, ultrasn0w will be able to be used on the iPhone 3GS for you unlockers! (In fact, without any modifications whatsoever!)
Important: Apple has not given up on the cat&mouse game, and in fact there are challenging aspects of the 3GS jailbreak that arent in the other devices. Itll take some time to safely work these into our tools, but the fundamental weaknesses are there: The bootrom is exploitable via 24Kpwn, and the baseband is exploitable via ultrasn0w. (And just like with the 3G, ultrasn0w for 3GS requires that you not update your baseband when Apple comes out with new firmware.)
