comex: @esemede he would have implemented his own untether, but that would be wasting an exploitSo with Geohot's bootrom exploit, SHAtter exploit and comex's hacks, we can see that future jailbreak for iPhone 5 and iPad 2 will be easy and safe. Also, stay tuned for new PwangeTool version to hit the shelves soon.
MuscleNerd: (translating that retweet of @comex: geohot has an iboot-level untethered exploit but held it back to conserve exploits)
Apple: We're aware of this issue and already developed a fix which will be available to customers in an upcoming software update.It makes sense that Apple will fix Comex's untethered hack. What that mean limera1n will be tethered jailbreak. Remember JailbreakMe, it has been released 1st August, after 10 days Apple released iOS 4.0.2 and 3.2.2 to fix the JailbreakMe PDF exploit, it was exactly on 11th August. So if we apply the same scenario, we will expect that Apple will roll out its new firmware may be iOS 4.1.1 and 3.2.3 on next Thursday 19th October.
Because the “untethered” part of this jailbreak comes from a userland hack from @comex, you should still backup your SHSH hashes for 4.1. Do this by either letting Cydia keep them (“make my life easier”), or using Tiny Umbrella. This way you can always come back to an untethered, jailbreakable 4.1 on your devices after Apple has closed their 4.1 signing window (they’ll close the 4.1 window once they push out their next firmware version). If you fail to do this and ever need to restore to 4.1 again, you can still jailbreak but it will be a tethered JB (you’ll need to connect to your computer to finish the booting process, each and every time).You may also like:
And remember: you can backup your 4.1 SHSH hashes without even being at 4.1 or even being jailbroken, by using Tiny Umbrella.
AppleTV is technically supported, but theres no apps yetThe jailbreak can be done by putting your Apple TV into DFU mode by following the steps posted here and using Limera1n jailbreak guide but what's the point? You can't install app without having OpenSHSH service on your device so some hackers should work on installing OpenSHSH and running apps on it, we'll let you know when the jailbreak is updated to install OpenSSH.
we have 3 options, A) Not release greenpois0n, B) Burn a second bootrom expoit, or C) Break our ETA and implement geo's exploitiPhone Dev Team posted a new blog post this morning confirming that:
we'll probably go with option C, but i'm too pissed off to work on this tonight. i'm going to go get wasted
The release of limera1n has (hopefully!) averted the burning of 2 bootrom holes at once (both his and SHAtter). Releasing SHAtter now would be a complete waste of a perfectly good bootrom hole in light of limera1n, and so it can be held until Apple closes limera1n’s hole. While there’s no guarantee that Apple won’t also close SHAtter by then, it provides a ray of hope for devices after Apple’s bootrom respin. Meanwhile, look for an alternate implementation of the limera1n exploit in greenpois0n (and possibly other tools), where it should undergo more testing too.Yes, they will not use SHAtter in GreenPois0n nor in other tools. I'm really happy that SHAtter is safe now and won't be used until Apple patch Limera1n's loophole. After that, another tool will be released based on SHAtter to jailbreak 4th generation & may be 5th generations devices. Apple WILL NOT catch this one.
Thanks to the irresponsible antics of geohot, we will have to delay the release of greenpois0n (new ETA = as soon as possible), so that we have time to clean up his little mess and integrate the exploit he uses in limera1n into greenpois0n. This way, we can save SHAtter for future devices that may still be vulnerable to it.You may also like:
We know that this is not what some people want to hear, but due to geohot needing to feed his ego (as usual) and revealing his limera1n exploit, we do not have any other responsible options.
limera1n, 6 months in the makingUPDATE 1: Here's all known bugs right now and being fixed:
iPhone 3GS, iPod Touch 3G, iPad, iPhone 4, iPod Touch 4G
4.0-4.1 and beyond+++
limera1n is unpatchable
untethered thanks to jailbreakme star comex
released today to get chronicdev to do the right thing
brought to you by geohot
Mac and Linux coming soon
follow the instructions in the box, sadly limera1n isn't one click
that's the price of unpatchability
as usual, donations appreciated but not required
still in beta, pardon my ragged edges
zero pictures of my face
some people must reboot to see CydiaUPDATE 2: Here is the change log of the three beta versions:
some people still don't have windows
beta iOS versions aren't supported
iPod Touch 2G support coming soon
for 3G, use redsn0w
limera1n app is a white box, i know. use it anyway
BETA1 - first releaseUPDATE 3: How to use Limera1n to jailbreak:
BETA2 - fixed kernel patching magic, rerun BETA2+ over BETA1
BETA3 - fixed new bootrom 3GS
BETA4 - uninstall fixed, respring fixedish
RC1 - out of beta! afc2, reliability improvements, no reboot for cydia, 2kb smaller
MuscleNerd: As dramatic as geohot's last-minute all-device JB is, still a shame that two bootrom holes will be burned at once.The ETA of Limera1n is exactly one year after one year after blackra1n was released to jailbreak iOS 3.2.1. StealthBravo confirms that too:
p0sixninja: yes, the news about geohot is true, the day after we release ETA he decides he wants a piece of the #pie
p0sixninja: and yes it is a different bootrom exploit, he wants us to use it in GP, but there’s no way we’ll make our ETA if we do
chronicdevteam: Note greenpois0n will be released as planned. if someone decides to burn a different perfectly good exploit, that is entirely on them.
chronicdevteam: It is actually him.
chronicdevteam: because his different exploit can be saved for new iphone / ipad / ipod, AND 3G S, you’d just have to wait a little longer
The significance of 10/11/10 is that its the one year anniversary of blackra1n’s release. 10/11/10 is the targeted release of limera1nSo, what do you think guys? Should Geohot really saves this new bootrom exploit for iPad 2 and iPhone 5 or should he just go on and release his tool as there's another userland exploit on it's way?
