SHAtter Again !!

In case you are one of our readers, you may know that a hacker known as pod2g developed SHAtter exploit with the help of Chronic Dev Team member p0sixninja to jailbreak iOS 4.1 on new-generation device but GeoHot came with Limera1n to jailbreak all devices on iOS 4.1 and SHAtter was saved for iPhone 5 and iPad 2.

iH8sn0w, the iPhone developer behind Sn0wbreeze and some other tools had the code an apparently gave it to iHaz3 who's not related to any dev teams. Some sources claiming that this guy has started publishing SHAtter's exploit publicly which would burn this exploit. We'll be back for more updates ! iddle')

12:57 PM by iPhone Jailbreak · 0

GreenPois0n Delayed because Limera1n and SHAtter is Safe Now !!

Geohot made a big Surprise and his tool "Limera1n" now works with iPhone 4, iPhone 3GS, iPod touch 3G, iPod touch 4G, and the iPad, it was a real surprise especially that Greenpois0n was scheduled to be released today.

Greenpois0n is now delayed because Chornic Dev Team & iPhone Dev Team have got a mind and can think (not as Geohot). They will try to do implementation of the limera1n exploit in greenpois0n and other tools as PwnageTool to preserve your baseband for Ultrasn0w unlockers.

Chronic Dev Team member p0sixninja posted on his Twitter account:

we have 3 options, A) Not release greenpois0n, B) Burn a second bootrom expoit, or C) Break our ETA and implement geo's exploit

we'll probably go with option C, but i'm too pissed off to work on this tonight. i'm going to go get wasted

iPhone Dev Team posted a new blog post this morning confirming that:

The release of limera1n has (hopefully!) averted the burning of 2 bootrom holes at once (both his and SHAtter). Releasing SHAtter now would be a complete waste of a perfectly good bootrom hole in light of limera1n, and so it can be held until Apple closes limera1n’s hole. While there’s no guarantee that Apple won’t also close SHAtter by then, it provides a ray of hope for devices after Apple’s bootrom respin. Meanwhile, look for an alternate implementation of the limera1n exploit in greenpois0n (and possibly other tools), where it should undergo more testing too.

Yes, they will not use SHAtter in GreenPois0n nor in other tools. I'm really happy that SHAtter is safe now and won't be used until Apple patch Limera1n's loophole. After that, another tool will be released based on SHAtter to jailbreak 4th generation & may be 5th generations devices. Apple WILL NOT catch this one.

Of course Limera1n is still in betas so it's recommended not to use the betas and wait for stable Limera1n release or GreenPois0n. Limera1n has now 4 betas in one night and he is still working on fixing out these issues. We will keep you informed.

UPDATE 1: Chornic Dev Team posts a new blog post confirming that they are not releasing the tool. As I told you, they are still working on implementation of limera1n's exploit to greenpois0n, here's the full post:

Thanks to the irresponsible antics of geohot, we will have to delay the release of greenpois0n (new ETA = as soon as possible), so that we have time to clean up his little mess and integrate the exploit he uses in limera1n into greenpois0n. This way, we can save SHAtter for future devices that may still be vulnerable to it.

We know that this is not what some people want to hear, but due to geohot needing to feed his ego (as usual) and revealing his limera1n exploit, we do not have any other responsible options.

Stay Update with @GeoHot

6:32 AM by iPhone Jailbreak · 7

Limera1n Jailbreak to Mess Up GreenPois0n Release?

Damn! Jailbreak drama is happening now. Limera1n iOS 4.1 jailbreak was released few minutes ago to jailbreak all devices for iOS 4.1 (we are posting guides, hold on) but we forgot about GreenPois0n jailbreak tomorrow. That's what I think, 'Limera1n totally screwed Greenpois0n' and why was that? just because a guy wanted to mess up the jailbreak community, he really wanted some attention.

The good thing that Chornic Dev Team & iPhone Dev Team thought very well about GreenPois0n release tomorrow. They decided to hold back SHAtter and not using it in GreenPois0n jailbreak, actually, they will try to patch Geohot's exploit in GreenPois0n jailbreak and they will try to give it tomorrow (I think they can't).

Of course and as expected, Geohot's Limera1n jailbreak is not working well with old bootrom devices and some users are also reporting that it doesn't work on iPhone 3GS new bootrom. We will back with how-to guides, just don't use Limera1n now, wait for our coverage.

3:41 PM by iPhone Jailbreak · 1

NO ONE can block installous [Shatter or GreenPois0n]

In case you are living under the water and don't know that Chornic Dev Team was thinking to block installous app in the upcoming jailbreak. In other words, they plan to fight piracy. We received a lot of questions today “Will really Chornic Dev Team block installous app?” “Won't we be able to use installous anymore?”. Here's the fact about what I think and what will happen!

Yesterday @chronicdevteam Just Tweeted that :

 Just to make something clear: If you just want the jailbreak to install cracked apps, unfollow now.

To be clear infront of you, NO ONE can block installous. You may wonder that Jay Freeman or MuscleNerd can edit Cydia to remove installous pacakge -- Ok, they can do that but the developer of installous would just rename the site or package. The question is why they would block installous?

Well, may be because it is considered illegal software and steal developer's money. The developer behind installous didn't develop it for full-blown piracy but for trialling the software only! Of course everyone uses the app for full-blown piracy and that's not fair.

At the end, I will not say much. I just hope people to give up from full-blown piracy. If you want to use installous, just use it to try the app not to own the app! I hope you share your ideas and view below in the comment section.

6:07 PM by iPhone Jailbreak · 12

New Interview with the MuscleNerd [DevTeam] Jailbreak iOS 4.1/4.2

Well there has been so much speculations about the 4.1 jailbreak, we managed to get a few minutes with @MuscleNerd from the DevTeam about the progress in the 4.1 jailbreak, and asked the following questions.

Q1: How long have you guys been developing the 4.1 jailbreak ?

> In some sense, years!  Many of the tools, methods, and concepts carry over from one jailbreak to the next.  But as far as the stuff that's brand new and unique to this jailbreak, things really picked up on the day that @pod2g got his SHAtter exploit and payload working ( @Pod2G )

Q2: How many people are working on the 4.1 Jailbreak ?

> Including both teams and independent contributors who belong to neither team, about 8-10 people are working on the unique aspects of this jailbreak.

Q3: Will the 4.1 jailbreak be 4.2 compatible ?

> If it's not already compatible by the time 4.2 comes out, it can likely be made to be compatible.  (But nothing is ever 100% predictable.)

Q4: Are you guys waiting for the 4.2 GM Build to be released till you drop the new jailbreak ?

> Nope!  There are parts of it that aren't fully worked out yet.  The goal is to make it easy and safe enough for most people to use...especially ultrasn0w unlockers (who have the most to lose if the JB process goes wrong).

Q5: How can the readers help the dev team ?

> By continuing to not promote piracy, and being vigilent about the scam websites (especially the scam unlock sites).  We don't accept donations :)

Q6: Will the new jailbreak support previous firmware ? ie 4.0 or 3.x

> That's not the goal...if that happens it will be as a side effect.  

Q7: With all the fake 4.1 jailbreak news floating around the internet ? How do you know which tools are fake or real ?

> The fake sites really flourish when the demand builds up for a new jailbreak.  It's happened time and time again, so it's unlikely that will ever change.  But the team blogs and team twitter accounts are obviously the most reliable sources for when new tools are actually pushed out.

Q8: Any word on release date ? ;) j/k

> Hah :)

Stay Connected with Jailbreak News

at

@Twitter

&

Facebook

You may also like :

• GreenPois0n Jailbreak for iOS 4.1 close to be Released !! [A Few Days] 
• SHAtter Exploite Jailbreak iOS 4.1 [Full Story]  
• Chrome OS Ported to iPad with Flash Support [video]
• GreenPois0n Jailbreak for iOS 4.1 Coming Out Tonight !! is [Fake]
• GreenPois0n Jailbreak for iOS 4.1 is Ready to Be Released
• Apple Releases iOS 4.2 Beta 2 [iPhone 3G/3GS/4, iPod 2G/3G/4G, iPad 

Thx [ Jailbreakmatrix]

8:35 AM by iPhone Jailbreak · 4

[Ask - Answers] about GreenPois0n and Shatter !!

Ok, we are very close to see the new jailbreak tool GreenPois0n so I'm receiving a huge number of questions (i.e. Facebook page, and Twitter) about release date, untethered status of the new jailbreak tool. Also, we received questions about the new Cydia update.

Q1: At first, identify yourself? some people think you are the administrator of iPhone Wiki? Right?

No, I'm not the admin of the iPhone wiki. The guys over at Redmond Pie misinterpeted that. I follow the jailbreak scene very closely and read a lot about the exploits, vulnerabilities and payloads on the iPhone Wiki. On my twitter I tweet (and answer questions) about jailbreak related things. I did some minor things like porting the blacksn0w unlock to 4.0 beta's (with help of msft.guy).

Q2: What's SHAtter and how it works?

SHAtter is a bootrom exploit. It's very likely that it has something to do with the signchecking of the SHA-1 in the IMG3 files, but nothing is sure right now. Whether it's tethered or untethered is unknown yet. (my honest *guess* (!!) is that it will be untethered. see Q7)

Q3: What about Greenpois0n? Will it be the name of the new Jailbreak?

Originally greenpois0n is a set of tools that is designed to help hackers in their search for vulnerabilities and exploits. I'm not sure whether they are going to give the new jailbreak that uses the SHAtter exploit the name "greenpois0n". Would be kinda lame, though, greenpois0n is now widely known as "THE new jailbreak" so it might be good (to prevent confusion) to name it greenspois0n.

Q4: What are the compatible devices with this jailbreak?

All that are available right now. Though, users of the old bootrom units should use the 24kpwn and Pwnage 2.0 already as it is probably superior to SHAtter.

Q5: Who are the developers of the new jailbreak tool?

The Chronic Devteam (posixninja, chronic etc.) and I think guys from the iPhone Dev-Team (MuscleNerd) help them developing the jailbreak.

Q6: Will the new jailbreak really act on the bootrom and jailbreak devices forever?

Yes, a bootrom exploit means Pwnt for life (pwnt4life). The device will always be vulnerable to this SHAtter exploit, which will make it possible to jailbreak. The bootrom cannot softwarematically be updated by Apple. They will have to do a hardware revision (like they did with the 3GS after September 09). What the conditions of SHAtter are, are again unknown. I believe that this exploit is different from others in this way, so I don't want to speculate on that.

Q7: The most interesting question, Will it be Untethered or Tethered? (please give me a different answer from "don't know")

My source (which I can't reveal) says, untethered. I don't want to shout it out all over the web and my twitter because 1. I can't reveal my source and 2. It's not 100% sure yet. We'll have to see.

Q8: There's a tweet from MuscleNerd saying that @comex is working on userland exploit, any ideas what does this mean?

Comex has exploits in private for another usrland jailbreak. But since Chronic Dev came up with SHAtter, he probably put his exploits in his fridge (you know what I mean ;-) )

Q9: What about unlocking baseband 05.14 and 2.10? is it difficult of be unlocked?

Whether an unlock will be released for 05.14 and 2.10 is unknown yet. If there will be an unlock, it'll come from the iPhone Dev-Team (MuscleNerd). They just need another command that creates the right baseband crash to inject the ultrasn0w payload. I don't know if they have one in private.

Q10: Any info about the release date of new jailbreak tool? (any any info)

No, sorry. I could say a lot of things, but what would you be with that if it isn't the truth?

Q11: People are reporting crashes and errors in Cydia, will this be fixed in the new Cydia update?

Send your crashlogs to @chpwn and he will very likely take a look at it and, if possible, fix it :)

Q12: What are the new features that will be added to Cydia in the next update?

I read things like a rate/comment system and I really hope speeds improvements by hiding the themes or something like that. If you have suggestions, send them to @chpwn.

Q13: Will the new update be released with the jailbreak? before? after?

Maybe together, but I think those project are separate projects and will both see daylight when they're ready for release.

Q14: Will the new jailbreak tool be different from Spirit and Blackra1n?

Different in a way of exploits, yes. Different in a way of applying the jailbreak to your device, no. The SHAtter exploit will make use of a USB connection, so you will need a computer to jailbreak your device. I won't be as easy as JailbreakMe this time ;-)

You may notice in Q10 about release date, there was no answer yet! But now, we have got an answer about the release date from pod2g which confirms that it's coming in the next few days (may be less than a week). We would thank Vincent for accepting to answer all questions and giving all information about the new jailbreak, Cydia updates and the unlock.

Stay Connected with Jailbreak News

at

@Twitter

&

Facebook

You may also like :

• GreenPois0n Jailbreak for iOS 4.1 close to be Released !! [A Few Days] 
• SHAtter Exploite Jailbreak iOS 4.1 [Full Story]  
• Chrome OS Ported to iPad with Flash Support [video]
• GreenPois0n Jailbreak for iOS 4.1 Coming Out Tonight !! is [Fake]
• GreenPois0n Jailbreak for iOS 4.1 is Ready to Be Released
• Apple Releases iOS 4.2 Beta 2 [iPhone 3G/3GS/4, iPod 2G/3G/4G, iPad]

2:59 PM by iPhone Jailbreak · 12

SHAtter Exploite Jailbreak iOS 4.1 [Full Story]

A few days ago we showed you the Jailbreak of iPod Touch 4G with SHAtter Exploit in Video and we made a post for our Spiritjb.org readers talked about
All what they Want to Know about Greenpois0n Jailbreak iOS 4.1, [Ask & Answer] Now Hackers have begun to tell the story of the SHAtter exploit, how it was discovered, and how it is being used to bring the next iPhone jailbreak.

SHAtter : is an unsigned code execution vulnerability that resides in DFU mode of the S5L8930 bootrom. Uses of this exploit have already involved uploading a pwned iBSS/iBEC to provide access to the AES engine and to run custom ramdisks.

pod2g wrote before a USB fuzzer and tested every single USB control message possible on his iPod2,1. The fuzzer found 2 vulnerabilities: - a heap overflow caused by the A1,1 control message - a way to dump the bootrom using USB descriptors request

The team tested both PoC on new generation devices (iPhone2,1, iPod3,1, iPad) and both were already fixed by Apple.

posixninja continued the fuzzing on new gens and found that with a particular sequence of USB messages it was possible to dump the BSS+Heap+Stack (on new gens only). Having a memory dump is really helpful to make exploits and it was also the first time we had this kind of dump, previous bootrom exploits (ex: 24kpwn) were done blind!

Also, his first attempts to dump the memory resulted in rebooting the device. Interesting! We'll see after that this reboot is the base of the SHAtter exploit

Stay connected with us to tell you the latest news about the Jailbreak news of [ Greenpois0n - SHAtter ] on @Spirit and Facebook 

Via [The iPhonewiki]

You may also like :

• Chrome OS Ported to iPad with Flash Support [video]
• GreenPois0n Jailbreak for iOS 4.1 Coming Out Tonight !! is [Fake]
• GreenPois0n Jailbreak for iOS 4.1 is Ready to Be Released
• Apple Releases iOS 4.2 Beta 2 [iPhone 3G/3GS/4, iPod 2G/3G/4G, iPad]

1:18 PM by iPhone Jailbreak · 5

SHAtter Decrypts AppleTV iOS 4.1 [Exclusive]

A few hours Chpwn tweeted about the new Apple TV firmware, which is indeed actually iOS based as we had hoped for. The firmware is even available to download from Apple's servers, before the product has even hit hands of anxious pre-order customers.

 The main filesystem (“Mojave8M89.K66OS”) key for 018-8609-066.dmg is:

31c700a852f1877c88efc05bc5c63e8c7f081c4cb28d024ed7 f9b0dbc98c7e1406e499c6

If you’re familiar with vfdecrypt, you can use that key to decrypt the image and mount it. If you do so, feel free to use the comments section to discuss what you discover there (And of course, thanks @pod2g!)

The Dev-Team just tweeted a small update to their recent demo of SHAtter, stating that

SHAtter has been successfully used to decrypt the Apple TV iOS keys!

I have a good feeling about the next month. Stay tuned @Shatter_JB

11:05 PM by iPhone Jailbreak · 0

Chronic Dev Team Updates iOS 4.1 Jailbreak Status !!

First we want to keep you Updated step by step for all Jailbreak news which will release soon even the news a big or small. So Chronic Dev Team has updated iOS 4.1 jailbreak status. The update comes form their Twitter account with some info which you may like to hear. Check it below..

The First, There's NO ETA for the release, ok, we know that

MuscleNerd today has published a video (you can check it here) which demos a prove that the exploit works on iPod touch 4G but that don't mean it will be released NOW! Stay tight

Last, it will be unexpectedly the same as JailbreakMe.

Ok, Keep your Self Updated @Jailbreak and Spirit

4:03 PM by iPhone Jailbreak · 0

Jailbreak iPod Touch 4G with SHAtter Exploit [Video]

New video from the iPhone dev-team, The dev-team confirmed that the SHAtter exploit was enough to convince the iPod touch 4G to restore to a custom IPSW created specifically for this model. As you know the SHAtter exploit was developed by Pod2g (ex-Chronic dev). Dev-team also confirmed that the team is hard at work bringing us a brand new tool to make use of the exploit.

In the meantime, we’ve put @pod2g’s exploit into a beta version of PwnageTool to test the waters. The SHAtter exploit was enough to convince the iPod touch 4G to restore to our custom IPSW. The successful result is shown below! It’s all working: customized Preferences to show battery percentage, Cydia, root shell…the works!

Thanks to the union between PwnageTool and Shatter to run the jailbreak on iPod Touch 4G, however there is no ETA (estimate to arrival), but we can say that we are really close to the first release of the new tool to jailbreak iOS 4.1. As usual we will keep you tuned with any immediate updates.

You May also Like :

• GreenPois0n Jailbreak for iOS 4.1 is Ready to Be Released


• New Cydia Update Coming Soon [Hot]


• Jailbroken iPad on iOS 4.2 ? [VIDEO]

4:51 AM by iPhone Jailbreak · 10

Shatter Jailbreak iOS 4.1 Coming soon! No wait for iOS 4.2 !! [Update 1x Release time]

Pretty cool news, the administrator of the iPhone Wiki and the popular iPhone hacker behind modified blacksn0w on iOS 4 has just announced that SHAtter jailbreak will be released soon as the hacker behind SHAtter exploit is not waiting for iOS 4.2 release from Apple, so we should expect it anytime this week or next week, stay tuned!!

They won't wait for iOS 4.2 to release SHAtter. iOS 4.1 will be jailbroken soon.

iOS 4.2 is scheduled to be launched in November for iPad, iPod touch and iPhone, but if the developers of SHAtter are not waiting for iOS 4.2 then the release is soon, there's no ETA yet, at least I can say that we will not wait long for this jailbreak which is not confirmed yet tethered or untethered.

Now All you can do Just stay Updated with our two posts SHAtter and Greenpois0n. As usual we will keep you informed.

Update 1: Thanks to @FraScla now we can say that the jailbreak will be released in a couple of weeks

to Be the first 1 Jailbreak iDevice on iOS 4.1

stay Tuned with us on @Spirit and @Facebook

10:48 PM by iPhone Jailbreak · 24

SHAtter Jailbreak for iPhone / iPod (iOS 4.1) / iPad (iOS 3.2.2) FOREVER [Soon]

Note:

SHAtter is the exploit for Greenpois0n and Greenpois0n is the tool to be realesed to JB

for iPhone / iPod touch (iOS 4.1) and iPad on iOS 3.2.2, This Jailbreak will be FOREVER, Apple will not catch this forever! YES! Forever.

 Wait for GreenPois0n here

Stay Updated with us by

Twitter 

and

Facebook 

Give Us Thanks by Like and Retweet

9:42 PM by iPhone Jailbreak · 92

SHAtter Jailbreak's Tethered Status Has NOT Been Announced

Some sites are reporting that the SHAtter jailbreak originally discovered by pod2g is a tethered jailbreak. In fact, its tethered status has not been announced yet.

According to the Chronic Dev Team's blog :

"Anything you read saying it is one of the above in definite terms is just speculation, again, we have not given official word about the tether status or any details regarding the exploit used."

The team also reiterated this in a retweet yesterday, "SHAtter is not a tethered jailbreak nor it is untethered... @chronicdevteam have not yet announced anything about that. Stop speculations :)"

Stay tuned for more information as it becomes available @Spirit

Read More

You may also like :

• GreenPois0n to Jailbreak iPhone 4, iOS 4.1 !!
• SHAtter Jailbreak in the final steps ?
• The first Video for Nokia N8 unboxing Vs iPhone? + 30 Photo By its Camera 12 Mpx
• [video] Jailbreak PlayStation 3 / PS3 with iPhnoe 3G/ 2G and iPod Touch 1G using PSFreedom
•  

6:25 AM by iPhone Jailbreak · 0

SHAtter Jailbreak in the final steps ?

Just a quick little heads-up chronic-dev, the guys behind the SHAtter Jailbreak just added a new update in the official blog, confirmed that they are making steady progress with the new jailbreak tool, also they have been much asked about the release date but till now they still can''t give an estimate for this date.

Although we still can’t give any details of the exploit(s) that need to be used, I figured I’d make an update here to just let you guys know that we are still working hard on the jailbreak and making steady progress. Please keep in mind that even though we have had the method for awhile, there was a certain very key element that we (or rather, pod2g the great) only got working a few days ago, so it’s not like we have this packaged up and we are just sitting on it. It is being actively worked on as I type this (the loader, the payload itself, the easy to use computer-side tools, the payload, the patches, etc. Just hang tight, it will definitely be worth it.

We already mentioned that SHAtter will jailbreak all iOS devices for ever, so we have to wait and see,  keep tuned for immediate updates.

You may also like:

• HTC = iPhone by Porting iOS 4 Successfully on it see [Video]
• SHAtter is a Tethered Jailbreak
• How to: Jailbreak iPhone 3G on iOS 4.1 with Redsn0w
• New iPad with FaceTime Coming on 2011?

7:00 PM by iPhone Jailbreak · 0

SHAtter is a Tethered Jailbreak !!

Yesterday we told you about SHAtter and it will jailbreak all existing devices forever as it's a bootrom based jailbreak which acts on the hardware of the device. But unfortunately, there's a semi-confirm floating on the web today. p0sixninja may be sending a message to tell people that SHAtter is a tethered jailbreak (i.e. you will be required to connect your iOS device to your computer on every reboot).

Someone asked him if SHAtter would jailbreak his girlfriend, p0sixninja answered the following:

yea but you gotta plug her everytime you wanna do it

According to the well-known iPhone hacker Vincet, they are working on doing making the jailbreak untethered but they will not success. Of course, we will keep you informed about any updates.  

[via Twitter]

3:54 PM by iPhone Jailbreak · 2

[Exclusive] iOS 4.1 Jailbreak Appears in a Video

BIG NEWS! iOS 4.1 gets a fast jailbreak demo in a video, we don't know the source but 9to5mac could get their hands on the video. According to the video description, iOS 4.1 jailbreak will be released to public very soon for all devices including iPhone 4, iPod touch 4G, and iPad. Here's the full description and the video posted after the jump.

This video shows a demo of the newly announced 4.1 jailbreak. The jailbreak will be released to the public soon. The jailbreak has been conformed working on the iPod Touch 4th Generation (4G), iPad, and the iPhone 4.

The video don't prove anything but it may be true! We already talked before about the iOS 4.1 jailbreak and the exploit (which may be named SHAtter) which p0sixninja and pod2g are working on, Anyway, it's going to go public soon to free all devices forever.

7:34 PM by iPhone Jailbreak · 0

[SHAtter] New Jailbreak for ALL Existing iOS Devices Forever [Updated]

According to a new post on the iPhone wiki from the well-know iPhone hacker p0sixninja, reveals some information about the exploit (named SHAtter) discovered by him and pod2g. The information refers to a new bootrom based exploit which will make all current iOS devices always perform the jailbreak forever.

p0sixninja worked a lot for this vulnerability, then pod2g made a process to run the exploit on iOS 4.1 yesterday. SHAtter is the codename source for this exploit, this vulnerability acts on the hardware of the device, so Apple can't close this hole, only on the new devices.

All Apple devices produced before the release of this exploit will be free forever, including the newly released iPod touch 4G and the iPad. The next jailbreak may be tethered (not confirmed yet) which means you have to connect your device to your computer to be able to reboot it.

Anyway Apple loses the fight. As usual, we will keep you informed by any updates about this jailbreak that will frees all devices. [via Twitter]

Update 1: p0sixninja discarded the tweet and deleted SHAtter page from the wiki blog because the information was accidently misleading. Will Strafach updated his post to include more information and facts,

- We have not yet announced if this is tethered or untethered
- We have not yet announced details about the exploit
- Anything you read saying it is one of the above in definite terms is just speculation, again, we have not given official word about the tether status or any details regarding the exploit used.

We will keep updating for more information we get.

4:17 PM by iPhone Jailbreak · 2