Earlier in the week, Zerodium, a premium zero-day acquisition platform, announced that a hacking team has developed a browser-based jailbreak for iOS 9.1 to win the $1 million bounty.
Zerodium doesn’t plan to release the jailbreak to the public, but instead plans to provide the iOS 9.1 jailbreak to “customers, whom the company has described as major corporations in defense, technology, and finance seeking zero-day attack protection as well as government organizations in need of specific and tailored cybersecurity capabilities.”
Daniel K, one of the key members of the Pangu team, has clarified on Weibo that they would never consider taking the challenge to win the $1 million bounty. Daniel also shared the slide which goes on to explain why they wouldn’t do it, which they had presented at the Ruxcon Security Conference in Melbourne held in late October.
They said the main reason for releasing the jailbreak to the public was to give users full control of their iOS devices, and for security research. They also thought that Mobile Safari based jailbreak was too dangerous as the exploits could be abused, which violated with the objective of releasing the jailbreak tool. They also point out that due to the criticality of the security vulnerability in Mobile Safari, Apple would end up releasing a fix as soon as possible.
The last browser-based jailbreak for iOS devices was JailbreakMe that was released back in 2011 by comex, a well-known hacker.
It is great that we have teams like the Pangu team working hard to bring us jailbreaks for the latest iOS software update like the Pangu Jailbreak for iOS 9 – iOS 9.0.2 and releasing them for free. We hope they can release a jailbreak for iOS 9.1 soon.
We’ll let you know as soon as we’ve any further updates about the iOS 9.1 jailbreak.
No comments:
Post a Comment