Hacker News new | ask | show | jobs
by nfriedly 6 days ago
This is awesome news! It isn't a jailbreak in and of itself, but it is the first step.

Right now we only have a reliable jailbreak (checkm8) for up to iOS 18 (and that's only thanks to one iPad model). Some app developers are pretty aggressive about dropping support for older iOS versions.

This affects iPhone XR, XS, 11, SE 2nd gen, and a smattering of iPads. Many of these devices got the iOS 27 beta and will likely see future iOS versions for at least another year or two.

Edit: here's the affected iPads:

* iPad Pro 11" (gen 1-2)

* iPad Pro 12.9" (gen 3-4)

* iPad mini (gen 5)

* iPad Air (gen 3)

* iPad (gen 8-9)

1 comments

Also great new for Cellebrite?
Reboot your phone after the feds have it before you unlock it again
Once the feds have the phone, they aren't going to allow him to touch it, much less reboot it.
They have to reboot it to use a bootloader exploit. Reboot it again after you get it back to erase whatever they did.
I realized they might have added a fake reboot menu. So either use the exploit yourself to check it's the real bootloader (no realistic chance the FBI made a fake bootloader exploit in the fake reboot menu) or let the battery run out or remove it.
All Apple mobile devices I've used have had some form of low-level forced reboot method, akin to holding down your PC's power button. Though I can't say whether it's also something one could subvert with a BootROM exploit.

https://support.apple.com/guide/iphone/force-restart-iphone-...

Nobody is going to add a fake reboot menu
seems like a huge amount of effort when they could simply give you a bugged phone of the same model that automatically transmits the passcode to them when you enter it. Newest ios are usually vulnerable to Cellebrite anyways.
Not unless they also have a SEP exploit.