full-disclosure - Re: "Jailpassing" technique for iphones

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 21 Jul 2010 08:18:21 -0700
From: Michael Neal Vasquez <mnv@...mni.princeton.edu>
To: Full-Disclosure mailing list <full-disclosure@...ts.grok.org.uk>
Subject: Re: "Jailpassing" technique for iphones

He didn't really say "they used spirit" -- he said, the same technique.
Which, I presume means, taking advantage of the same flaw.  Same
methodology.  Not necessarily same tools.

I personally don't consider the same tool, the same 'technique'.  It's what
the tool does.  But if you do, then it's semantics.

Regardless - I agree with Thor.  Good link, as I hadn't seen the book.



On Wed, Jul 21, 2010 at 8:05 AM, hmmrjmmr@...il.com <hmmrjmmr@...il.com>wrote:

> You mean this book :
> http://www.amazon.com/iPhone-Forensics-ebook/dp/B0026OR3BW ?
>
> From what i gathered, this book was published in 2008 and Spirit jailbreak
> was released in 2010.
> So how can it contain the step-by-step of using the Spirit software to
> bypass the passcode when Spirit didn't even exist then?
>
> In fact, you can see a video of what the book talks about at
> http://www.youtube.com/watch?v=5wS3AMbXRLs where only redsn0w & purplera1n
> is mentioned and the method demo'ed does not use Spirit.
>
> Plus, the version of iPhone as at the date of the book/video is as at July
> 2009 and is definitely not the more recent iPhone firmware 3.1.3 as shown in
> the video at http://securitystartshere.org/page-vulns-jailpassing.htm
>
>
>> >-----Original Message-----
>> >From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-
>> >bounces@...ts.grok.org.uk] On Behalf Of Fionnbharr
>> >Sent: Wednesday, July 21, 2010 6:17 AM
>> >To: full-disclosure@...ts.grok.org.uk
>> >Subject: Re: [Full-disclosure] "Jailpassing" technique for iphones
>> >
>> >Yeah except that the same sort of technique was discussed, including step
>> by
>> >step guides, in the iphone forensics book.
>>
>> >
>> >On 21 July 2010 14:24, hmmrjmmr <hmmrjmmr@...il.com> wrote:
>> >> Interesting article and video on the modification and use of Spirit
>> >> jailbreak software to bypass the iphone passcode login and gain access
>> >> WITHOUT wiping out data stored on the iphone :
>> >>
>> >> http://securitystartshere.org/page-vulns-jailpassing.htm
>> >>
>> >>
>> >> _______________________________________________
>> >> Full-Disclosure - We believe in it.
>> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >> Hosted and sponsored by Secunia - http://secunia.com/
>> >>
>> >
>> >_______________________________________________
>> >Full-Disclosure - We believe in it.
>> >Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/