https://ps.tc/pages/blog-usbliter8.html 🏫 MY COURSES Sign-up for my FREE 3-Day C Course: https://lowlevel.academy 🧙♂️ HACK YOUR CAREER Wanna learn to hack? Join my new CTF platform: https://stacksmash.io ⌨️ KEYBOARD Like what you hear? Grab a Q5 at https://go.lowlevel.tv/keyboard 🔥COME HANG OUT Check out my other stuff: https://lowlevel.tv
ADVERTISEMENT
Governments don't need exploits to get the data from your phone at the airport. They just say "unlock it or you're not getting in the country" and the courts are okay with that. They are ALREADY doing this.
Finally some good bad news
This bug might not be a "vulnerability" but it's sure going to make jailbreaking a cinch. I'm waiting for the other shoe to drop on this one.
The joy from you having a new low level bug to investigate NOT related to npm or AI is just 👌 *chef's kiss*
oh yeah the good part is you can use this to jailbreak your phone hehe anyway if you like these sign up for my newsletter @
user data is still safe tho as this doesnt affect sep and bpr forces sep to not give decryption keys
physical access is KING
Where’s the permaJailbreak for 13/14/15!!!
You can feel the enthusiasm when it's not another npm supply chain vulnerability
I wonder what exploits are in the latest phones we don’t know about yet
Side note, juice jacking or similar is actually a decent risk because it's very easy to put an Apple device into DFU over USB. I believe this can be done by issuing a VDM command over the PD spec. We see this can be done with DFU blaster as an example of software in the wild. Obviously they would still have other layers to get through, but removing DFU is one less layer.
0:44 this could have been a bada beat bada boot instead
Always use a usb link without data pins when outside
FWIW: "Apple iPhones with the A12 Bionic chip include the iPhone XS, iPhone XS Max, and iPhone XR. Apple iPhones with the A13 Bionic chip include the iPhone 11, iPhone 11 Pro, iPhone 11 Pro Max, and the second-generation iPhone SE" — it happens that I have a second-generation iPhone SE, but I was planning on updating that later this year anyway.
You're literally at ring 0 at this level and can do whatever you like. Nice find! They would have got a massive bug payout for that.
iPhone 11 and earlier are about 8% of the current installed based.
does it mean that they can also jailbreak those phones now?
A friend of a friend told me that replacing the screen is a way to circumvent ios and it's usually done before a certain specific user gets their " new " iphone
Pretty sure the DFU has another meaning, starts with dumb and ends with user…..
Custom ROMs on iPhones you say...