Spirit! not forever…

A couple of days ago, one of the hackers of the Dev-Team , namely, some Comex , released a " untethered jailbreak " for the iPhone and iPad. Finally, iPhone 3GS users no longer depend on the computer, and iPad users were able to appreciate all the delights of jailbreaking on the new device. But not everything is as sweet as it would seem ...



Despite everything and everyone - Spirit is not the jailbreak we used to see. Yes, it breaks all the firmware, including the new 3.1.3, and theoretically it can even crack 2.x firmware, but that's not the point. It is important to understand how the newly appeared Jail works, in order to understand that this is not forever.



Spirit consists of 3 expoits:

MobileBackup Copy Exploit - pushes dlib and plist

Incomplete Codesign Exploit - does not verify the dlib signature

BPF_STX Kernel Write Exploit - allows writing to kernel memory.

')

And it works like this:

1. Through AFC he drives a demon (dlib) and plist

2. Reboot the machine

3. When restarting, override is triggered and the same daemon is loaded (tcpdump)

4. Dlib docks to tcpdump daemon



Well, since dlib does not require any digital signatures, the procedure goes without any problems. Neither the core nor the iBoot itself see any dirty tricks.

However, this is still a software vulnerability and you just need to add a scan of all dlib to the kernel for digital signatures to forget about Spirit forever.

Most likely in the near future, Apple will release an updated firmware for the iPad where this vulnerability will be closed, but for the iPhone it is unlikely, on the nose 4.0.



It is curious that Comex himself writes on his website:

" Source code will be available after inevitable update. "

Literal translation - Source codes will be accessible after the imminent update ...



All the same, we are waiting for what hackers will come up with in order to get an untethered jailbreak on OS 4.0.

There is also such a thought - if Spirit was released without waiting for 4.0, then Dev-Team has a better solution. And how we all really find out in June.

We wait and slowly say goodbye to the Spirit!