Apple Credits 'Evad3rs' Jailbreak Team for Discovering Security Issues Fixed in iOS 7.1

[MacRumors]

Apple has credited the evad3rs jailbreak team with discovering several security issues, according to a new Knowledge Base article that details security issues fixed in iOS 7.1 today. The company also credits a number of individual researchers -- including one named Roboboi99 -- as well as corporate security specialists from Google and FireEye, among other companies.

As is common at many tech companies, Apple credits security researchers who discover vulnerabilities in its products after it fixes them, though the company does not offer a bounty program to financially reward researchers like many other companies do.

In iOS 7.1, Apple fixed security issues with Backup, the Certificate Trust Policy, Configuration Profiles, CoreCapture, Crash Reporting, dyld, FaceTime, ImageIO, IOKit HID Event, iTunes Store, Kernel, Office Viewer, Photos Backend, Profiles, Safari, Settings, SpringBoard, SpringBoard Lock Screen, the TelephonyUI Framework, USB Host, Video Driver, and WebKit.

Of course, with Apple fixing the security issues that the jailbreak team discovered, it has also closed the loopholes that allowed a jailbreak in the first place. For now, the last version of iOS that can be jailbroken is iOS 7.0.6.

Article Link: Apple Credits 'Evad3rs' Jailbreak Team for Discovering Security Issues Fixed in iOS 7.1

 

[-LikesMac-]

Whoah!

Apple acknowledged them like this?...this is not something you see everyday.

Things have been changing at Apple, haven't they.

 

[Dulcimer]

That's kind

 

[lewisd25]

Thanks Evad3rs......

 

[KALLT]

There is also a certain irony in this. Apple thanking the jailbreak developers for exposing the loopholes that made their jailbreaks possible. Especially when one considers the events surrounding the iOS 7 jailbreak at the time and the resulting fear that another jailbreak (for iOS 7.1) may be far, far away.

 

[Intell]

Apple acknowledged them like this?...this is not something you see everyday.

Things have been changing at Apple, haven't they.

Apple has done this type of stuff in the past. Most of the userland jailbreak exploit bug fix reports are attributed to a jailbreak developer.

 

[Vanilla35]

Sooooo when do we get the 7.1 jailbreak

That's what I've been waiting for since November

 

[Nicky G]

Very misleading post title, should be corrected to clarify issues that are FIXED in 7.1. Title makes it seem like the issues are in the 7.1 release build.

 

[furi0usbee]

Boom! That's one right in the kisser. I wonder who has the sense of humor. It's certainly not Tim Cook.

 

[iapplelove]

I thought over the last few years apple and the jailbreak teams have been playing nice?

 

[Goftrey]

Live & let live I guess.

 

[patent10021]

I don't JB anymore but what say you now jailbreak haters? See, not only are JBs practical and useful, they bring to light security flaws. You don't see JBers using the exploits to destroy Apple functionality. Functionality is actually added and improved. Apple steals good jailbreak ideas and that's a known fact. A lot of the features YOU like in iOS are from jailbreaks. Pretty much Apple just admitted everything JBers have been saying all along.

 

[dave420]

There is also a certain irony in this. Apple thanking the jailbreak developers for exposing the loopholes that made their jailbreaks possible. Especially when one considers the events surrounding the iOS 7 jailbreak at the time and the resulting fear that another jailbreak (for iOS 7.1) may be far, far away.

Yes, there was a lot of criticism about the decision to release the recent jailbreaks. In the end I think it is better that the exploits get patched quickly. It also seems like it was quite a while ago that the jailbreak was made available.

 

[dannyyankou]

Don't really jailbreak anymore anyway.

 

[jlgolson]

Very misleading post title, should be corrected to clarify issues that are FIXED in 7.1. Title makes it seem like the issues are in the 7.1 release build.

You are absolutely right. Fixed that.

 

[Ajones330]

Hopefully iOS 8 will have some of the new features using touch i.d. from the recent jailbreak. I don't change themes on the devices but I love the tweaks...

 

[ArtOfWarfare]

I don't JB anymore but what say you now jailbreak haters? See, not only are JBs practical and useful, they bring to light security flaws. You don't see JBers using the exploits to destroy Apple functionality. Functionality is actually added and improved. Apple steals good jailbreak ideas and that's a known fact. A lot of the features YOU like in iOS are from jailbreaks. Pretty much Apple just admitted everything JBers have been saying all along.

I think most jail breakers are fans of Apple and their products... the people that actually want to break into your phone and do nefarious things with what they find won't release a jailbreak or tell Apple about it. They'll just silently setup a charging stand in a public place and install their malware on the phones of as many victims as possible, who will just assume it's some kind of random act of kindness or a public amenity, like a drinking fountain.

 

[zorinlynx]

I still wonder why they released a jailbreak for 7.0 instead of waiting for 7.1, which is a lot more polished.

We could all be using a jailbroken 7.1 soon if they hadn't "blown their wad" on 7.0.x.

Sigh.

 

[DFZD]

I think most jail breakers are fans of Apple and their products... the people that actually want to break into your phone and do nefarious things with what they find won't release a jailbreak or tell Apple about it. They'll just silently setup a charging stand in a public place and install their malware on the phones of as many victims as possible, who will just assume it's some kind of random act of kindness or a public amenity, like a drinking fountain.

That's what Google and Facebook have been doing since the beginning of the internets, "Installing Malware on the phones of as many victims as possible."

 

[Crzyrio]

I still wonder why they released a jailbreak for 7.0 instead of waiting for 7.1, which is a lot more polished.

We could all be using a jailbroken 7.1 soon if they hadn't "blown their wad" on 7.0.x.

Sigh.

But if they released it for 7.1 then what about 7.2? or 7.1.1?

Its a cat and mouse game, they got quiet a few months out of the 7.0 jailbreak.

 

[Puponautas]

I still wonder why they released a jailbreak for 7.0 instead of waiting for 7.1, which is a lot more polished.

We could all be using a jailbroken 7.1 soon if they hadn't "blown their wad" on 7.0.x.

Sigh.

between iOS 7 and iOS 7.1 was 4 months period, so then people would moan that why they didnt release for iOS 7....

 

[macnisse]

Honor to whom honor is due

 

[Menel]

I still wonder why they released a jailbreak for 7.0 instead of waiting for 7.1, which is a lot more polished.

We could all be using a jailbroken 7.1 soon if they hadn't "blown their wad" on 7.0.x.

Sigh.

And 7.1 would be crappy and less secure.

As it turns out, the xx millions with iPhones are now locked down tighter and more secure than ever.

 

[everything-i]

Oh, I bet they're just thrilled about that.

 

[Binarymix]

And Evad3rs will soon release a 7.1 jailbreak, thanking Apple for making the iPhone.