Separate names with a comma.
Discussion in 'Jailbreaks and iOS Hacks' started by trayloader, Feb 23, 2014.
At the moment both SSL patches are dependent to pre 7.0.6.
Thanks for your help
Give it some time, they'll make it compatible for those JB on the 7.1 beta.
you can always try spoofing your version to 7.0.4 but not sure if that's a good idea or not
You can try the tweak created by Ryan Petrich. It can be found in his beta repo http://rpetri.ch/repo
The tweak is called SSLPatch. It works with 7.1 B3 on my iPhone 5. Although I have modify my SystemVersion.plist and changed ProductVersion to 7.0.4.
You can visit http://gotofail.com before and after with your safari browser to check if the patch worked correctly.
the public release of the SSL patch has been pushed to the bigboss repo now
Yep worked on 7.1b2 on rmini and iPhone 5 spoofed to 7.0.4 as well. I know because gotofail.com on 10.7.1 safari fails
Is this patch adequate in fixing this issue or should we upgrade to 7.0.6?
there are caveats to the patch
-does not work in safe mode
-does not work in root apps like ifile and cydia
What about iMessages and other apps from AppStore such as bank apps?
Can't find it now, was on reddit.com/r/jailbreak
I don't believe either of those items fall into the caveats
i believe the patch depends on mobilesubstrate (which is disabled in safe mode and mobilesubstrate addons are not injected in root apps,which is why tweaks such as showcase or swipeselection don't work in cydia or ifile)
Personally I think it's worth backing up, and then restoring to 7.0.6; more hassle in the short run, but less in the long run.
Anyways that's what I did for all my jailbroken devices; most time was spend restoring my apps, pictures, and data, but I could still use my phone while it was being done.
Just wanted to chime in here. I've been working with a fantastic developer over on GitHub to get this patch running on 7.1 (just changing the firmware requirements). We (they -- I didn't do anything but test it) got it working this morning so I wanted to pass it along. The below deb will work on the 7.1 betas.
Link to deb here: https://github.com/kerautret/SSLPat...inusyang.cve-2014-1266_0.3-1_iphoneos-arm.deb
Install using the Cydia AutoInstall folder or using dpkg -i in Mobile Terminal.
Here is the link to the pull request discussion incase anyone wanted to follow along: https://github.com/linusyang/SSLPatch/pull/1
BTW, I don't really understand why it needed to be recompiled for 7.1. After my removing the <=7.0.6 condition from the original DEB file, I could install it just fine on my spoofed 7.1b3 iPad 3. Needless to say, Safari is protected; that is, the tweak does work.
All I needed was just removing that condition, nothing else.
That's absolutely all that was necessary but I didn't have the iOS and Cydia toolchains installed on my laptop to be able to recompile it. Was it possible to extract the deb and do this without the toolchain?