Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
iPod touch iPod touch TIFF exploit!!!!!!!
- Thread starter PowerFullMac
- Start date
- Sort by reaction score
It's only a possible opening at this point-
It is a very promising development, but by no means is it 100% for sure gonna lead to a jailbreak.
Right now they are trying to use the exploit to, well, here's their words:
http://www.touchdev.net/wiki/TIFF_Exploit
They have to be able to deliver code via the buffer overflow, without causing Safari to crash, otherwise the code won't run. The code has to be small, but it may be enough to then lead to another 'payload' that won't be restricted in size and can really do some damage...
It is a very promising development, but by no means is it 100% for sure gonna lead to a jailbreak.
Right now they are trying to use the exploit to, well, here's their words:
http://www.touchdev.net/wiki/TIFF_Exploit
They have to be able to deliver code via the buffer overflow, without causing Safari to crash, otherwise the code won't run. The code has to be small, but it may be enough to then lead to another 'payload' that won't be restricted in size and can really do some damage...
Just dont update until the new version is hacked. The Touchdev and iPhone Dev Team are still working on decrypting the firmware.
Seriously, it seems like TIFF exploits are the easiest exploits to find. This started the whole underground hacked firmware PSP scene, this has been done on PS3 firmware before, and now we got it on the iPod. Not surprising at all really, although you would think developers would start getting wise about this and prevent this from the get go.
Hmm ... buffer overflow allowing execution of arbitrary code. Sound familiar?
Anyone who doesn't update after Apple fixes this is crazy. You'll be leaving a security hole wide open.
Using vulnerability exploits to get third party apps working is also crazy. Wait till Apple opens the iPhone.
Anyone who doesn't update after Apple fixes this is crazy. You'll be leaving a security hole wide open.
Using vulnerability exploits to get third party apps working is also crazy. Wait till Apple opens the iPhone.
I think actually making use of this exploit takes more work though.
All the exploit will likely do is open a tiny crack that will allow a user to proactively jailbreak their Touch/iPhone (meaning an active step must be taken by the user to actually jailbreak or otherwise modify the unit.)
The exploit won't overwrite any flash ROM, that's why they have to come up with a way to load code without crashing the browser. Because if the browser crashes, any possible exploit is wiped out.
I don't know that the TIFF exploit has ever been used on another browser to load a bunch of code and run it on a machine, otherwise you think hackers would try to mess with peoples' PSP's.
All the exploit will likely do is open a tiny crack that will allow a user to proactively jailbreak their Touch/iPhone (meaning an active step must be taken by the user to actually jailbreak or otherwise modify the unit.)
The exploit won't overwrite any flash ROM, that's why they have to come up with a way to load code without crashing the browser. Because if the browser crashes, any possible exploit is wiped out.
I don't know that the TIFF exploit has ever been used on another browser to load a bunch of code and run it on a machine, otherwise you think hackers would try to mess with peoples' PSP's.
What are they going to do, steal my phone number and billing information.. It is an iPod.
They will not be opening the iPhone or iPod for a long time if ever. this is very good news if it is able to be used. and if this firmware gets hacked I will not update until the next version is hacked.
as a psp owner, firmware update patch and disable homebrew, I am not updating my firmware on my iPt .
I don't think you've thought this through. It's an iPod-only now because there are no third party apps.
So, say the iPod Touch hackers working on this find a way of using a buffer overflow to install third party apps. You like the idea of having a small tablet-like device (who doesn't) and you find some very useful PDA-type apps.
Apple fixes the exploit. You don't update your iPod because you don't want to lose your third party apps. Suddenly, every iPod touch that has working third party apps also has the exploit through which arbitrary code can be run. All the information you've put on your iPod is now vulnerable.
I know i probably sound daft but what does this actually all mean? We can add our own applications on ipod touch?
And you'd have to open a tiff that opens you to attack. I don't see a high risk here.
They get read/write access to 1.1.1 on the iPhone! Not long before the Touch follows in its footsteps me thinks! Clicky clicky!