Jailbreak Tool 'unc0ver' 5.0 Released With iOS 13.5 Compatibility

[TiggrToo]

Sandboxing only applies to App Store apps. Things you install from Cydia have no limitations in regards to power so it's the user's responsibility to choose carefully.

Oh, well that's OK then. So much for the sandbox I guess.

I still don't get how code reviews matter here. A bug in our code can only cause stability issues, not security issues, our patches regarding giving processes privileges are deterministic by design, they either always work or never do.

Are you for real? How on earth do your think you got Jailbreak to begin with? A bug caused a security issue that you got to exploit with this.

Of course jailbreaking requires you to misuse things, it's literally a hack and "to hack" means "to use in an unintended manner".

So now you're making up terminology now? At best in computer parlance Hacking involved breaking into computer systens or the like. These days hacking also includes clever ways to solve problems.

 

[nvarga]

I installed snowboard and few other tweaks which are free just to find out that almost none of them work or do not work well. I even found that I have few paid tweaks waiting for me in Cydia - I bought theese few years back. But this were no pirated tweaks.

 

[Jake James]

I installed snowboard and few other tweaks which are free just to find out that almost none of them work or do not work well. I even found that I have few paid tweaks waiting for me in Cydia - I bought theese few years back. But this were no pirated tweaks.

What repo you got them from?
[automerge]1590996723[/automerge]

Oh, well that's OK then. So much for the sandbox I guess.



Are you for real? How on earth do your think you got Jailbreak to begin with? A bug caused a security issue that you got to exploit with this.



So now you're making up terminology now? At best in computer parlance Hacking involved breaking into computer systens or the like. These days hacking also includes clever ways to solve problems.

What's your point? Someone's going to exploit a bug in the jailbreak? You know that you're comparing a jailbreak with a super-complex system with a huge attack surface? You know that there's no security issues without attack surface? And you know that a system with a small attack surface can easily be unhackable?

I'm not making up anything. Using something in an unintended and clever way is hacking that thing. "Hack" is not a computer specific term.

 

[nvarga]

Dont remember the repo. I only tested jb for two hours. That was enough to get in potential problems. I am wondering if changing Apple ID pasa was enough - I changed it right after I remove jb. I supose sideloading app is to blame but apperently whole process is problematic from users perspective and should be avoided.

 

[Jake James]

Dont remember the repo. I only tested jb for two hours. That was enough to get in potential problems. I am wondering if changing Apple ID pasa was enough - I changed it right after I remove jb. I supose sideloading app is to blame but apperently whole process is problematic from users perspective and should be avoided.

The jailbreak nor sideloading caused the problem. Millions of users have used the jailbreak. (I know they'll kill me without a source, so here you go:

https://twitter.com/x/status/1267057508935274499

). If those caused problems you'd hear complaints from tons of people.

All the possible options are:
- you installed a malicious package (yes free tweaks can also be pirated, pirate repos rehost them all the time)
- you installed an unofficial and malicious AltStore (people also tried to infect unc0ver with malware and upload it to no-computer sites but the DRM blocked their attempts, I wouldn't be surprised if they did it with AltStore too)
- your computer was already infected and all they had to do is wait for you to type the Apple ID
- something else completely unrelated to the jailbreak or installation process (a coincidence)

 

[chucker23n1]

I still don't get how code reviews matter here. A bug in our code can only cause stability issues, not security issues,

Er.

How do you figure that?

our patches regarding giving processes privileges are deterministic by design, they either always work or never do.

Yeah, or, y'know, they do the intended thing but also do an unintended thing.

 

[Jake James]

Er.

How do you figure that?

Yeah, or, y'know, they do the intended thing but also do an unintended thing.

I made a detailed comment some time ago. You can find it above if you scroll. The short answer is they're like that by design. They're deterministic (before comparing it to a full operating system and tell me nothing is unhackable, read my other comment saying such a comparsion is not fair, because an operating system is complex and has a lot of attack surface). The logic of the patches is simple:

if from app store or stock then add exceptions
else fully unsandbox and decontainerize

 

[diddl14]

i don’t think this can be patched

Looks like it can https://www.macrumors.com/2020/06/01/apple-releases-ios-13-5-1/