Re:Million Dollar iOS9 Bug Bounty
by captainmuon on Monday September 21, 2015 @11:07AM
(#10252780)
You used to be able to jailbreak one of the first iPhones and install Cydia just by visiting some page in Safari and clicking on a button, IIRC. I never did this myself, so my memories might be inaccurate though.
[ Parent
| on HN ]
Re:Million Dollar iOS9 Bug Bounty
by haywardsmyfault on Monday September 21, 2015 @12:01PM
(#10253138)
Right! One of the famous initial iPhone OS exploits involved a vulnerability in LibTiff. Decoding a crafted .tiff in Safari would grant the site's javascript root access.
Read more: https://books.google.com/books?id=1kDcjKcz9GwC&pg=PA9&lpg=PA...
It was actually a clever "Slide to Jailbreak" rather than a click.
You're correct. jailbreak.me I think it was called
It was always amusing to visit the Apple store and see a jailbroken iPhone on display when this vulnerability worked.
And it was resurrected later on - by comex, I think.