Apple made it in such a way that it is extremely difficult to jailbreak its new versions of the iOS. However, two new releases permit people to install applications on their iPhones: the first one is a classical jailbreaking tool, and the other is a substitute app store that uses a gap in Apple’s code-signing procedure.
Is This The Beginning Of The End For Apple?
Security researcher and hacker @axi0mX posted last Friday, a jailbreak bug on his Twitter page. The bug strikes all versions of iPhone 4S to iPhone X, which are powered by Apple’s A5 chipset, released back in 2011. The bug, however, doesn’t affect the iPhone 11 series announced this month, running the tech giant’s new A13 processor.
The code was released on GitHub for free, and it is based on a race hazard in Apple’s boot ROM. This type of hardware piece is something Apple cannot patch. To prove it, @axi0mX also uploaded a video of an iPhone stating in verbose mode, using the most recent iOS 13.1.1 version. The jailbreak was named ‘checkm8.’
The jailbreak only functions in memory, meaning that it must be run each time the phone starts up. Also, the bug doesn’t alter Touch ID or the Secure Enclave, which means it isn’t that advantageous for companies trying to steal data from iPhones.
An Alternative To App Store
The second release talks about a get-around to Apple’s App Store. Developer Riley Testut published AltStore, an alternative app store for those who don’t want to jailbreak their devices. The tech giant’s App Store only enables people to install apps that exist in its own app store. The new system is based on an Apple policy that permits users to install their own apps utilizing their own Apple ID.
How AltStore Works
To make the newly released App Store alternative work, users have to install a program called AltServer on their PC, which then manages the iPhone through the iTunes wireless sync ability. It utilizes the owner’s Apple ID to enter the AltStore app on the phone, then other third-party apps the user wants.
Apple only permits apps installed with a user’s Apple ID to function for seven days before resuming them. To workaround, AltServer renews the apps for you, but you have to sync with the program at least once a week.
Moreover, the tech giant only allows three apps approved by the iPhone’s owner on the device at all times. It does this by verifying for provisioning files when users install a new application.
AltServer removes all the unapproved apps’ provisioning files when you install a new app, and then puts the other profiles back. Apple only verifies these profiles when you install a new app, so AltServer can use this method to allow you to install whatever apps you want.
Even though Testut has discovered a feasible way to enable users to install apps on the iPhone without needing to jailbreak it, Apple could change the way it verifies the provisioning profiles.
On the other hand, @axi0mX’s jailbreaking tool could do a lot more damage to the Cupertino-based giant.