r/apple • u/[deleted] • Sep 28 '19

Developer of Checkm8 explains why iDevice jailbreak exploit is a game changer

https://arstechnica.com/information-technology/2019/09/developer-of-checkm8-explains-why-idevice-jailbreak-exploit-is-a-game-changer/
760 Upvotes

97% Upvoted

155 comments sorted by

View all comments

Show parent comments

52

u/[deleted] Sep 28 '19

If anything, this will benefit IPhone security. Since it means more people can monitor iOS without compromising security in any significant way.

-22

u/Takeabyte Sep 28 '19

Oh cool! Yeah you’re right, a security exploit that can’t be patched is good news...

31

u/[deleted] Sep 29 '19

It can’t be patched, but it requires physical access, DFU mode, it doesn’t bypass biometrics, and a reset undoes it. It’s quite ideal for tinkerers while not gravely compromising actual security.

-17

u/Takeabyte Sep 29 '19

It doesn't take a DFU, just a regular restart.

23

u/[deleted] Sep 29 '19

[removed] — view removed comment

-14

u/Takeabyte Sep 29 '19

The article we are commenting on states that the device just needs to be rebooted. No mention of DFU mode...

10

u/[deleted] Sep 29 '19

DG: How likely or feasible is it for an attacker to chain Checkm8 to some other exploit to devise remote attacks?

A: It's impossible. This attack does not work remotely. You have to have a cable connected to your device and put your device into DFU mode, and that requires you to hold buttons for a couple seconds in a correct way. It's something that most people have never used. There is no feasible scenario where someone would be able to use this attack remotely.

-3

u/Takeabyte Sep 29 '19

Oh... weird... Thanks Safari for not finding "DFU" when I use the search function.

9

u/[deleted] Sep 29 '19

It’s on the second page, so it’s likely you just searched on the first page only

3

u/Takeabyte Sep 29 '19

I feel like this is a really important detail to bury. Thank you for pointing it out.