Misplaced Pages

Evasi0n

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
#296703

51-451: Evasi0n is a jailbreak program for iOS 6.0-6.1.2, released on 4 February 2013, made by the evad3rs team. An updated version for iOS 7.0-7.0.6, evasi0n7 , was released on 22 December 2013. More than seven million copies of evasi0n were downloaded in the first four days after release. It is known for a portable code base and minimal use of arbitrary code execution . Four of the six exploits used were patched by Apple on 18 March 2013 with

102-583: A Jailbreak utility would be Redsn0w. Through this software, iPhone users will be able to create a custom IPSW and unlock their device. Moreover, during the unlocking process, there are options to install Cydia the iPad baseband. Cybercriminals may jailbreak an iPhone to install malware or target jailbroken iPhones on which malware can be installed more easily. The Italian cybersecurity company Hacking Team , which sells hacking software to law enforcement agencies, advised police to jailbreak iPhones to allow tracking software to be installed on them. On iOS devices,

153-768: A Pulitzer-Winning cartoonist because it violated its developer license agreement, which specifically bans apps that "contain content that ridicules public figures." To access banned apps, users rely on jailbreaking to circumvent Apple's censorship of content and features. Jailbreaking permits the downloading of programs not approved by Apple, such as user interface customization and tweaks. Software programs that are available through APT or Installer.app (legacy) are not required to adhere to App Store guidelines. Most of them are not typical self-contained apps, but instead are extensions and customizations for iOS or other apps (commonly called tweaks). Users can install these programs for purposes including personalization and customization of

204-562: A computer. The kernel is usually patched using an application installed on the device without patches. This type of jailbreak has become increasingly popular, with most recent jailbreaks classified as semi-untethered. A few days after the original iPhone became available in July 2007, developers released the first jailbreaking tool for it, and soon a jailbreak-only game app became available. In October 2007, JailbreakMe 1.0 (also called "AppSnapp") allowed people to jailbreak iPhone OS 1.1.1 on both

255-400: A hundred Chinese characters per minute. Its popularity is also helped by its omnipresence on traditional Chinese computer systems, since Chu has given up its patent in 1982, stating that it should be part of the cultural asset. Developers of Chinese systems can adopt it freely, and users do not have the hassle of it being absent on devices with Chinese support. Cangjie input programs supporting

306-409: A jailbreak that does not require any assistance when it reboots up. The kernel will be patched without the help of a computer or an application. A tethered jailbreak is the opposite of an untethered jailbreak, in the sense that a computer is required to boot the device. Without a computer running the jailbreaking software, the iOS device will not be able to boot at all. While using a tethered jailbreak,

357-425: A jailbreaking tool for the iPhone 3G and iPhone 3GS on iPhone OS 3.0 called purplera1n, and blackra1n for iPhone OS version 3.1.2 on the 3rd generation iPod Touch and other devices. In October 2010, George Hotz released limera1n, a low-level boot ROM exploit that permanently works to jailbreak the iPhone 4 and is used as a part of tools including redsn0w. Nicholas Allegra (better known as "comex") released

408-420: A large CJK character set have been developed. All methods have their strengths and weaknesses. The pinyin method can be learned rapidly but its maximum input rate is limited. The Wubi method takes longer to learn, but expert typists can enter text much more rapidly with it than with phonetic methods. However, Wubi is proprietary, and a version of it has become freely available only after its inventor lost

459-614: A new iOS version that closed the exploit used in JailbreakMe 3.0. The German Federal Office for Information Security had reported that JailbreakMe uncovered the "critical weakness" that information could be stolen or malware unwillingly downloaded by iOS users clicking on maliciously crafted PDF files. On August 13, 2015, Apple updated iOS to 8.4.1, patching the TaiG exploit. Pangu and Taig teams both said they were working on exploiting iOS 8.4.1, and Pangu demonstrated these chances at

510-505: A patch released in iOS 6.1.3 to software exploits used by the original evasi0n iOS 6–6.1.2 jailbreak, in iOS 7.1 patching the Evasi0n 7 jailbreak for iOS 7–7.0.6-7.1 beta 3. Boot ROM exploits (exploits found in the hardware of the device) cannot be patched by Apple system updates but can be fixed in hardware revisions such as new chips or new hardware in its entirety, as occurred with the iPhone 3GS in 2009. On July 15, 2011, Apple released

561-642: A patent lawsuit in 1997. Due to these complexities, there is no "standard" method. In mainland China, pinyin methods such as Sogou Pinyin and Google Pinyin are the most popular. In Taiwan , use of Cangjie , Dayi , Boshiamy, and bopomofo predominate; and in Hong Kong and Macau , the Cangjie is most often taught in schools, while a few schools teach CKC Chinese Input System . Other methods include handwriting recognition , OCR and speech recognition . The computer itself must first be "trained" before

SECTION 10

#1732793268297

612-459: A program called Spirit in May 2010. Spirit jailbreaks devices including iPhones running iPhone OS 3.1.2, 3.1.3, and iPad running iPhone OS 3.2. In August 2010, comex released JailbreakMe 2.0, the first web-based tool to jailbreak the iPhone 4 (on iOS 4.0.1). In July 2011, he released JailbreakMe 3.0, a web-based tool for jailbreaking all devices on certain versions of iOS 4.3, including the iPad 2 for

663-418: A sandbox typical to that of an App Store application, as well as modifications to system files, it ultimately allows for the threat of malware . Users of a jailbroken device are also often forced to stay on an older iOS version that is no longer supported by Apple, commonly due to the unavailability of jailbreak on the newer versions. While using older versions of iOS is considered safe in most circumstances,

714-471: A series of kernel patches . A jailbroken device typically permits root access within the operating system and provides the right to install software unavailable through the App Store . Different devices and versions are exploited with a variety of tools. Apple views jailbreaking as a violation of the end-user license agreement and strongly cautions device owners not to try to achieve root access through

765-424: Is essential for the installation of third-party content. There are a few package managers specifically for jailbroken iOS devices, of which the most popular are Cydia , Sileo, Zebra and Installer 5 . Depending on the type of the jailbreak (i.e. ' rootless ' or ' rootful '), different security structures may be compromised to various degrees. As jailbreaking grants freedom over running software that isn't confined to

816-477: Is that both are used to grant the owner of the device superuser system-level privileges, which may be transferred to one or more apps. However, unlike iOS phones and tablets, nearly all Android devices already offer an option to allow the user to sideload 3rd-party apps onto the device without having to install from an official source such as the Google Play store . Many Android devices also provide owners

867-401: The /etc/launchd.conf file, which launchd consults. Evasi0n then applies patches in the kernel, bypassing address space layout randomization by triggering a data fault and reconstructing the kernel slide by reading the faulting instruction from the appropriate ARM exception vector . It produces an "untethered" jailbreak, which means that the jailbreak continues to work even after rebooting

918-633: The App Store was prohibited for most individual users without a purchased developer membership. After 2015, the ability to install 3rd-party apps became free for all users; however, doing so requires a basic understanding of Xcode and compiling iOS apps. Jailbreaking an iOS device to defeat all these security restrictions presents a significant technical challenge. Similar to Android, alternative iOS app stores utilizing enterprise certificates are available, offering modified or pirated releases of popular applications and video games, some of which were either previously released through Cydia or are unavailable on

969-544: The third-generation iPad for the first time. An iOS 6.X untethered jailbreak tool called "evasi0n" was released for Linux, OS X, and Windows on February 4, 2013. Due to the high volume of interest in downloading the jailbreak utility, the site initially gave anticipating users download errors. When Apple upgraded its software to iOS 6.1.3 it permanently patched out the evasi0n jailbreak. On November 29, 2014, TaiG team released their untethered jailbreak tool called "TaiG" for devices running iOS 8.0–8.1.1. On December 10, 2014,

1020-616: The "Rocky Racoon" untether by pod2g for iOS 5.1.1 on all iPhone, iPad, and iPod Touch models that support iOS 5.1.1. The iPhone Dev Team, Chronic Dev Team, and pod2g collaborated to release Absinthe in January 2012, a desktop-based tool to jailbreak the iPhone 4S for the first time and the iPad 2 for the second time, on iOS 5.0.1 for both devices and also iOS 5.0 for iPhone 4S. In May 2012 it released Absinthe 2.0, which can jailbreak iOS 5.1.1 untethered on all iPhone, iPad, and iPod Touch models that support iOS 5.1.1, including jailbreaking

1071-466: The 1970s to 1980s, large keyboards with thousands of keys were used to input Chinese. Each key was mapped to several Chinese characters. To type a character, one pressed the character key and then a selection key. There were also experimental "radical keyboards" with dozens to several hundreds keys. Chinese characters were decomposed into "radicals", each of which was represented by a key. Unwieldy and difficult to use, these keyboards became obsolete after

SECTION 20

#1732793268297

1122-447: The 1980s, Chinese publishers hired teams of workers and selected a few thousand type pieces from an enormous Chinese character set. Chinese government agencies entered characters using a long, complicated list of Chinese telegraph codes , which assigned different numbers to each character. During the early computer era, Chinese characters were categorized by their radicals or Pinyin romanization, but results were less than satisfactory. In

1173-457: The App Store due to these apps not complying with Apple developer guidelines. Many different types of jailbreaks have been developed over the years, differing in how and when the exploit is applied. When a jailbroken device is booting, it loads Apple's own boot software initially. The device is then exploited and the kernel is patched every time it is turned on. An untethered jailbreak is

1224-461: The Dev Team published redsn0w as a simple jailbreaking tool for Mac and Windows, and also updated PwnageTool primarily intended for expert users making custom firmware, and only for Mac. It continues to maintain redsn0w for jailbreaking most versions of iOS 4 and iOS 5 on most devices. George Hotz developed the first iPhone unlock, which was a hardware-based solution. Later, in 2009, he released

1275-566: The WWDC 2015. On September 16, 2015, iOS 9 was announced and made available; it was released with a new "Rootless" security system, dubbed a "heavy blow" to the jailbreaking community. On October 21, 2015, seven days after the Pangu iOS 9.0–9.0.2 Jailbreak release, Apple pushed the iOS 9.1 update, which contained a patch that rendered it nonfunctional. On January 23, 2017, Apple released iOS 10.2.1 to patch jailbreak exploits released by Google for

1326-451: The Yalu iOS 10 jailbreak created by Luca Todesco. On December 10, 2019, Apple used DMCA takedown requests to remove posts from Twitter. The tweet contained an encryption key that could potentially be used to reverse engineer the iPhone's Secure Enclave. Apple later retracted the claim, and the tweet was reinstated. Chinese input methods for computers Several input methods allow

1377-610: The app was updated to include support for iOS 8.1.2. On July 3, 2015, TaiG 2.3.0 was released, which includes support for iOS 8.0–8.4. On October 14, 2015, Pangu Team released Pangu9, their untethered jailbreak tool for iOS 9.0 through 9.0.2. On March 11, 2016, Pangu Team updated their tool to support iOS 9.1 for 64-bit devices. 4th & 5th generation (4K) Apple TV M1 based iPads 16.5.1 ( A12 - A14 , M1 ) 16.5 ( A15 - A16 , M2 ) M1 - M2 based iPads M1 - M2 based iPads Apple has released various updates to iOS that patch exploits used by jailbreak utilities; this includes

1428-550: The capability to modify or even replace the full operating system after unlocking the bootloader , although doing this requires a factory reset . In contrast, iOS devices are engineered with restrictions including a "locked bootloader" which can not be unlocked by the owner to modify the operating system without violating Apple's end-user license agreement. And on iOS, until 2015, while corporations could install private applications onto corporate phones, sideloading unsanctioned, 3rd-party apps onto iOS devices from sources other than

1479-485: The character 明 ("bright"). Despite its steeper learning curve, this method remains popular in Chinese communities that use traditional Chinese characters , such as Hong Kong and Taiwan ; the method allows very precise input, thus allowing users to type more efficiently and quickly, provided they are familiar with the fairly complicated rules of the method. It was the first method that allowed users to enter more than

1530-532: The computer. One of the early attempts was an electro-mechanical Chinese typewriter Ming kwai ( Chinese : 明快 ; pinyin : míngkuài ; Wade–Giles : ming-k'uai ) which was invented by Lin Yutang , a prominent Chinese writer, in the 1940s. It assigned thirty base shapes or strokes to different keys and adopted a new way of categorizing Chinese characters. But the typewriter was not produced commercially and Lin soon found himself deeply in debt. Before

1581-534: The concepts of iOS jailbreaking are therefore technically different from Android device rooting. Expanding the feature set that Apple and its App Store have restricted is one of the motivations for jailbreaking. Apple checks apps for compliance with its iOS Developer Program License Agreement before accepting them for distribution in the App Store. However, the reasons for Apple to ban apps are not limited to safety and security and may be regarded as arbitrary and capricious. In one case, Apple mistakenly banned an app by

Evasi0n - Misplaced Pages Continue

1632-688: The desired character from homophones, which are common in Chinese. Modern systems, such as Sogou Pinyin and Google Pinyin , predict the desired characters based on context and user preferences. For example, if one enters the sounds jicheng , the software will type 繼承 (to inherit), but if jichengche is entered, 計程車 (taxi) will appear. Various Chinese dialects complicate the system. Phonetic methods are mainly based on standard pinyin , Zhuyin /Bopomofo, and Jyutping in China, Taiwan, and Hong Kong, respectively. Input methods based on other varieties of Chinese , like Hakka or Minnan , also exist. While

1683-451: The device may be vulnerable to publicly known security flaws. In March 2021, jailbreak developer GeoSn0w released a tweak called iSecureOS which can alert the users of security issues found on their devices. The application works akin to antivirus software, in that it scans the files on the user's device and checks them against a database of known malware or unsafe repos. In June 2021, ESET Research confirmed that malware did exist on one of

1734-493: The exploitation of vulnerabilities. While sometimes compared to rooting an Android device , jailbreaking bypasses several types of Apple prohibitions for the end-user. Since it includes modifying the operating system (enforced by a "locked bootloader "), installing non-officially approved (not available on the App Store) applications via sideloading , and granting the user elevated administration-level privileges (rooting),

1785-545: The first or second of these methods are used; that is, the new user enters the system in a special "learning mode" so that the system can learn to identify their handwriting or speech patterns. The latter two methods are used less frequently than keyboard-based input methods and suffer from relatively high error rates, especially when used without proper "training", though higher error rates are an acceptable trade-off to many users. The user enters pronunciations that are converted into relevant Chinese characters. The user must select

1836-704: The first time (on iOS 4.3.3). It used a flaw in PDF file rendering in mobile Safari . Chronic Dev Team initially released Greenpois0n in October 2010, a desktop-based tool for untethered jailbreaking iOS 4.1 and later iOS 4.2.1 on most devices including the Apple TV, as well as iOS 4.2.6 on CDMA (Verizon) iPhones. As of December 2011, redsn0w included the "Corona" untether by pod2g for iOS 5.0.1 for iPhone 3GS, iPhone 4, iPad (1st generation), and iPod Touch (3rd and 4th generation). As of June 2012, redsn0w also includes

1887-402: The iPhone and iPod Touch, and it included Installer.app as a way to get software for the jailbroken device. In February 2008, Zibri released ZiPhone, a tool for jailbreaking iPhone OS 1.1.3 and iPhone OS 1.1.4. The iPhone Dev Team, which is not affiliated with Apple, has released a series of free desktop-based jailbreaking tools. In July 2008 it released a version of PwnageTool to jailbreak

1938-415: The installation of consumer software is generally restricted to installation through the App Store . Jailbreaking, therefore, allows the installation of pirated applications. It has been suggested that a major motivation for Apple to prevent jailbreaking is to protect the income of its App Store, including third-party developers and allow the buildup of a sustainable market for third-party software. However,

1989-416: The installation of pirated applications is also possible without jailbreaking, taking advantage of enterprise certificates to facilitate the distribution of modified or pirated releases of popular applications. A package manager or package-management system is a collection of software tools that automates the process of installing, upgrading, configuring, and removing computer programs. For jailbreaks, this

2040-598: The interface using tweaks developed by developers and designers, adding desired features such as access to the root file system and fixing annoyances, and making development work on the device easier by providing access to the file system and command-line tools. Many Chinese iOS device owners also jailbreak their phones to install third-party Chinese character input systems because they are easier to use than Apple's. In some cases, jailbreak features are adopted by Apple and used as inspiration for features that are incorporated into iOS and iPadOS . Jailbreaking also opens

2091-437: The introduction of Cangjie input method, the first method to use only the standard keyboard and make Chinese touch typing possible. Chu Bong-Foo invented a common input method in 1976 with his Cangjie input method , which assigns different "roots" to each key on a standard computer keyboard. With this method, for example, the character 日 is assigned to the A key, and 月 is assigned to B. Typing them together will result in

Evasi0n - Misplaced Pages Continue

2142-418: The jailbreak will still run as normal, such as making a phone call, texting, or using App Store applications. To be able to have a patched kernel and run modified code again, the device must be booted using a computer. This type of jailbreak is like a semi-tethered jailbreak in which when the device reboots, it no longer has a patched kernel, but the key difference is that the kernel can be patched without using

2193-408: The number of characters required to evoke it. Shuangpin ( 双拼 ; 雙拼 ), literally dual spell, is a stenographical phonetic input method based on hanyu pinyin that reduces the number of keystrokes for one Chinese character to two by distributing every vowel and consonant composed of more than one letter to a specific key. In most Shuangpin layout schemes such as Xiaohe, Microsoft 2003 and Ziranma,

2244-408: The phone. PCMag reported that evasi0n checks whether it is running on a Chinese-language computer, and, if so, installs Taiji, a Chinese app market, rather than Cydia . IOS jailbreaking iOS jailbreaking is the use of a privilege escalation exploit to remove software restrictions imposed by Apple on devices running iOS and iOS-based operating systems. It is typically done through

2295-449: The phonetic system is easy to learn, choosing appropriate Chinese characters slows typing speed. Most users report a typing speed of fifty characters per minute, though some reach over one hundred per minute. With some phonetic IMEs ( Input Method Editors ), in addition to predictive input based on previous conversions, it is possible for users to create custom dictionary entries for frequently used characters and phrases, potentially lowering

2346-438: The piracy repositories in the jailbreak community. The malware actively targeted iSecureOS to try to bypass the detection, but updates to the security app were quickly released and have mitigated the malware. Jailbreaking of iOS devices has sometimes been compared to " rooting " of Android devices. Although both concepts involve privilege escalation, they do differ in scope. Where Android rooting and jailbreaking are similar

2397-423: The possibility for using software to unofficially unlock carrier-locked iPhones so they can be used with other carriers. Software-based unlocks have been available since September 2007, with each tool applying to a specific iPhone model and baseband version (or multiple models and versions). This includes the iPhone 4S , iPhone 4 , iPhone 3GS , and iPhone 3G models. An example of unlocking an iPhone through

2448-438: The release of iOS 6.1.3. On 22 December 2013, the evad3rs released a new version of evasi0n that supports iOS 7.x, known as evasi0n7 . One major exploit used by this jailbreak was patched by Apple with the 4th beta of iOS 7.1 and two more with beta 5. The final release of iOS 7.1 fixed all the exploits used by evasi0n7. The evasi0n jailbreak first remounts the root file system as read-write and then achieves persistence by editing

2499-538: The then new iPhone 3G on iPhone OS 2.0 as well as the iPod Touch, newly including Cydia as the primary third-party installer for jailbroken software. PwnageTool continues to be updated for untethered jailbreaks of newer iOS versions. In November 2008 the iPhone Dev Team released QuickPwn to jailbreak iPhone OS 2.2 on iPhone and iPod Touch, with options to enable past functionality that Apple had disabled on certain devices. After Apple released iPhone OS 3.0 in June 2009,

2550-458: The use of Chinese characters with computers. Most allow selection of characters based either on their pronunciation or their graphical shape. Phonetic input methods are easier to learn but are less efficient, while graphical methods allow faster input, but have a steep learning curve . Other methods allow users to write characters directly via touchscreens , such as those found on mobile phones and tablet computers. Chinese input methods predate

2601-400: The user will still be able to restart/kill the device's SpringBoard process without needing to reboot. Many early jailbreaks were offered initially as tethered jailbreaks. This type of jailbreak allows a user to reboot their phone normally, but upon doing so, the jailbreak and any modified code will be effectively disabled, as it will have an unpatched kernel. Any functionality independent of

SECTION 50

#1732793268297
#296703