Talk:Incomplete Codesign Exploit - Revision history

Liamchat: i just noticed

2010-10-26T18:44:30Z

i just noticed

Jacob at 18:26, 26 October 2010

2010-10-26T18:26:55Z

Liamchat: it will make people want to jailbreak if they patch it

2010-10-26T18:18:26Z

it will make people want to jailbreak if they patch it

Jacob at 18:00, 26 October 2010

2010-10-26T18:00:01Z

Liamchat: cannot be patched

2010-10-26T17:56:39Z

cannot be patched

Redart at 07:44, 21 October 2010

2010-10-21T07:44:07Z

Qwertyoruiop: added a \n

2010-10-10T00:42:19Z

added a \n

Qwertyoruiop at 00:41, 10 October 2010

2010-10-10T00:41:44Z

Iemit737: New page: This has to be one of the most puzzling exploits in iOS. Since it was revealed in 3.1.3/3.2, Apple has yet to close it in 4.0, 4.02, or 4.1 or even 4.2 betas. Somehow, once you stick a d...

2010-10-10T00:23:18Z

New page: This has to be one of the most puzzling exploits in iOS. Since it was revealed in 3.1.3/3.2, Apple has yet to close it in 4.0, 4.02, or 4.1 or even 4.2 betas. Somehow, once you stick a d...

New page

This has to be one of the most puzzling exploits in iOS. Since it was revealed in 3.1.3/3.2, Apple has yet to close it in 4.0, 4.02, or 4.1 or even 4.2 betas.

Somehow, once you stick a dynamic library or other goody with some sort of "incomplete codesign" magic in the right location and add a startup service, iOS will execute it. Perhaps Apple has no way to fix this without breaking other things?
[[User:Iemit737|Iemit737]] 00:23, 10 October 2010 (UTC)

← Older revision		Revision as of 18:44, 26 October 2010
Line 12:		Line 12:
	::then why has apple not patched it because it will make all app's in the app store need updating ( to use a unique key with the Codesign ) --[[User:Liamchat\|liamchat]] 18:18, 26 October 2010 (UTC)		::then why has apple not patched it because it will make all app's in the app store need updating ( to use a unique key with the Codesign ) --[[User:Liamchat\|liamchat]] 18:18, 26 October 2010 (UTC)
	::: Weather or not Apple decides to patch it, doesn't mean it is unpatchable. Just that they are having problems doing it. --[[User:JacobVengeance\|JakeAnthraX]] 18:26, 26 October 2010 (UTC)		::: Weather or not Apple decides to patch it, doesn't mean it is unpatchable. Just that they are having problems doing it. --[[User:JacobVengeance\|JakeAnthraX]] 18:26, 26 October 2010 (UTC)
		+
		+	i just noticed something looking at the CodeResources in the _Codesign folder and look at an app from an ipsw [http://pastebin.com/6C55pTxf] and an appstore app [http://pastebin.com/E1aSybSJ] both [[sandbox]] and this where introduced in [[firmware]] 2.x --[[User:Liamchat\|liamchat]] 18:44, 26 October 2010 (UTC)

← Older revision		Revision as of 18:26, 26 October 2010
Line 11:		Line 11:
	:It is patchable, all kernel based exploits are since it is software based. --[[User:JacobVengeance\|JakeAnthraX]] 18:00, 26 October 2010 (UTC)		:It is patchable, all kernel based exploits are since it is software based. --[[User:JacobVengeance\|JakeAnthraX]] 18:00, 26 October 2010 (UTC)
	::then why has apple not patched it because it will make all app's in the app store need updating ( to use a unique key with the Codesign ) --[[User:Liamchat\|liamchat]] 18:18, 26 October 2010 (UTC)		::then why has apple not patched it because it will make all app's in the app store need updating ( to use a unique key with the Codesign ) --[[User:Liamchat\|liamchat]] 18:18, 26 October 2010 (UTC)
		+	::: Weather or not Apple decides to patch it, doesn't mean it is unpatchable. Just that they are having problems doing it. --[[User:JacobVengeance\|JakeAnthraX]] 18:26, 26 October 2010 (UTC)

← Older revision		Revision as of 18:18, 26 October 2010
Line 10:		Line 10:
	:i think it cannot be patched also the codesign need's to be patched to run jailbroken apps because codesign would kill any applications not signed by Apple --[[User:Liamchat\|liamchat]] 17:56, 26 October 2010 (UTC)		:i think it cannot be patched also the codesign need's to be patched to run jailbroken apps because codesign would kill any applications not signed by Apple --[[User:Liamchat\|liamchat]] 17:56, 26 October 2010 (UTC)
	:It is patchable, all kernel based exploits are since it is software based. --[[User:JacobVengeance\|JakeAnthraX]] 18:00, 26 October 2010 (UTC)		:It is patchable, all kernel based exploits are since it is software based. --[[User:JacobVengeance\|JakeAnthraX]] 18:00, 26 October 2010 (UTC)
		+	::then why has apple not patched it because it will make all app's in the app store need updating ( to use a unique key with the Codesign ) --[[User:Liamchat\|liamchat]] 18:18, 26 October 2010 (UTC)

← Older revision		Revision as of 18:00, 26 October 2010
Line 9:		Line 9:
	Should we decribe it or is it better to wait until Apple fixes it? --[[User:Redart\|Redart]] 07:44, 21 October 2010 (UTC)		Should we decribe it or is it better to wait until Apple fixes it? --[[User:Redart\|Redart]] 07:44, 21 October 2010 (UTC)
	:i think it cannot be patched also the codesign need's to be patched to run jailbroken apps because codesign would kill any applications not signed by Apple --[[User:Liamchat\|liamchat]] 17:56, 26 October 2010 (UTC)		:i think it cannot be patched also the codesign need's to be patched to run jailbroken apps because codesign would kill any applications not signed by Apple --[[User:Liamchat\|liamchat]] 17:56, 26 October 2010 (UTC)
		+	:It is patchable, all kernel based exploits are since it is software based. --[[User:JacobVengeance\|JakeAnthraX]] 18:00, 26 October 2010 (UTC)

← Older revision		Revision as of 17:56, 26 October 2010
Line 8:		Line 8:

	Should we decribe it or is it better to wait until Apple fixes it? --[[User:Redart\|Redart]] 07:44, 21 October 2010 (UTC)		Should we decribe it or is it better to wait until Apple fixes it? --[[User:Redart\|Redart]] 07:44, 21 October 2010 (UTC)
		+	:i think it cannot be patched also the codesign need's to be patched to run jailbroken apps because codesign would kill any applications not signed by Apple --[[User:Liamchat\|liamchat]] 17:56, 26 October 2010 (UTC)

← Older revision		Revision as of 07:44, 21 October 2010
Line 5:		Line 5:

	AFAIK IncompleteCodesignExploit is an exploit in WWDR Cert Checking that allows ppl to create fake entitlements. Obviously I'm not sure it works in this way. --[[User:Qwertyoruiop\|Qwertyoruiop]] 00:41, 10 October 2010 (UTC)		AFAIK IncompleteCodesignExploit is an exploit in WWDR Cert Checking that allows ppl to create fake entitlements. Obviously I'm not sure it works in this way. --[[User:Qwertyoruiop\|Qwertyoruiop]] 00:41, 10 October 2010 (UTC)
		+
		+
		+	Should we decribe it or is it better to wait until Apple fixes it? --[[User:Redart\|Redart]] 07:44, 21 October 2010 (UTC)

@@ Line 3: / Line 3: @@
 Somehow, once you stick a dynamic library or other goody with some sort of "incomplete codesign" magic in the right location and add a startup service, iOS will execute it. Perhaps Apple has no way to fix this without breaking other things?
 [[User:Iemit737|Iemit737]] 00:23, 10 October 2010 (UTC)
 AFAIK IncompleteCodesignExploit is an exploit in WWDR Cert Checking that allows ppl to create fake entitlements. Obviously I'm not sure it works in this way. --[[User:Qwertyoruiop|Qwertyoruiop]] 00:41, 10 October 2010 (UTC)

← Older revision		Revision as of 00:41, 10 October 2010
Line 3:		Line 3:
	Somehow, once you stick a dynamic library or other goody with some sort of "incomplete codesign" magic in the right location and add a startup service, iOS will execute it. Perhaps Apple has no way to fix this without breaking other things?		Somehow, once you stick a dynamic library or other goody with some sort of "incomplete codesign" magic in the right location and add a startup service, iOS will execute it. Perhaps Apple has no way to fix this without breaking other things?
	[[User:Iemit737\|Iemit737]] 00:23, 10 October 2010 (UTC)		[[User:Iemit737\|Iemit737]] 00:23, 10 October 2010 (UTC)
		+	AFAIK IncompleteCodesignExploit is an exploit in WWDR Cert Checking that allows ppl to create fake entitlements. Obviously I'm not sure it works in this way. --[[User:Qwertyoruiop\|Qwertyoruiop]] 00:41, 10 October 2010 (UTC)