iOS exploit puts millions of iPhones at risk: Details here
If you own an iPhone, it is important for you to know about a major jailbreak going viral on the internet! Now, we know, jailbreaks are a thing of the past but this one is pretty active, which effectively puts the security of millions of iPhones, including 2017's iPhone X, at risk. Here's all you need to know about it.
Checkm8 bootrom exploit for breaking iPhone security
The iOS exploit in question, first revealed by a security researcher named axi0mx, goes by the name of checkm8. It is a type of bootrom exploit, which uses a vulnerability in the initial code that iOS devices load while booting up to bypass the boot security. Once the security is bypassed, the iOS is jailbroken and Apple's security restrictions are all gone.
Plus, it is an unpatchable, permanent exploit
The most dangerous part of this exploit is the fact that Apple cannot fix it. Basically, the attack works by tying to the read-only memory or ROM of the iPhone, which means even if Apple wants it cannot issue a software update to patch the bug being leveraged in the code.
Physical access needed for an attack
Having said that, you should note that this jailbreak would only work if the attacker manages physical access to the device and plugs a USB into it. This makes executing the attack on a large chunk of iPhone users unlikely, but there is always a possibility of seeing an advanced version of this exploit, which may not require physical access.
No word from Apple on the matter
So far, Apple has not commented on the jailbreak, which is said to make all models from iPhone 4s to iPhone X and 8/8 Plus vulnerable. "This is possibly the biggest news in the iOS jailbreak community in years," the researcher said on Twitter. "I am releasing my exploit for free for the benefit of iOS jailbreak and security research community."
