You're viewing an article in iPO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site: iPhone Dev Team Seeks to Bypass Apple Control

News

iPhone Dev Team Seeks to Bypass Apple Control

The iPhone Dev Team is working in a new product called Pwnage that will allow developers to bypass Apple's official distribution channel for native applications, according to a post at their Website.

"Pwnage is based on an exploit found in the lower levels of the iPhone/iTouch bootloader. We can now 'pwn' Apple by patching the device to allow unsigned code. This opens the door to unlimited possibilities," the note said. "Once your iPhone/iTouch has been 'pwned', you can do things like installing custom made .ipsw files - straight from iTunes!"

Additional technical details were provided. The gist is that Apple made some incorrect asumptions about the effective operation of the RSA signature verification for signed applications. A a result, non-Apple blessed apps can be uploaded directly to the iPhone.

Recent history has shown that the vast majority of iPhone users don't hear too much about exotic technologies like this and are even less likely to experiment with their iPhones. The recent anouncement of 100,000 developers who have signed up to distrubute applications in partnership with Apple and the many, many applications that will be available this year suggest that most users will want to take advantage of value-added of Apple's blessing and security screening process.

Even so, there are always a few who want to push the limits of their iPhone, and the iPhone Dev Team will make that kind of experimentation possible.

7 comments from the community.

You can post your own below.

+ show options

Your current settings, click to change: Sort Oldest First, Show Guest Posts, Hide Community Stats

YodaMac said:

member since 21 Mar 2007 with 29 posts, unranked, send him a message or view his profile

And I won't be risking my iPhone investment on some "pwned" software developer who couldn't meet Apple's standards. Simple.

Quote this post ↓

A guest said: (hide)

It's amazing on one level how talented some people are in this field, but it just seems to be like such a waste of time considering the upcoming flood of iPhone programs. Do they really expect these two parallel racks to flourish side by side? If Apple did the sdk stuff right, it'll take off like wild fire and every indication is that it will. The hacked iPhones will be a curiosity and hobby to a few-- so fine, I guess. But these guys should be off doing something more productive, i think-- like writing Windows viruses or something...

Quote this post ↓

Tiger said:

member since 17 Jun 2003 with 1018 posts, unranked, send him a message or view his profile

How long until hacked = bricked?

Quote this post ↓

Azazello said:

member since 15 Mar 2008 with 1 posts, unranked, send him a message or view his profile

I would like to publicly thank the Dev Team for their unpaid labor to further contribute to the service of troubleshooting the iPhone security for our shared safer user experience in the future.

Quote this post ↓

LaurieF said:

member since 15 Jun 2001 with 3547 posts, TMO Forum Mod, send him a message or view his profile

The Dev Team may be unpaid themselves, but how much are they paying you? and if they're not, why do you trust them? Where's the 'safer user experience'?

Sounds like crap to me.

Quote this post ↓

A guest said: (hide)

LaurieF wrote:
The Dev Team may be unpaid themselves, but how much are they paying you? and if they're not, why do you trust them? Where's the 'safer user experience'?

Sounds like crap to me.

Presumably: Apple reads the same announcement, fixes the exploit, and strengthens the security they've erected around the official distribution system.

Quote this post ↓

A guest said: (hide)

"The recent anouncement of 100,000 developers who have signed up to distrubute applications in partnership with Apple"

This statement is incorrect. There have been 100,000 downloads of the iPhone SDK. A fair amount of these will be people just "kicking the tires". The people that are applying for a digital signature, well, quite a few are being turned down during the beta phase. After June, things will pick up.

Quote this post ↓

Post Your Comments

  Remember Me

Not a member? Register now. You can post comments without logging in, but they'll show up as a "guest" post.


Please enter the word exactly as you see it in the image above. Registered users aren't prompted for this. Having trouble reading the image get a new one.