Earlier this week, the browser-based JailbreakMe.com solution went live once again, bringing a simple new method to jailbreak a number of iOS devices including the iPad 2. The tool has proven popular, with over one million users already having taken advantage of it.
/article-new/2011/07/jailbreakme_crop.jpg?lossy)
Similar to earlier browser-based jailbreak mechanisms, the latest version takes advantage of a flaw in the way Safari handles PDF files, a vulnerability that could also be exploited by malicious parties. Consequently, it had been expected that Apple would move relatively quickly to patch the hole once it was revealed by the jailbreak procedure.
According to the Associated Press, Apple has indeed confirmed that it will be patching the hole in a future software update, but declined to provide a timeframe for the release of the update.
Apple Inc. spokeswoman Bethan Lloyd said Thursday the company is "aware of this reported issue and developing a fix that will be available to customers in an upcoming software update."
She declined to specify when the update would be available.
Apple's statement comes after Germany's information technology security agency issued an explicit warning about the "critical weaknesses" in iOS that could result in malware being deployed through infected PDF files.
Fully aware of the potential implications of malware authors exploiting the hole, the jailbreak community has already developed a fix for the issue, which was released into the Cydia Store for jailbroken devices alongside the new technique. Users who have jailbroken their devices, even through the new JailbreakMe.com technique, can thus patch the vulnerability, while non-jailbroken devices will have to wait for Apple's solution to be released.
Top Rated Comments
(View all)Apple can work fast when patching stupid JB holes, but we're still stuck with buggy-as-hell beta 2 for iOS 5 after a month.
Where the hell is beta 3, Apple?????
No beta 3 yet for ios 5?
This is it! I am leaving Apple for good.
Where would we all be if Apple released things on their schedule.
This is an outrage. How dare they!
In case you were serious:
May I suggest you contact Apple and PLEASE let them know that your time schedule is of the utmost importance and urgency?
I love how apple calls this a "fix"
You do understand that jailbreaks work because they take advantage of a security vulnerability SO HUGE that they can actually rewrite parts of the device operating system, install entire apps that sidestep the normal install process, hack all kinds of system settings...
You don't consider that the tiniest bit dangerous? You'd rather Apple just leave it out there? Surely nobody would ever exploit such a vulnerability for evil, because hackers are all looking out for our best interests, right?
Prisons across the nation are trying to keep inmates from escaping...
But actually, I appreciate the jailbreakers for both giving those who are willing to go through the process added functionality, and also exposing flaws in the OS which ultimately makes it more secure. And also challenges Apple to add features that the jailbreakers introduce. Win win really.