Security

Apple stops signing iOS 12.0.1, hindering downgrades from iOS 12.1

Apple stopped signing iOS 12.0.1 on Tuesday, a move that prevents all iPhone and iPad users from downgrading their firmware via iTunes to any version lower than iOS 12.1.

It’s been almost one full month since Apple publicly released iOS 12.1, signaling one of the Cupertino-based company’s longest firmware signing windows in recent memory; most windows only last for about two weeks.

Hackers demonstrate 0-day exploit on iOS 12.1 at recent Tokyo-based Pwn2Own contest

Despite the absurd amounts of time and money that Apple pours into security efforts to make iOS one of the most secure mobile operating systems available today, it seems that even iOS 12.1, the latest publicly-available firmware version on the iPhone and iPad, isn’t entirely hack-proof.

At the recent Pwn2Own contest in Tokyo, Richard Zhu and Amat Cama, a duo of white hat hackers, reportedly harnessed the power of a powerful Safari-based 0-day exploit to recover a photograph that was recently deleted from an iPhone X’s native Photos app.

Pwn20wnd releases re-written Osiris jailbreak for developers and other advanced users

iOS hacker Pwn20wnd was played an instrumental role in various iOS 11-centric projects in recent memory, including the Electra and unc0ver jailbreak tools and the Rollectra un-jailbreaking tool. As of this weekend, however, we can add the Osiris jailbreak tool to that list.

Pwn20wnd released a rewrite of the Osiris jailbreak tool for iOS 11.0-11.4 beta 3 Sunday afternoon. Osiris uses Ian Beer’s tried and true iOS 11 exploits to achieve a jailbreak on the aforementioned firmware versions, but unlike other jailbreak tools available already, it doesn’t install Cydia.

If you aren’t already jailbroken, stay on the lowest possible firmware and avoid updates

If you’re already rocking a jailbroken handset by way of Electra or unc0ver, then you should consider yourself lucky. Unfortunately, those who updated to iOS 11.4-11.4.1 or iOS 12.0+, either on purpose or by accident, can’t jailbreak at this time.

If you fall into the latter category and have been crossing your fingers for a jailbreak, then you might be asking yourself whether you should stay where you are or upgrade to iOS 12.1; that’s a question we intend to help you answer in this piece.

With iOS 12, GrayKey can no longer break iPhone passcodes

It looks like Apple might have finally gained the upper hand in its long-running battle with Atlanta, Georgia-based GrayShift, at least for now. Forbes reports the company's passcode hacking technology known as GrayKey doesn't work on devices with iOS 12 or later installed. Instead, members of the forensics community say the technology can only do a "partial extraction" on these devices. 

Apple is no longer signing iOS 12.0

On Monday, Apple stopped signing iOS 12.0, making it impossible to downgrade from iOS 12.0.1 to iOS 12.0. The move also compels those on iOS 12.0 to upgrade to iOS 12.0.1 when attempting a restore via iTunes.

The news shouldn’t come as much of a surprise since the Cupertino-based tech company released iOS 12.0.1 to the public just over two weeks ago. Apple typically stops signing firmware approximately 14 days after releasing a new version to facilitate software upgrades among its user base.