Connect with us

News

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak 

info

Published

on

Iphone usb cable.jpg

A company that sells spyware and hacking tools to government agencies has published details of a vulnerability in Apple chips that can potentially help hackers unlock older iPhones.

This release opens the door for other researchers who specialize in finding iOS vulnerabilities, such as those working for governments or their contractors, to develop effective hacks for iPhones, provided they can find additional vulnerabilities to chain together with this one. This could help security researchers develop a so-called iPhone jailbreak, a technique to hack into Apple’s mobile operating system and remove all the restrictions the company puts on it.

The release is also a reminder that while Apple has made iPhones extremely hard to hack, there are and will always be vulnerabilities that sophisticated hackers can take advantage of to break in.

On Friday, Paradigm Shift, an offensive cybersecurity company based in Barcelona, published a blog post about the vulnerability, which it dubbed “usbliter8.” The company also published a proof of concept that shows how to exploit the vulnerability, which requires physical access to the target phone. 

The flaw and related exploit affect iPhones that have Apple-made chips A12 and A13, which were released in 2018 and 2019, and are included in older iPhones such as the XS, XR and up to the iPhone 11.

The release of usbliter8 is significant in the world of security research and spyware and hacking tools’ makers, but it does not mean that older iPhones are easily hackable by anyone. 

The bug found by Paradigm Shift affects the iPhone’s Boot ROM, which is the first piece of code that runs when an iPhone is turned on and, consequently, its first line of defense against hackers. To hack an iPhone with physical access to it — meaning having the ability to connect a cable to it — hackers need to first exploit the Boot ROM. Now, they can do that thanks to usbliter8, which allows them to potentially defeat and bypass further security checks.

Paradigm Shift wrote in its blog that “as these vulnerabilities reside in immutable code, affected users should be aware that migrating to newer hardware remains the most effective mitigation.” 

In other words, given that the Boot ROM is burned into the chip, it can’t be changed and flaws in it cannot be patched.

Generally speaking, companies that sell systems to hack iPhones seized by authorities, such as Cellebrite and Magnet Forensics need, and likely already have at their disposal, techniques similar to usbliter8 to break into iPhones. However, hackers still need to incorporate other techniques to access the user data stored in the phone.

Public iPhone jailbreaks were relatively widespread in the past, but they have become rarer in the last decade. Jailbreaking an iPhone is often the first step to either research other vulnerabilities on the system. Researchers — intent on finding valuable iPhone flaws and ways to exploit them — have few incentives to release that information publicly, because that would lead to Apple fixing the flaws and setting the researchers back.

Paradigm Shift did not respond to a series of questions related to usbliter8.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Why I refused to join APC – Seriake Dickson 

info

Published

on

By

The national leader of the Nigeria Democratic Congress, NDC, Seriake Dickson, has attributed his refusal to join the ruling All Progressives Congress, APC, to his unwillingness to support a political arrangement that could turn Nigeria into a one-party state.

Speaking when the management of Leadership Newspaper paid him a visit on Thursday, Dickson said the crisis and decline within his former party, the Peoples Democratic Party, PDP, made him decide to establish a new political platform.

Reflecting on the political developments that led to the formation of the NDC, the former Bayelsa State governor stated that the decision was taken at a difficult period when the possibility of building a strong opposition party appeared uncertain.

According to him, the situation within the PDP influenced his decision to seek another political direction rather than move to the APC.

Recommended

“I did not believe Nigeria should become a one-party state,” he said.

The lawmaker further attributed his decision to the need to preserve political competition and provide Nigerians with another platform through which they could participate in the democratic process.

He said that instead of joining an existing party, he and his political associates chose to build a new organisation that could compete with the ruling party, adding that the NDC had made considerable progress since its emergence.

“Months down the line, we have built a formidable party and a major opposition platform in Nigeria,” he added.

Continue Reading

News

FINAL WARNING! PEPSA GIVES HOUSEHOLDS IN JOS SOUTH 7 DAYS TO PROVIDE FUNCTIONAL TOILETS

info

Published

on

By

9abe2715 606e 4d57 b25f a26cdda70a55.jpeg

No functional toilet, no more excuses!

The Plateau Environmental Protection and Sanitation Agency (PEPSA) has commenced the final stage of its abatement notice process for households across Jos South Local Government Area that are yet to provide functional toilet facilities.

Under the SURWASH Programme, PEPSA says it has spent considerable time engaging communities and households, educating residents on the importance of proper sanitation, advocating for household-led toilet provision and working with community leaders and household representatives to improve compliance.

But the sanitation campaign has not been limited to education and enforcement.

PEPSA says it has also provided direct support to vulnerable households that faced difficulties in providing toilet facilities. In identified cases, the Agency constructed new toilets and upgraded existing facilities to help households meet basic sanitation requirements.

Despite these efforts, however, some households are still without functional toilet facilities.

🔴 NOW, PEPSA SAYS THE NEXT PHASE IS ENFORCEMENT.

The Agency has commenced the service of final abatement notices to affected households.

📌 WHAT DOES THIS MEAN?

Households served with the notice have SEVEN DAYS from the date of service to provide a functional toilet facility and comply with the applicable sanitation requirements.

⏳ After the seven-day period expires, prosecution will commence against households that remain non-compliant, in accordance with the law.

PEPSA is therefore urging every affected household to take advantage of this final seven-day compliance window and act immediately.

The Agency says it has engaged, educated, advocated and provided support where necessary. With the final notices now being served, the process is moving from awareness and assistance to enforcement.

🏠 WHY THE EMPHASIS ON FUNCTIONAL TOILETS?

Proper toilet facilities are a basic requirement for a clean and healthy community. The absence or improper use of toilets can contribute to poor sanitation, environmental pollution and public health risks.

PEPSA is therefore calling on households that are yet to comply to take immediate steps before the deadline expires.

⚠️ SEVEN DAYS.

After that, households that remain non-compliant could face prosecution under the applicable law.

PEPSA’S MESSAGE IS CLEAR:

👉 Every household must have a functional toilet.
👉 The final compliance period is now running.
👉 Non-compliance after the deadline will attract enforcement action.

Compliance is no longer optional.

Samuel Nathaniel Dapiya
Director General
Plateau Environmental Protection and Sanitation Agency (PEPSA)



Continue Reading

Trending