Saurik Patches PDF Security Holes, Fixes What Apple Can't

[area51crypto]

iOS 4.0.2 was released yesterday, ending the short lived JailbreakMe.com method to jailbreaking. However, in the process, Apple decided to neglect devices such as the iPhone2G and iPod Touch 1G for this update. Even though Apple claims to knowingly be excluding these devices, they don't seem to care that these users have no protection over future malicious attempts.

Here in the Jailbreaking community, we're are a little more passionate about such things. The almighty Cydia god, @saurik, has spent hours coding a Cydia package, called "PDF Patch", that fixes these holes, and it works for all devices and all firmware versions (including version 2.x!). The patch is available through Cydia free of charge.

The only thing that iOS 4.0.2 does is patch the security holes, and now that Saurik has released this patch, there is no reason for anyone to updated to 4.0.2. The best advice we have for you is to stay on 4.0.1 (or lower) and install the Cydia package right away. Or if you're feeling lucky, don't do it at all, but I don't recommend it.

Thanks to the Dev Team for the heads up.

Big Thanks to Saurik for all his hard work!!


.

I don't think " can't fix " is correct as " want fix " is correct and that might and probality will come back and bite them in the butt!

[bobright]

Apple's rejection to secure iPhone 2's is not going to look good in the DOJ investigation! To me it shows gross neglect!

Saurik's patch that makes the iPhone 2 secure to the flaw that Apple refused to do is going to go much further in the Jailbreak is now Legal than people may realize!

Its just another reason that Jailbreaking will be kept legal!

Just another great job Saurik!

+1

[PWNsyst3m]

I've seen a significant decrease of battery life after installing this.

Sorry to hear that. My battery life was not affected after installing.

[pacmac]

he is the man!!! looks out for us

[moppsy]

Does anyone know if this patches the IOSurface exploit or does it just block it?

The only thing I can find about it is a ref to this freetype patch on the dev-team blog.
It seems to indicate that it has not been patched.

[santacruzlocal]

what happen if i use jailbreakme.com to jailbreak, then apply this patch. If in the future i restore my phone, am i still able to use jailbreakme.com? and what's the advantage of patching it? prevent future malicous software?

I was thinking the same thing!!! unless the patch disappears when you restore.

[mortopher]

I was thinking the same thing!!! unless the patch disappears when you restore.

The patch disappears when you restore. As long as you restore to iOS 3.1.2-4.0.1 you will be able to reuse jailbreakme