i0n1c

i0n1c, whose real name is Stefan Esser, is a German security researcher. He developed Antid0te, an ASLR for jailbroken iPhones in fall 2010, but never released it, because iOS since 4.3 includes an implementation of ASLR. He developed an untethering exploit for iOS 4.3. He gave a version of the exploit that worked on iOS 4.3.1 to the iPhone Dev Team which updated redsn0w and PwnageTool to use it and released the new tools on 4 April 2011. sn0wbreeze was also updated to include his untether. As the vulnerability went unpatched in iOS 4.3.2 and 4.3.3, he updated his code later to support those firmwares. An iOS 4.3-compatible version was never released. His exploit was used in Pangu jailbreak.

Presentations

• Ruxcon 2014 - iOS8 Containers, Sandboxes and Entitlements
• HITB 2011 Malaysia: iPhone Exploitation - One ROPe to bind them all?
• CanSecWest 2012: iOS5, an Exploitation Nightmare (PDF)
• BlackHat US 2011: Exploiting the iOS Kernel (PDF)

Links

• i0n1c on Twitter
• Homepage
• GitHub