|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Limera1n
Contents
Release
On the 9th of October 2010 Limera1n was released, delaying the release of SHAtter. Limera1n is now in Beta 2. It only supports Windows at the moment and a large number of devices have issues.
Download
| RC1 BETA2 for Windows from the official website. | HTTP |
Background Information
Limera1n is a jailbreak by geohot. It is untethered on all supported devices, which include the following (but aren't necessarily limited to):
- iPhone 3G (possibly both revision bootroms)
- iPhone 3GS
- iPhone 4
- iPod touch 2G (possibly both revisions bootroms)
- iPod touch 3G
- iPod touch 4G
- iPad 1G
It has been demonstrated multiple times by geohot, using blog posts on his now private blog. Geohot showed off a high-res picture of Cydia on an iPhone 4. Image He displayed an untethered jailbreak that met MuscleNerd's requirements for a good video on the iPod touch 3G: YouTube Video In addition, he demonstrated Cydia, blackra1n, and a verbose boot on an iPad (before Spirit was released): Image
Technical Information
Basics
- This does not use SHAtter.
- This uses a bootrom exploit (different than the greenpois0n one) to achieve the tethered jailbreak and unsigned code execution
- This uses a userland exploit to provide untetheredness, which geohot obtained under questionable circumstances from comex.
- Chronic Dev knows about this exploit and has confirmed its legitimacy
Exploits
- The pwnage-type exploit appears to reside in DFU mode of the device.
Process
The jailbreak appears to execute something like the following: 1) The tool has you boot into DFU mode, where the fun starts. 2) Limera1n.exe appears to upload a payload to your device and execute it at this time, to pwn out the signature checks. 3) The device reboots and is now pwned. From here, it uploads an exploit and a ramdisk. The ramdisk installs limera1n.app and possibly the untethered part of the jailbreak. 4) The device shuts down and upon reboot with no computer necessary, the device is jailbroken.
Controversy
The release of this jailbreak is specifically designed to pressure the Chronic Dev team into implementing the exploits in limera1n into greenpois0n. Now that geohot has released limera1n, SHAtter can't be released without major negative backlash from other hackers, as this would burn a bootrom exploit.
