{"id":38468,"date":"2019-10-31T22:23:53","date_gmt":"2019-10-31T19:23:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11\/"},"modified":"2019-10-31T22:23:53","modified_gmt":"2019-10-31T19:23:53","slug":"najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","title":{"rendered":"Wykryto luk\u0119 w bootrom wszystkich urz\u0105dze\u0144 Apple z chipami od A5 do A11","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Badacz axi0mX odkry\u0142<\/a><\/noindex> luka w bootromie urz\u0105dze\u0144 Apple, kt\u00f3ra dzia\u0142a na najwcze\u015bniejszym etapie uruchamiania, a nast\u0119pnie przejmuje kontrol\u0119 nad iBoot. Luka otrzyma\u0142a nazw\u0119 checkm8 i umo\u017cliwia pe\u0142n\u0105 kontrol\u0119 nad urz\u0105dzeniem. Opublikowany exploit potencjalnie mo\u017ce by\u0107 u\u017cywany do obej\u015bcia weryfikacji oprogramowania (Jailbreak), uruchamiania innych system\u00f3w operacyjnych oraz r\u00f3\u017cnych wersji iOS. <\/p>\n

Problem jest istotny, poniewa\u017c Bootrom znajduje si\u0119 w pami\u0119ci NAND dost\u0119pnej tylko do odczytu, co uniemo\u017cliwia naprawienie problemu w ju\u017c wydanych urz\u0105dzeniach (luk\u0119 mo\u017cna naprawi\u0107 tylko w nowych seriach urz\u0105dze\u0144). Problem wyst\u0119puje w SoC od A5 do A11, u\u017cywanych w produktach stworzonych w latach 2011-2017, zaczynaj\u0105c od iPhone'a 4S i ko\u0144cz\u0105c na modelach iPhone 8 oraz X. <\/p>\n

Wst\u0119pna wersja kodu do wykorzystania luki zosta\u0142a ju\u017c zintegrowana z otwartym (GPLv3) narz\u0119dziem ipwndfu<\/a><\/noindex>, przeznaczonym do odblokowywania oprogramowa\u0144 Apple. Exploit ogranicza si\u0119 obecnie do funkcji tworzenia zrzutu SecureROM, odszyfrowywania kluczy dla oprogramowa\u0144 z iOS oraz aktywacji JTAG. Pe\u0142ny zautomatyzowany jailbreak najnowszej wersji iOS jest mo\u017cliwy, ale jeszcze nie zosta\u0142 zrealizowany, poniewa\u017c wymaga dodatkowej pracy. Obecnie exploit zosta\u0142 ju\u017c dostosowany do SoC s5l8947x, s5l8950x, s5l8955x, s5l8960x, t8002, t8004, t8010, t8011 i t8015, a w przysz\u0142o\u015bci b\u0119dzie rozszerzony o wsparcie dla s5l8940x, s5l8942x, s5l8945x, s5l8747x, t7000, t7001, s7002, s8000, s8001, s8003 i t8012.<\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c axi0mX \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 bootrom \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0434\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 iBoot. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f checkm8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a (Jailbreak), \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0432\u043e\u0439\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u041e\u0421 \u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 iOS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Znaleziono luk\u0119 w bootromie wszystkich urz\u0105dze\u0144 Apple z chipami od A5 do A11 | ProHoster","description":"Badacz axi0mX odkry\u0142 luk\u0119 w bootromie urz\u0105dze\u0144 Apple, kt\u00f3ra dzia\u0142a na najwcze\u015bniejszym etapie uruchamiania.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 bootrom \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 \u0441 A5 \u043f\u043e A11 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c axi0mX \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 bootrom \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/najdena-uyazvimost-v-bootrom-vseh-ustrojstv-apple-s-chipami-s-a5-po-a11","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:23:53+00:00","article:modified_time":"2019-10-31T19:23:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:11:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:08:32","updated":"2026-01-23 22:11:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/38468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=38468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/38468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=38468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=38468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=38468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}