alloc8 untethered bootrom exploit for iPhone 3GS

Write-up for alloc8: untethered bootrom exploit for iPhone 3GS
alloc8 brings freedom to millions of iPhone 3GS devices, forever, by exploiting a powerful vulnerability in function malloc in the bootrom. Both revisions of iPhone 3GS bootrom are vulnerable, but old bootrom is also vulnerable to 24Kpwn, which is faster than alloc8.[…]

Apple patents kill switch for iPhone camera

Patent issues aside, government misuse aside, this infrared interface to iPhone is also a potential new OOB vector for attackers. I’m sure the concert recording industry will keep the technology secret, along with law enforcement. 🙂 If other phone/camera vendors compete with Apple, they will have to create a second attack vector, or license this patented method.

Patent issues a