Cydia Patches Security Holes, Fixes What Apple Can't

http://modmyi.com/forums/iphone-new...pdf-security-holes-fixes-what-apple-cant.html


iOS 4.0.2 was released yesterday, ending the short lived JailbreakMe.com
method to jailbreaking. However, in the process, Apple decided to neglect
devices such as the iPhone2G and iPod Touch 1G for this update. Even though
Apple claims to knowingly be excluding these devices, they don't seem to
care that these users have no protection over future malicious attempts.

Here in the Jailbreaking community, we're are a little more passionate about
such things. The almighty Cydia god, @saurik, has spent hours coding a Cydia
package, called "PDF Patch", that fixes these holes, and it works for all
devices and all firmware versions (including version 2.x!). The patch is
available through Cydia free of charge.

The only thing that iOS 4.0.2 does is patch the security holes, and now that
Saurik has released this patch, there is no reason for anyone to updated to
4.0.2. The best advice we have for you is to stay on 4.0.1 (or lower) and
install the Cydia package right away.

 

All users were supposed to have sent in their $200/year tribute to His
Immenseness, and chained themselves to another ATTWS contract, by now. Any
leftovers who refused to pay up are to be flogged by electronic means and
simply forgotten. Being left behind by His Immenseness and exposed to any
virii is an excellent way to kick them in the ass to knuckle under to His
Immenseness' business plan of keeping them paying and paying for the latest
spoon-fed version of the hardware, forever.

I'm amazed iTunes will even talk to an IP3 or older any more. I suppose
that might be going too far and cause too many unpleasant lawsuits from
those left behind and might make some wannabees buy Droid X or Samsung
Galaxy S, instead.

 

But you have to jailbreak the phone to install that package. If you're
running 4.0 or 4.0.1 and have no other reason to jailbreak, then upgrade to
4.0.2.

 

I'd say it would be better to not upgrade until jailbreaking is enabled
for 4.02. You may not need to jailbreak your phone today, but what if
you needed to jailbreak it next week ?

 

I'd say it would be better to not upgrade until jailbreaking is enabled
for 4.02. You may not need to jailbreak your phone today, but what if
you needed to jailbreak it next week ?[/QUOTE]

That possibility is so remote that it's not worth considering.

Besides, I'm sure that there will be a jailbreak for 4.0.2 by the end of
next week.

 

<

since the only difference between 4.0.1 and 4.0.2 is patching the hole,
something that can be done while jailbroken and on devices that can't
run 4.x, i suspect they will be saving the next exploit for use on 4.1.