Exploit devs allegedly bag $1m for ‘secret’ iOS 9.1 untethered jailbreak

An unnamed team of hackers has apparently received a million-dollar payout for disclosing a trio of iOS 9.x and Google Chrome security bugs to private zero-day buyer Zerodium.

However, only people willing to pay Zerodium a subscription will get to see how the remote browser-based untethered jailbreak works: the company won’t disclose it in public, but may later tell Cupertino.

Untethered jailbreaks allow users – or attackers – to break Apple’s iOS security model gaining root access to devices that persists across reboots.

The remote browser-based jailbreak exploit vuln supposedly works on the new iPhone 6 and iPhone 5 lines, iPad Air 2 and Air, iPad 4 and 3, and the iPad mini 4 and iPad mini 2.

“No software other than iOS really deserves such a high bug bounty,” founder Chaouki Bekrar toldVulture South. For the full article click here 

from hacker samurai http://ift.tt/1H1TXDM
via IFTTT