Hector Martin

@marcan42 as an american company, apple could be (have been?) served with an NSL to disclose signing keys.

@keastes Sure, just like their FW signing keys, at which point the FBI wouldn't need their help, so that's moot.

@marcan42 does this matter if you can rewrite the flash?

@marcan42 i thought shsh only protected the official mechanisms. at this point they need a hardware programmer to write the flash anyway

@marcan42 the technique of using device-specific software to break into a phone can be used for any iphone if they write it once

@AllYourDataBase But they need to sign it for every phone, therefore its usage is still under Apple's control, just like its development.

@marcan42 can you extract SHSH blobs from a backup? It's certainly been possible to jailbreak devices after the 3GS.

@chrisFnicholson You can't downgrade an iPhone to an older, jailbreak-vulnerable version (unless you have the matching SHSH blob).

@marcan42 I might be wrong, but IIRC you don't need the SHSH blobs to boot a ramdisk. And they're only talking about technique anyway.

@SwissHttp https://github.com/libimobiledevice/idevicerestore/blob/e2e83dc901a3ddc6287cea69eef085e780d6fe9a/src/dfu.c#L160 … pretty sure DFU mode requires SHSH blobs just like everything else (personalize_component).