Fusion, a mix of technology & gossips

Limera1n Exploit Patched by Apple in Newer ios Devices

2010-12-19T20:13:00.000-08:00

We really shocked, when we too heard the news. One of the user at ModMyi forum posted the news claiming that he was unable to jailbreak his ipad running ios 4.2.1 which he bought for his lady as a christmas gift. As we already know the exploit being first developed by Geohot which is assumed to pwn all the newer ios devices to life. Pwning all the devices to life means no software revision could patch the exploit for such devices. Only the hardware revision could patch the limera1n exploit as the exploit itself is assumed to exist in the hardware.

Here is the complete story in his own word.

" I made a trip to the Apple Store today to get an iPad for my old lady (Christmas present). She told me she’d love it jailbroken, so I sat down in front of my computer to redsn0w this 4.2.1 iPad.

One problem–redsn0w 0.9.6b6 could not upload a pwned iBSS (hanged at the white screen on OS X, upload timed out and rebooted into jailed state with Windows).

Furthermore, the device constantly stalls when attempting to dump its bootrom. This leads me to believe the injection vector used via USB has been patched in DFU mode."

When the device was tested it was found to be manufactured after week 50 (you may remember the same problem occurred with the iphone 3GS that was manufactured after week 40). Which means the device could possibly get the new hardware revision.

So, if you wish to jailbreak after you purchase the ipad, be careful to confirm whether it is made before week 50, which ofcourse not so easily possible until you get it and checked it in your own computer or have your friends on the dealing store.

This type of newly revised hardware may be jailbreak using shatter in newer future but do not expect it to be released sooner.

iphone 5 "clone" to hit the Chinese Market before the original one

2010-12-16T22:04:00.000-08:00

The original iPhone 5 is not yet announced or any prototype demo by Apple yet to be seen , but this is not a problem for the Chinese tech guys for making a clone just after the iphone 5 rumors we heard few months ago. It’s supposedly not running the iOS and likely to have the iOS skinned over the Android. The device itself is thinner and have candy-type iphone 3GS looks. The side buttons for volume and camera are arranged just like the existing iphone 4. Want to see more, just check out the video after the jump.

Here's the demo --

Face Recognition for Facebook makes easier to Tag your Friends and Family

2010-12-15T22:46:00.000-08:00

Facebook, sometimes was the most criticized social network for it's deficient security is now becoming the most powerful and popular social network sites all across the globe. Many API's and plugins were developed to make the user feel convenient. Many applications, games were added entirely keeping the site more remarkable and adorable. Now the Facebook has become so popular in the web. Almost all the websites has the facebook share widget to share their contents in the real time with millions of facebook users. Few days ago, the facebook came up with the option for it's user to change their profiles which obviously satisfied the users with it's new look.

Once, again facebook is returning to it's user with Face Recognition Functions which consumes the less time than tagging. It automatically tags up your friends once it recognizes their faces. Probably this feature is better but still facebook has to come up with more user defined controls that allows / prevent each of the user to tag / to be tagged on their own choice and acceptance.

Autodesk Pushes Email Notification for AutoCAD WS 1.1 Mobile Edition

2010-12-15T21:59:00.000-08:00

Good news for the users of AutoCAD WS, Autodesk has recently released the newer version of AutoCAD WS (version 1.1) enabling it's users to work even in offline mode and has enriched with more editing options within the web mode. The new version also includes the support for dropbox users with drag n drop features. You can find the snapshot of the mail pushed by Autodesk to it's AutoCAD WS existing users after the jump.

You can download the app via itunes, enjoy !

Antid0te to Enhance Your Jailbroken Apple i-device Security

2010-12-15T02:48:00.000-08:00

Many of us already heard about Antid0te which is one and only one option to enhance our i-devices security after the compromised jailbreak "reliefs". As after applying the jailbreak hacks apple no longer provides it support ( jailbreak causes your warranty void :) ) to the owner including any security breaches or warranties. To overcome this Antid0te promises to enhance the security mechanism of all the current jailbroken iOS devices so that they are secured as much, or even more than the non-jailbroken iOS devices. This new method uses ASLR (Address Space Layout Randomization) process which has been absent from all the current iOS devices, making them vulnerable to attacks such as the ones demonstrated at Pwn2Own contest.

The developer behind Antid0te has now released official details about this upcoming tool which should pretty much answer all your questions.

When will it be released?

Media wrongly reported an antid0te release date of 14th December. However this date was never announced from my side. Antid0te will be released once it is ready which should be around 24th of December.

Is is a new jailbreak?

Media wrongly reported that antid0te is a new jailbreak. However this is wrong. Antid0te will be a tool that you can use together with the pwnagetool, redsn0w and maybe greenpois0n jailbreaks.

Will you burn another exploit?

No! Antid0te will be a tool used with already jailbroken iPhones. So there is no additional exploit used.

What devices and firmware is antid0te compatible to?

For now all devices are supported at iOS 4.2.1. iPad 3.x will never be supported. Support for iPhone 4 at iOS 4.1 and iPod 4G at iOS 4.1 should be released, too. There most probably will be no support for iPhone 3G and iPod 2G at anything lower than 4.2.1 because their jailbreak is already untethered.

Will antid0te make my iPhone unhackable?

There is no such thing as unhackability. Antid0te will add ASLR to your iPhone. ASLR basicly means that the program libraries, the dynamic linker, the program stack and for some selected binaries also the main binary are loaded at different (random) addresses in memory. This makes the process of exploitation a lot harder. In the general case this means that instead of one security hole the attacker needs atleast another security hole that allows him to determine/leak the memory addresses on your iPhone. Therefore antid0te increases the cost (time, money, resources) for an attacker to write a successfull exploit.

Isn't ASLR broken?

If you have read somewhere (like in the theregister.com article comments) that ASLR is broken and can be easily bypassed, you must know that these comments are written by people that maybe have heard/read some things about exploitation but never attempted to actually write a real world exploit. Among real security researchers these comments usually cause a lot of amusement. It is well known that DEP/NX without ASLR and ASLR without DEP/NX are not optimal protections but in combination they are the best exploit mitigation available at the moment. And the iPhone already has DEP/NX in place, so adding ASLR is about time.

Will Antid0te destroy the possibility of future jailbreaks?

Well first of all antid0te by itself will be installed AFTER you jailbreak your device, so that it does not affect the jailbreaking process at all. However in the long run the existence of antid0te might trigger Apple to finally add ASLR to factory iPhones. However Apple's current iOS 3/4 design decisions make adding ASLR a not so simple task. Therefore it will take them some time to achieve that. I strongly suspect 2011 to become the year of wide spread mobile phone malware/worms. So Apple will have to add it at some point. However only time will tell. So yes, if antid0te causes a faster ASLR release for factory iPhones it will make jailbreaking harder in the future. However I strongly believe that a more secure factory iPhone is more important than a somewhat easier jailbreaking process.

Stefan plans to release it a day before Christmas, that is on 24th of December 2010. Stay tuned for the future updates.

Source: Redmondpie

Via. Antid0te

Download YouTube Video Contents

2010-07-13T22:06:00.000-07:00

There are too many methods for downloading the videos from video streaming sites like Youtube, Metacafe etc. I've used almost all the tools in last few years. Some were even very difficult to use and some found very easy.

The Tools that I've found easy to download from YouTube are :

1) ImToo Youtube Downloader : This tool is developed by the most popular multimedia software development company, ImToo. This tool is totally new and comes handy for every users. This tool is free and you can download it from here. After downloading just run the program and enter the download link. Choose the quality for the video you want to download This tool downloads the videos with greater speed as comparatively to others.

2) YouTube HD Transfer : This tool is very useful for the users for downloading HD Videos from Youtube. This tool is free and you can download it from here. After downloading just run the program and enter the download link. This tool contains search features so that one can easily search the videos directly from there without going to YouTube Site.

3) YouTube Video + 2.2 : This tool is an addon for Mozilla Firefox users for downloading videos from any sites. This tool is free and you can download it from here. After installing the Add-on just browse the site with streaming videos. Let the video buffer and click on the streaming icon that you can find in the toolbar and choose the video to download. This will automatically download the video file to your download location. This tool is very easy-to-use.

Unexpected Change in iphone Jailbreak Scenario

2010-07-13T04:34:00.000-07:00

All the people that are already involved directly or indirectly in the jailbreak scene are now being shocked with the decision of Geohot (the wonderb0y). Geohot was first to develop unlock and jailbreak solutions for iphone/ipod users. Though he helped alot the people who were in trouble in the past.

Last year he came out with the untethered solution for those who were stuck in 3.1 firmware releasing his great efforts in the form of blackra1n. Which is obviously one of the most easiest tool to untethered jailbreak. Later he again promised to release the jailbreak solution for 3.1.3 including 3.2 for ipad users for which he included the video running cydia on iphone 3.1.3 and ipad 3.2. After this he hosted a website named www.limera1n.com probably named after his invention or techniques that he used for his discovered exploit. When no significant release was happened from his side the Dev-Team came along with Spirit saving those out there who were in stuck with 3.1.3. But it was a non-boot level exploit and the jailbreak itself used the OS level.

All were in hope that probably he would come along with a Jailbreak solution after the final release of ios 4.0. When it released nothing we could hear from him that time. He was attended a French Conference (said was Underground) during that period. We got another news and the video regarding that conference and talking the wonderboy about the pwned4life. Everyone waiting for his new jailbreak was really distressed after his tweet this morning explaining himself being out of this. Previous night he closed the access to his website http://www.iphonejtag.blogspot.com/ only allowing the limited access (for invited visitors). Later he suggest the community through his tweets to follow @mikecohenn on twitter to get any future updates regarding the jailbreak. May be he was threatened by Apple or being offered some financial shits for quitting the scene. That's really painful for the millions of users waiting for a strong untethered iphone jailbreaks and unlock solutions.

But where there is a wish there is always a way too. Today afternoon we heard a word from Comex regarding the jailbreak on which he has been working for last one month. The release is imminent according to his tweets and probably shall be released after the release of ios 4.01/4.1 later followed by hactivation (unlock) by p0sixninja if his boot level exploits get work. Till then stay touch with us or follow @p0sixninja @comex @MuscleNerd on twitter. Get your hopes off for Geohot or unfollow him on twitter if you are a only a fan of his jailbreaks.

UPDATE 1 :
Recent tweets from @planetbeing declares the existence of iphone 4 unlock. Time to cheers !!!

UPDATE 2 :

Recent tweets from @iphone_dev which confirms the iphone 4 unlocked by planet being.

UPDATE 3 :
Yesterday Apple released ios 4.1 beta for developers only with Game Center enabled and many other features unlocked. The jailbreaking Dev Team has warned to all the followers to save their SHSH blobs using TinyUmbrella for future jailbreaks. You can download TinyUmbrella from here. As the ios 4.1 Final release is now imminent so it is required to have ios4.0 SHSH blobs already being saved so if any changes in firmware to the ios 4.1 Final comes the previous exploit may be made public and released. If you donot care about the unlock you may still upgrade to ios 4.0 so that you have your SHSH blobs saved to your PC for the future use of jailbreak on ios 4.0. Stay tuned for further updates on ios 4.x

Apple releases OS 4.0 for Iphones : Rumors seems to be true !!!

2010-04-05T10:19:00.000-07:00

Yes ! the rumors regarding Apple iphone OS 4.0 that was started about many months ago after the release of OS 3.0 is going to be true. The rumors was started after someone found the traces of forthcoming Apple firmwares from their servers after the release of OS 3.0 at Cupertino. Apple is releasing the most wanted iphone OS 4.0 on coming thursday whereas recently the ipad an apple tablet has already hit the market on 3rd April. Long waited OS 4.0 is supposed to have multitasking options which will bring a new life to the iphone with switchable program options and background running options.

The jailbreakers already got their ipad and get started with their jailbreaking procedures. MuscleNerd already demonstrated a video showing the porting of root from a Mac to the ipad yesterday and ofcourse the aka Geohot is also started his jailbreak on ipad earlier this morning too. The jailbreak is now being considered possible due to the exploit on Safari which was primarily built with Adobe Flash support. Later due to some points of misleading Apple refused to include the Flash Lite in Safari and the contract between Adobe and Apple got dismissed. But the exploit due to the Flash Lite remained on iphone letting the jailbreakers to find an exploit.

Recently, I found some interesting source that states the new contract between Microsoft and Adobe Flash which if possible; by using the Windows 7 the ipad users will be able to jailbreak their ipad OS 3.2 or may be OS 4.0 soon in near future. This will bring a multitouch Windows 7 experience for ipad users.

Due to the fact that apple released the ipad OS 3.2 a major operating with a new tablet and with no doubts the second day of the release somehow the jailbreakers succeeded to jailbreak this Firmware. And now the Apple is going to release the OS 4.0 this thursday which obviously leads to the fact that it is likely to have the same loophole as the previous firmware has and likely to be jailbroken the next day it hits the store.

So folks! keep waiting till thursday for OS 4.0 and let the jailbreakers do their work on 4.0 for one week. Which means within 2 and 1/2 week you'll get your iphone jailbroken running OS 4.0 with mutitasking features.

Your Daily Magazine Download Routine

2010-04-02T10:28:00.000-07:00

Yeah Guys !
Once again I am back with my small and helpful procedures. Which can help you for downloading the daily magazines from the internet such as Kantipur, Kathmandu post and saptahik easily.

Let's start with one simple example. Many of us are interested in daily Newspaper and we have to spend alot of time to download it as now the sites like Kantipur has totally changed their interface which doesn't allow the visitors to download the epaper in the same way as before. And the result is you have to stick to your chair and downloading all the pages one by one ...so you need more time to download a bunch. But what if we could get such software or perhaps a batch file to make our download easy? Yeah that's it what I am talking about.
Steps :
1) Google and download "Url2file.exe" and save it to a folder.
2) Open Notepad and type "URL2FILE http://epaper.ekantipur.com/2412010(Date)/epaperpdf/2412010-md-hr-1.pdf(file name in server) 2412010-md-hr-1.pdf(file name to be saved on your PC) [-u (username) xxxx@yahoo.com] [-p(Password) xxxxxx]". Remember, donot type the words in brackets, it's for your reference only.
3) Now copy the line excluding username and password and paste the lines below. Now change the last no. ...hr-1 to hr-2 it indicates the page no. your are going to download. Repeat the process in third line and change the page no. Do it up to 26 or 30 (It doesn't matter)
4) Save the text file as a batch file say Kantipur.bat.
5) Now Open a new text file and type the following :
open cmd
url2file.exe
Kantipur.bat
and save it as DWN_kantipur.bat.
6) Now put all those files on a same folder.
7) Open DWN_kantipur.bat and it starts downloading all the pages from ekantipur.. Enjoy!
Note : if the page no. you entered say hr-30 and it is not in the server then it'll download a 20kb file which contains nothing and you can delete it.
8) Next day.. Don't forget to replace all the dates with the current date by find and replace in Notepad ++

Enjoy the post and enjoy your downloads.

SW Roads (A complete software for Highway Design) by Welink (Nepal) Now Cracked !

2009-10-02T06:56:00.000-07:00

Dear Nepalese friends !

First of all, I want to wish all of you a Happy Deepawali 2009 and wish you'll enjoy a lot with your families though I am missing my family and my friends. It's very difficult to adjust yourself especially when you are abroad; miles away from your family in such a great festival. It heartly hurts.... but we have to adjust, anyway.

Let's come to the point straight. SW Roads, a highway designing application which runs within a CAD environment was introduced by Welink Pvt. Ltd. in Nepal some years ago. This Software contains many features such as Digital Terrain Modeling (DTM), alignment designing, setting out vertical & horizontal curves, calculating design levels, calculating sectional areas and exporting all the calculated data to Excel Format. All you have to do is to start from scratch. First you have to enter all the design parameters into an Excel file. The File itself is provided by Softwel which contains all the major parameters inside the workbook where you'll have to enter all the required values. After entering all the required parameters you can analyze your drawings inside it's own window. If you want to edit any IP you can do it so by adding or deleting. Even you can insert the different types of structures like line drain, retaining walls, gabions etc. After finalizing all your works you can export the drawings into AutoCAD & data into excel workbook. This application, in my opinion is a greatest effort to overcome the unavailability of foreign software in the Nepalese market.

The Software is being secured by Aladin security based usb dongle. Aladin is one of the most leading security providers in the world of computing technology. The dongle just looks like a usb drive which is readable only through specific applications and SW Roads itself. Whenever you have to use SW Roads you have to insert the dongle. And if you do not have the dongle connected to your PC, the application cannot be executed. The problem is that if you lose your dongle key it means you have to spend a sum of money to get a new one. It gets even worse if you are a miles away from your providers and you have not any other options. Same problem I had to face in my last project too. That time I was using an older version and due to some reasons my computer got crashed but somehow it was only working in the DOS mode. I had the serial no. of the software but since that was created for that machine so I used a trick to run the software in another machine. I just changed my second PC's volume id to that PC's volume id & restarted. Voila! It worked. But this trick was ended there cuz now we have already been upgraded to the newer version. Last month I played around this new version for a long time. Though I don't have any advanced skills in reverse engineering. I tried many times nearly 12/7 for one week but couldn't get any of the loop holes. I used many tools too. But it wasn't so easy. Finally after two weeks I was able to completely hack.

There's some clues how to do this, It's not for commercial purpose though it's only for educational.
1. Google for Toro Monitor & download it.
2. Open Toro Monitor & run SW Roads with dongle still connected.
3. Run all the features provided with the software, run each & every command and menus and finally export your drawings in AutoCAD too.
4. Then Switched to Toro monitor & copy all the encryption & decryption values from lower most section to a text editor. If your monitor doesn't contain any data then you must first install aladin usb filter which you can get after searching in google.
5. Download Latest version of Vusbbus.sys & Vusbbus.inf by Chingachguk & Denger2k & Multi key.sys & multikey.inf and finally Install it. Before installing remove the dongle. After installation your PC should find a virtual dongle showing pop up message to systray new hardware found. Install it. If fail, retry again.
6. Now the most important part is you have to make a registry file from above data which you get through Toro's monitor.
7. Open a Text file you saved in previous step and make a registry file which should look like below:

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\NEWHASP\Services\Emulator\HASP\Dump\5B3D51A0] "Name"="Hasp HL" "Copyright"="Copyright (C) 2009 xyz" "DongleType"=dword:00000001 "SN"=dword:562E83F6 "Type"=dword:000000EA "Memory"=dword:00000001 "SecTable"=hex:00 00 00 00 00 00 00 00 "NetMemory"=hex:00,00,00,00,00,00,00,00,00,00,FF,FF "Option"=hex:00,01,02,4A,1F,01,1C,01,09,01,0C,08,34,00
"Data"=hex:\ 2F,53,6F,66,74,77,65,6C,20,50,72,69,76,61,74,65,\ 20,4C,69,6D,69,74,65,64,2C,20,31,39,39,36,2C,20,\ 42,61,6E,65,73,68,77,6F,72,2C,20,4E,65,70,61,6C,\ FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\ FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\ FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\ FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,FF,\ 57,42,50,54,01,00,00,00,10,00,00,00,00,00,28,B1
"QTable"=hex:\ 61,01,87,E3,1E,4E,EA,75,6B,12,B5,19,F3,6C,7D,7E,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 61,01,87,E3,1E,4E,EA,75,6B,12,B5,19,F3,6C,7D,7E,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 8A,75,70,D4,92,30,7D,DB,21,CC,F0,F3,17,CF,B3,49
"ATable"=hex:\ 21,14,F4,E4,B7,59,4A,2F,AB,D7,EF,1F,87,0C,2D,E8,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 41,6E,20,6F,6E,6C,69,6E,65,20,73,6F,66,74,20,6C,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 8A,75,70,D4,92,30,7D,DB,21,CC,F0,F3,17,CF,B3,49
"QEncTable"=hex:\ 21,14,F4,E4,B7,59,4A,2F,AB,D7,EF,1F,87,0C,2D,E8,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 41,6E,20,6F,6E,6C,69,6E,65,20,73,6F,66,74,20,6C,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 8A,75,70,D4,92,30,7D,DB,21,CC,F0,F3,17,CF,B3,49
"AEncTable"=hex:\ 61,01,87,E3,1E,4E,EA,75,6B,12,B5,19,F3,6C,7D,7E,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 61,01,87,E3,1E,4E,EA,75,6B,12,B5,19,F3,6C,7D,7E,\ 17,D9,FE,6A,5E,05,64,EC,4E,06,71,E3,96,82,26,79,\ 8A,75,70,D4,92,30,7D,DB,21,CC,F0,F3,17,CF,B3,49
"ColumnMask"=dword:000000EB
"CryptInitVect"=dword:0000003C

Here you have to notice that Qtable = AEnctable & Atable=QEnctable which you can get through the text file. One another thing is that if your Qtable is of 32 characters it means your Atable is also of 32 characters. Generally Qtable and A table is shown as decrypt key & Enc tables are shown as Encrypted key in the text file. Or you can directly copy & paste the pair from the top portion of the toro's monitor and arrange in the registry editor. Finally save it as a registry file with extension *.reg. Double click, and click OK to continue. Reboot & start SW Roads. Voila! It's running...

toro monitor (right panel shows pairs i.e. qpairs & apairs, bottom in black window shows all the keys, left panel shows hex value i.e. "data" = hex:/)

After some retries you'll be able to hack the software. The tools above are created by others genius experts. Use these tools in your own risk. Don't ever ask for cracked software. It's for educational purpose only. For any questions mail me to zerozerome@gmail.com

Enjoy! and have fun in reverse engineering
Don't forget to comment !!!

iphone 2g/3g OS 3.1

2009-10-02T03:59:00.000-07:00

We waited a long for the release of iphone new firmware version 3.1 and it has already been out in stores with some major and minor updates. Many of the features were lacked in the previous versions and apple is now able to overcome almost all the lacked features. Major fact is that in previous version we were completely unable to tethering the internet via usb or bluetooth but after the release of 3.1 OS everyone is able to tether the Internet easily via a usb cable. Before this release if anyone had to surf the internet in their Laptop or Pc was extremely difficult. For this they had to use a third party software which in case of unlocked phones was impossible.

After this 3.1 enormous release apple provided a bit of relaxations to their customers. iphone is the smartest of all the smartphones. It has many hardware features even in a 2g but not so much supporting software. It has camera but it can't take a video, it cannot zoom, it has bluetooth but it cannot send a file & so many other features are disabled in it's firmware. As still we are not getting any information about 3.1 to be jailbroken from DEV TEAM. I hope they are still working on it. These days when you google around the net you will find many of the custom firmware for OS 3.1 for both 2g & 3g but actually these are the pirated copy and ofcourse I also don't want to use a pirated one. The DEV Team actually never work on piracy. They provide only the patched copy of the firmware. But The rumour is that both are unlocked. Even if you use the custom firmware the firmware will be upgraded but lot's of features you'll be missed out such as Pushmail etc. And also there are the maximum chances of being locked if you'll not go properly and maximum chance is that you'll may get a 1600 like errors. So wait for the next release of Dev Team.

Hope we'll get new release of redsn0w 3.1 for windows soon.
[ Picture Courtesy : http://www.geeky-gadgets.com/wp-content/uploads/2009/06/iphone-3GS-jailbreak.jpg]