SecureROM Exploitation Checkra1n pdf presentation

Pdf presentation from Luca Todesco aka qwertyoruiop, The One Weird Trick SecureROM Hates:

SecureROM is the very first code to run on the Application Processor upon cold boot. The stripped-down and simplified version of iBoot. Patterned in silicon as mask ROM, thus immutable. Most trusted code to run on the Application Processor. The main goal is to load a first-stage bootloader image from the non-volatile memory and boot it, But it also provides an emergency recovery mechanism called DFU, which allows you to upload an image over USB. Can enter via a special key combo held during reset.

Download pdf presentation from Luca Todesco aka qwertyoruiop

Future Plans

• Ideally, our aim for this project is to move from being a pure jailbreak to providing something like an iOS version of Clover • Custom on-boot kernel extension loading • Jailbreak patch set can be moved here to simplify maintenance and versioning • Dual booting • Very useful for research purposes • Linux on iPhone

NOTE:
As soon as the Checkra1n comes out to the public we will publish here on the myicloud iBlog hoping for magic happen / jailbreak / custom firmware / iOS 13 and much more.

More:

New Unc0ver Jailbreak iOS 12.4 for A7-A11 devices (Latest and signed firmware)

Download CHIMERA Jailbreak (ELECTRA) for iPhone XS/MX/XR (A12)