Filed under: iPod Family, Cool tools, Hacks, Security, iPhone
Confirmed: Jailbreak/AppSnapp fixes TIFF Exploit hole in iPhone Safari
For everyone worried about malicious TIFF exploits, you might want to take a few seconds and re-read those jailbreak features listed on the AppSnapp page. See number 6? Not only does the team jailbreak your phone, add Installer.app and fix YouTube, but they also repair patch Safari's TIFF exploit hole. Yes, you read that right. These amazing hackers have done Apple a huge favor and fixed the very same exploit they used to jailbreak.
For those of you asking about unactivated phones, if you use the Safari access trick I posted about a few weeks ago, you will even activate your iPhone and bypass the whole "connect to iTunes" screen.
Is it possible to love these guys any more?
Thanks to Nicholas "Drudge" Penree.
Update: If you have already jailbroken your iPhone or iPod touch and want to patch Safari, head over to Installer.app and look under 1.1.1 Tweaks.
Update 2: Just a reminder that the jailbreak is due in large part to the efforts of "rezn"
![TUAW [Cafepress]](http://www.blogsmithmedia.com/www.tuaw.com/media/tuaw-cafepress-promo.png)
Reader Comments (Page 1 of 3)
Scott said 11:27AM on 10-29-2007
Is there an app to be added to community sources that will fix the tiff exploit? I used ijailbreak and would prefer not to redo my jailbreak...but I want the tiff exploit fix (ipod touch)
Reply
mentalsticks said 11:28AM on 10-29-2007
wow... the first working day after Leopard's launch and guess what... four iPhone articles in a row, and not a single one on Leopard.
Reply
Scott said 11:38AM on 10-29-2007
app wish list to be added to community sources
tiff exploit fix app
customizer app that will work on ipod touch
calendar fix app
Reply
Goomba said 11:40AM on 10-29-2007
Please tell me how this post even constitutes as news. How about some Leopard posts?
Reply
adrenalin said 11:47AM on 10-29-2007
Such a shame that people insist on bashing any topics that are created on this site. This iPhone news is relevant, at least to me it is.
So you want Leopard news? How's this.....since performing a clean install of Leopard, not only does iPhoto stop responding when importing my pictures but so does Aperature. I figured some of my files might be corrupt but as I test I reinstalled Tiger and sure enough no issues. So it looks like Apple didn't bother making sure there own applications worked properly with Leopard. As a test I then went through the included apps with Leopard and even a simple game of Chess doesn't work. When I launch the app I just get a blank screen. Can't even get beat by the computer. Oh, and I have an 24" Intel iMac with 4Gb of ram.
Reply
brandon said 11:53AM on 10-29-2007
my youtube does NOT work after performing this jailbreak. a lot of the 3rd party applications also do NOT work for my phone (virgin 1.1.1). I do not know if it is just me or if anybody is is also experiencing these problems, but i'd like to see a resolution for them.
but great effort for making the process painless, jailbreak team.
Reply
Mars said 12:46PM on 10-29-2007
2 Questions:
Will patching the exploit cause problems if you ever have to Restore your phone and re-jailbreak it?
Does using this method with an untouched iPhone/Touch result in a functional YouTube app, as conventionally extra steps have been required to make that work.
Reply
JR said 11:55AM on 10-29-2007
Did we really need four iPhone posts in a row? Couldn't one post be updated a few times? I feel bad for anyone reading this through RSS.
Reply
Patrick McCarron said 11:56AM on 10-29-2007
Brandon, how did you activate your phone. Usually your activation method is the cause of YouTube not working.
Reply
Matteo said 12:06PM on 10-29-2007
Leopard has come out...
Users: oh... Just a couple of millions who actually have a Mac and all new buyers...
iPhone: 1.3 millions.. And only 20% of them hack the device.
I'll come back when something about Leopard is going to be posted. Sorry, but I live in Europe and this whole thing about the iPhone has just got out of hands.
Erica, don't get me wrong, I am sure your posts interest LOTS of people (about 20% of 1.3 Millions, something around the 260k), but the rest of us might want to hear about Leopard (I think I speak in behalf of the couple of millions who are still thinking whether Leopard is worth the upgrade or not).
Have you ever thought about starting an iPhone section here or elsewhere (TUIPW, The Unoffical iPhone Weblog)?
3 posts in a row...
I'll come back sometimes in the future maybe... For now I will read indepth reviews of Leopard elsewhere, sorry...
I am interested in what is new under the hood, which hints there might be about future directions of Apple's OS, what are the known bugs and so on.
Also, please Erica, put everything in one post, so it takes less space and people interested on the iPhone get all the recent news in one post.
Ah... ONE MORE THING...
Have you people heard that, in 2 months time, something called an SDK will come out? Please relax and enjoy the ride until then.
Sorry, but someone had to write it :-)
Reply
vandlism said 12:10PM on 10-29-2007
I'm beginning to think that the iPhone and iPod are only useful after being hacked. Too bad my iPod touch is awesome and doesn't require jailbreak to play music. Meanwhile I'm going to go back to playing with Leopard. Hey, how about instead of posting articles about why not to upgrade to Leopard, why not do a little research and begin finding out what developers are saying about Leopard and what we can expect for upcoming releases.
Reply
brando_commando said 12:16PM on 10-29-2007
Talk about a group of bitter people. So there's 4 iPhone articles in a row, SO WHAT? What is the big deal? It's more news for you to read. If you don't want to read it, you skip over it, just like you'd do with 90% of the crap they put in a newspaper. Seriously, grow up.
All this means is that theres more news for the iPhone than there is for Leopard. Leopard is what, 5 days old? What news is there going to be besides "YAY WE ALL HAVE IT." Seriously.
Reply
jus10 said 12:20PM on 10-29-2007
Actually pseudo-on topic instead of just blasting an iPhone post:
Does anyone know if Apple fixed the Tiff exploit in Safari in Leopard. I tend to use NightShift to run the Webkit nightlys so hopefully I'm patched. I was just curious.
Reply
Matteo said 12:22PM on 10-29-2007
First off... I have to apologize...
20" after my posting an article appeared on TUAW about "to upgrade or not to upgrade"... So I have to post an apology.
Something still remains though...
To put it simply: I would like someone, as knowledgeable and passionate as Erica, to post something more in depth about Leopard and all the bugs and problems.
At the same time I really would like to ask Erica about how she, and the community she is part of, feels about the SDK.
Some interesting things can be read elsewhere, such as:
"I know this LLVM subsection is quite a digression, but even if it's only used in a limited capacity in Leopard, LLVM is quite important to the future of Mac OS X. Indeed, it could also be important to the present of the iPhone and other OS X platforms.
I'm not sure how the iPhone supports all the visual effects used in its interface, but it's not unreasonable to imagine that Core Animation, OpenGL, and an LLVM-based software fallback are crucial to getting this all to hum on a platform with a relatively weak GPU and CPU. And did I mention that Apple recently did some extensive work on the LLVM ARM backend? You know, ARM, the CPU used by the iPhone. Yeah, the pieces sure seem to fit.
Anyway, thanks for the indulgence. If you want to learn more about the latest LLVM developments, check out the video of an LLVM presentation at Google given by Chris Lattner, LLVM lead developer and Apple employee."
This impacts the iPhone community, I think, and would be worth covering (quote taken from Ars-Technica)
Reply
jeremy said 12:25PM on 10-29-2007
I'm sorry but is there an one-click fix to revirginize your apptapped iphone? Or can i go this site with 1.0.2?
Reply
Trevor said 12:35PM on 10-29-2007
So, if I went to my local Apple store today and picked up a new iPhone and then ran the jailbreak through the Safari access trick I will be able to toss in my T-Mobile sim and be working?
If so I know what I'm doing after work. That would be fantastic.
Reply
Damien Stolarz said 12:34PM on 10-29-2007
Wow... now are people going to go into the Apple Stores and "enhance" all the display phones?
Reply
Stephen Lang said 12:32PM on 10-29-2007
When will people realize that TUAW posting is not a zero-sum game? A post about iPhones doesn't negate a post about Leopard. If they find something about Leopard (or someone sends in a story), they will post it. It's really that simple.
Are there any particular Leopard stories out there that you think TUAW is remiss in not posting? Telling them to just 'post some Leopard stuff' is ultimately helpful for no one.
Reply
Damien Stolarz said 12:38PM on 10-29-2007
I wonder if the Apple Stores will now be full of customer "enhanced" demo iphones and iPod touches... I can see customers going "but the display model had a SNES emulator..."
Reply
Trevor said 12:38PM on 10-29-2007
Nevermind, I just saw the previous post. I see now that this won't unlock a phone.
Reply