Today, we hacked what we'd set out to hack: the iPhone

john_strinlai

the videos just don't hit the same without the dancing anime girl and the electronic dance music.

arjie

Same guys who found the PHP. Edit: hahaha you guys are funny. “The php hack” is what I meant!

suralind

I'm not sure if this is real, but if it is: this week is unbelievable. I really hope it's not the new normal, but unfortunately I don't believe this myself.

ChrisArchitect

Oct 16th post; More recently: iPhone Duo Jailbreak vid https://x.com/calif_io/status/2113570095549337977 ( https://news.ycombinator.com/item?id=50206680 )

erelong

Hoping more "unsupported" older "iDevices" can be made usable with newer software with something like "jailbreaking"

whynotmaybe

Eli5 the iMessage video? They open a file that calls their webapp?

slowin

#3 is so nice, I want root access to my phone. Does anyone know if doing this can lock Apple out from updating/removing it?

nalekberov

I think we will probably see more and more restrictions on frontier models in the coming months. This is not what behemoths like Apple and Sony want to see. Paradoxically, people are happier to buy things that they have control over, but boy, Apple loves to control every layer of consumerism.

zb3

Too bad this will be patched instead of allowing the device owner to control their own device. Of course it's better that they found that before some shady mercenary spyware company, but I'd also want to control my ios device the same way they did in the video, but no, that's not for us.

MYEUHD

More details: https://onejailbreak.com/blog/iphone-duo-ios-27-1-jailbreak-...

paxy

Man, sucks to see these "hacked" iPhones doing so many cooler things than my Apple-approved one.

Thaxll

Is it an exploit around the library that handles PDF parsing/opening? Can someone explain how files / attachement are open on a mobile device ( android/iPhone). I don't understand how in 2026 this is still a thing, we have many safe languages to parse/deserialize data. Why is it complicated?

ghm2180

Noob q: Does this(and most) hacks like this on the iphone likely rely on some kernel module — or what it talks to for executing code — being compromised to run arbitrary code execution? I dunno about ios but it seems from the videos that something that reads imessage attachments was compromised for privilege escalation. Like what im mean is an attack vector shaped similar to https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/ i.e. they compromised `fs` module that did not protect against a buffer attack(in memmov)? My understanding is that most core kernel modules are difficult to attack directly because of XOM, PAC and CFI like protections make it impossible for anyone/thing, so most likely only indirect attacks like above can work in such situations — there is a lot of incentive for teams like apple to do everything possible to improve security so i assume only these kind of difficult to find vectors remain.

jonathanstrange

My dream is to release an iOS app that self-installs and not say anything special about it other than having a "Download for iPhone" button on my website. If someone asked me, I'd answer: "Huh, what do you mean? It's our app for the iPhone."

nsxwolf

What are these videos actually demonstrating?

cromka

Someone correct me please if I’m wrong but is this because iOS doesn’t sandbox their processes? I think I read Safari in particular doesn’t, but wonder if this is system-wide issue. The more of this stuff we see, the more people will start using GrapheneOS, I guess. Also wonder why they choose to publish and not cash-in the Apple bounty..

reacharavindh

It’s a pity we gave in to the “ecosystem” play by these huge companies.. even if I jailbreak my iOS and never let it update.. Apple can easily detect the jailbreak and lock me out of anything iCloud, and iMessage and such. iPhone would be one glorious iPod touch after that.. :-( Seeing all these gives me the same energy of early days of jailbroken Android phones where one could become root and do whatever with the hardware… I stopped considering such tinkering because I got tired of finding those little tweaks and fixes on forums like xda every time something was updated. With the LLMs capable of automating that tool, I might find those old school way of mobile phones again…

ValtteriL

Curious to see how many tokens was spent

baq

guess who put themselves on the must-hack list of every single national intelligence agency

SoKamil

Stay on 27.0 or upgrade to 27.0.1?