Bug

Apple releases iOS 11.0.3 with minor bug fixes

Apple released iOS 11.0.3 on Wednesday as a minor update to the company's newest mobile operating system with small bug fixes and improvements targeting specific iPhone models.

In particular, the update sets its sights on the iPhone 6s, iPhone 7, and iPhone 7 Plus handsets, but it can be installed on any supported Apple device.

Apple isn’t paying bug hunters nearly enough for iPhone exploits

According to a report from Motherboard, iPhone, iPad and Mac bugs are too valuable to report to Apple, which leads to sky-high prices for iOS and macOS exploits on the grey market.

“For now, security researchers who have been invited by Apple to submit high-value bugs through the program prefer to keep the bugs for themselves,” reads the article. All of the eight bug hunters that the publication interviewed said they have yet to report a bug to Apple.

According to Nikias Bassen, a security researcher for the company Zimperium, and who joined Apple's program last year:

People can get more cash if they sell their bugs to others. If you're just doing it for the money, you're not going to give bugs to Apple directly.

Apple's bug-bounty initiative debuted at the Black Hat conference in August 2016.

The program offers between $25,000 and $200,000 for an iOS or macOS exploit, depending on where it is and what it does. For now, the initiative is invite-only.

As The Loop's Dave Mark put it, the question here is, are the bugs valuable enough for Apple to raise their bounties to compete with the grey market?

How to restore your device to iOS 9.x with iDeviceReRestore

A while back we broke the story of a bug which was allowing restores to iOS 9 firmwares, without even needing a jailbreak. It was subsequently discovered that the bug was more far-reaching than originally thought, allowing restores to iOS 9.x from any firmware, not just from iOS 9.

The tool was released a week or so ago, and so we thought the time was right for a tutorial. Follow our instructions here to bring any 32-bit device back to any iOS 9.x firmware you have blobs for, from any starting firmware. No keys, bundles, nonces, or jailbreak required!

iPhone 3GS untethered bootrom exploit released

Today saw the release of a new bootrom exploit for the iPhone 3GS, an unpatchable vulnerability which gives jailbreakers total control of this device forever.

Although the iPhone 3GS is now very much a legacy device and few users will be actively using them, the rarity of a bootrom exploit makes it worthy of note. There have been no publicly released exploits of this kind since limera1n, which supported only up to the iPhone 4.

Has iOS 10.3 randomly turned on your previously disabled iCloud services in Settings?

Released nine days ago, iOS 10.3 appears to be randomly re-enabling iCloud features that users previously disabled in Settings. The software update consolidates the various iCloud and Apple ID-related features under one central place at the top of the Settings app. The new organization has nothing to do with this behavior. It's a bug, Apple told customers in an email message obtained by MacRumors, that affects a small number of users.

iOS 9.x Re-restore bug even more powerful than previously thought

I reported a few weeks back on an interesting new bug for 32-bit devices, which allowed you to restore them to any unsigned iOS 9.x firmware, provided you had blobs for the destination firmware.

At the time, it was thought that the bug would mainly be of use for people downgrading from iOS 9.3.5 to a lower firmware, to jailbreak with Home Depot or Pangu9. However, it turns out the bug is in fact more powerful and wide-ranging than previously thought, and may have much wider utility.

Apple Music randomly skipping songs? You are not alone

A weird little bug has made its way into Apple Music over the last day or so that makes the service randomly skip songs during playback. I first noticed this last night while playing music on my Apple TV, and earlier today on both my iPhone and Mac.

A quick Twitter search showed that was indeed not the only one in this boat, and after contacting Apple, I have learned that the company is aware of the issue and should fix the problem in the next 72 hours.