Exploit Update

I feel it's needed to write a quick note here. If you are seeing ads on this page, you navigated here using someone elses site. I have never had ads on this page. Go to this page at http://iphonejtag.blogspot.com/ or http://georgehotz.com/ NOT geohotblog.com

Also update on the exploits. A16 is a buried via, but it is right at the edge of the chip. Just scrape the epoxy away and hook a wire under there. I'd do it but a lot of my hardware stuff is at RIT. And I didn't say the software exploit would be easy, but this paper alludes to 2/3 of the message being spoofable. 2/3 is 3 bytes away from how much we need, and 3 bytes can be brute forced easily enough. Of course 1/3 is trivial to exploit with a cube root, I understand that math well enough.