Hacker Demonstrates Downgrade of iOS 9.3.5 to iOS 9.3.2? [Video]

POST

MAIL

Posted September 6, 2016 at 3:34pm by Shalom Levytam

A hacker known as tihmstar has allegedly demonstrated a downgrade of iOS 9.3.5 to iOS 9.3.2. It has not been possible to downgrade iOS firmware for quite some time. A working method would potentially allow all users to get to a jailbreakable firmware version.

In a video posted to YouTube, tihmstar demos 'prometheus', an upcoming tool which supports downgrading 64bit devices if APTicket (shsh files) are saved and certain other conditions are met.

The video's description says, "It is currently unknown what conditions have to be met to be eligible for downgrade without jailbreak."

On Twitter tihmstar notes, "A different method does exist, but is in development at the moment, so stay tuned and let me figure out how you can use your saved blobs."

At this point, it's unclear if the downgrade tool is legitimate but you can follow iClarified on Twitter, Facebook, or RSS for updates.

Follow iClarified

Great! - September 7, 2016 at 12:57am

Ultimate hack is to impersonate Apple's signing server. Then they can sign every version of iOS and allow one to downgrade to any iOS version.

Reply · Like

Kk - September 6, 2016 at 11:49pm

I smell a lot $$$ for this security hole

stevenlacross - September 6, 2016 at 5:48pm

I think your phone has to currently be on iOS 9.3.2 cause it looks like it's grabbing the current signing info from the device in restore mode, thats how it has been before in iOS 8 and so forth, so if you've never jailbroken and on iOS 9.3.5, I don't think you'll be able to downgrade to 9.3.2, but if your currently on iOS 9.3.2 or 9.3.3 maybe, you'll be able to do a full dfu restore to that same version your currently on. Maybe unless they've truly figured out a glitch in the matrix

stevenlacross - September 6, 2016 at 5:52pm

Also they don't show that the phone is on 9.3.5 before beginning the restore, and also there's a cut while setting up the phone that's was supposedly just restored, maybe they just wrote a program that looks like it's doing a restore, and it displays the file name of 9.3.2 while it's actually 9.3.5 and then they swapped out the phone near the end during the cut with one that was still on 9.3.2 and just had reset all content and settings to show that it was at the factory setup page while still being on 9.3.2. I'm going to watch it again and see if the serial number that's in the phone(if it gets displayed near the end) matches anything that I can possible get a glimpse of that's blacked out while doing the restore, chances are it doesn't match.

drigomarki - September 6, 2016 at 5:25pm

smart fella, no doubt.

mohsinmmp - September 6, 2016 at 3:49pm

brilliant bro excellent work