Pinned Tweet
To anyone wondering about my repo, the domain expired. I don't really need a fancy website anymore, so I'm moving my repo to Github Pages.
jakeajames.github.io
Jake James retweeted
If you care about jailbreaking, DO NOT update to iOS 27.2. Stay on 27.0.1 or lower. Apple patched a bunch of bugs in 27.2 that can (theoretically) be used to achieve an untethered jailbreak.
nitter.cf/calif_io/status/211357…
nitter.cf/calif_io/status/211108…
After checking the just-released ipsw – the potential SPTM bypass bug (and my airlift sbx) appear to be unpatched on the Duo/iOS 27.1.
If you got a Duo and care about jailbreaking, stay on 27.1 if you can. All other devices should stay on 27.0.1.
iOS 27.1 (24A94425) has been released for 1 device
ipsw.me/download/iPhone19,4/…
Open-sourced CryptSn0w, our now obsolete untethered iOS ≤27/≤A20 Pro jailbreak via rare Apple server-side TSS/Cryptex bug. PATCHED, educational only. NOT a working jb
Built w @GenericCoding @D4RK7ET. SBInject: @htrowii. Help: @Jakeashacks @forcequitOS
github.com/0xjohnnydev/crypt…
Jake James retweeted
Really glad to have had the chance to work on this with @0xjohnny, @D4RK7ET, and for @htrowii giving us her process injection technique, and for the input and advice from @Jakeashacks without whom there were points this wouldn't have been possible.
github.com/0xjohnnydev/crypt…
mine can, but let’s be honest yours is cooler 😎, I never imagined MIE devices to get jailbroken with persistence twice in the span of what, one month?
Here's my project using the now patched TSS bug.
Actual TSS & deploy bit to be released at a later date.
github.com/jakeajames/tr0y/
hrtowii.dev/blog/making-a-no…
i whipped up a quick writeup here regarding this bug ^^
github repo:
github.com/hrtowii/lycorine-…
Replying to @0xjohnny
3/3 Root access =/= stable jb. Devices w/ the patchworked environment installed can still use what's there, but Apple's server now blocks further modifications. The bug itself is unfortunately useless now. Some1 will surely publish a technical writeup/PoC for those interested.
This bug was so special that I had to come back after years and get myself somewhat up to speed with latest iOS.
Replying to @Jakeashacks
Mr. Jake James it makes me beyond thrilled to hear you're still up to shenanigans in 2026
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
To celebrate iOS 27’s release, why not release a sandbox escape?
Announcing airlift: a PoC abusing a media sync path for out-of-scope access across much of /var/mobile via macOS↔iOS pairing.
No MobileGestalt edits yet; looking into it.
github.com/0xjohnnydev/airli…
Jake James retweeted
Dopamine 3 is out
infosec.exchange/@opa334/117…
































