Pinned Tweet
I am done with this platform!
Mastodon: infosec.exchange/@opa334
Bluesky: bsky.app/profile/opa334…
Threads / Instagram: opa334
Mastodon: infosec.exchange/@opa334
Bluesky: bsky.app/profile/opa334…
Threads / Instagram: opa334
57
22
225
198,426
opa334@infosec.exchange retweeted
Revisiting SecureROM Adventures by Steven De Franco (@iH8sn0w)
1
5
95
12,842
opa334@infosec.exchange retweeted
For those that aren't aware: 27.2 beta 3 did likely patch an SPTM Bypass.
The advice through everything has still been "stay and wait for stuff", and that hasn't changed in the slightest
However, as there's more "known" (for lack of a better term) about this (compared to the exact specifics of the Calif chain), I would say that - if you end up in a situation where you absolutely have to update - I would highly recommend avoiding anything past 27.0.1/27.2b2 (and probably 26.7.1 for AlternateSU)
The advice through everything has still been "stay and wait for stuff", and that hasn't changed in the slightest
However, as there's more "known" (for lack of a better term) about this (compared to the exact specifics of the Calif chain), I would say that - if you end up in a situation where you absolutely have to update - I would highly recommend avoiding anything past 27.0.1/27.2b2 (and probably 26.7.1 for AlternateSU)
16
35
203
22,177
opa334@infosec.exchange retweeted
Hell yeah Cellebrite is dropping SecureROM 0days on stage (variant of usbliter8) !!
8
34
365
44,724
opa334@infosec.exchange retweeted
Finally got around to releasing Trigon for arm64e. Enjoy!
alfiecg.uk/2026/10/17/Tri…
alfiecg.uk/2026/10/17/Tri…
10
55
369
25,330
opa334@infosec.exchange retweeted
Managed to get @opa334dev to talk about the TSS bug on chITchat 👀 You can listen on most platforms but here is the link to Spotify. Will upload to youtube as well. open.spotify.com/episode/5fIleg…
RIP 🪦
Craziest bug I have ever seen in my 10 years of being in the iOS scene.
I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
1
26
178
32,501
RIP 🪦
Craziest bug I have ever seen in my 10 years of being in the iOS scene.
I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
Craziest bug I have ever seen in my 10 years of being in the iOS scene.
I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
25
91
1,292
212,358
I also could show tweaks, but I have been so busy getting the base environment to the point where it's usable even after the bug is patched that I didn't even get around to doing proper tweak injection yet 😅
7
1
117
24,166
opa334@infosec.exchange retweeted
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
59
107
1,313
331,120
opa334@infosec.exchange retweeted
🚨 Meet the first speaker of #POC2026
Lars Fröder (@opa334dev) - “iOS Jailbreaking: From P(PL)ast to PreS(PTM)ent”
This is just the beginning. More POC2026 speakers will be revealed soon — stay tuned.
👀 Our CFP is still open until September 30.
Lars Fröder (@opa334dev) - “iOS Jailbreaking: From P(PL)ast to PreS(PTM)ent”
This is just the beginning. More POC2026 speakers will be revealed soon — stay tuned.
👀 Our CFP is still open until September 30.
0
20
177
13,466
opa334@infosec.exchange retweeted
Titan: a PPL & SPTM bypass for A14 - A17
github.com/alfiecg24/Titan
github.com/alfiecg24/Titan
12
121
604
39,947
opa334@infosec.exchange retweeted
Hi @Apple! 🥰
Looks like you're using Dopamine internally on iOS 26, would you kindly submit a PR to the GitHub repo?
Oh, and don't forget to unban @opa334dev's developer account, that would help future Dopamine releases!
x.com/_gilboz/status…
Looks like you're using Dopamine internally on iOS 26, would you kindly submit a PR to the GitHub repo?
Oh, and don't forget to unban @opa334dev's developer account, that would help future Dopamine releases!
x.com/_gilboz/status…
iOS 26.6 SpringBoard sandbox profile 😂?
6
48
625
120,820
opa334@infosec.exchange retweeted
On that note, enforcing boatloads are unlocked when devices are no longer supported by the manufacturer would be a great first step.
I dread to think how many TFLOPs of compute end up in landfill every year because the software it’s forced to run makes it effectively useless.
I dread to think how many TFLOPs of compute end up in landfill every year because the software it’s forced to run makes it effectively useless.
I think — genuinely — the only hope for jailbreaking at the point is if the EU forces manufacturers to have unlocked bootloaders. It is deeply fucked up to me that you can buy a $1000 computer and are not allowed to install your own software on it.
5
3
85
60,881
opa334@infosec.exchange retweeted
I think — genuinely — the only hope for jailbreaking at the point is if the EU forces manufacturers to have unlocked bootloaders. It is deeply fucked up to me that you can buy a $1000 computer and are not allowed to install your own software on it.
“Semi-jailbreak” makes me immensely sad
6
11
196
108,612
Instead of warning about exploit source code that does nothing harmful whatsoever, how about doing something about all the countless fake jailbreaks hosted on your platform that all link to the similar sites (e.g. pangu8(.)com) that sell fake software for real money? @github
25
50
574
77,613
