Jailbreaking the iPhone involves working around Apple's security system to enable the device to run unsigned software. The iPhone's applications, just like its PNS communications, are encrypted using security certificates to prevent tampering, spoofing, or spying by malicious third parties.

Destroying the application security layer of the iPhone does not itself automatically break PNS, but (when combined with an "unofficial activation" required to use it with unofficial service providers) results in the system having no legitimate certificates to use in performing push notifications. Essentially, if the phone is not properly activated as intended through iTunes, the user's credentials for signing into Apple's PNS messaging servers (which are generated by the device itself in normal conditions) are broken along with the application security layer.

Dev team hackers trying to get jailbroken, alternatively activated phones to work with PNS allegedly made the mistake of adding an existing certificate to "fix" the problem. The hack simply identifies the new jailbroken phone to Apple as another phone that already exists, enabling messages to be sent to the wrong device.

Users who don't jailbreak their iPhone won't experience any problems with messages being broadcast to random other users. But those who tamper with the iPhone's security system will have to figure out how to generate SSL authentication keys appropriately to enable the phone to work with PNS messages correctly.

so the broadcasted pushs are bcuz of having both jailbroken and hactivation?

wouldnt a simple work around be to use a dead att sim for activation to keep half the PNS together be enough?

Originally Posted by truehybridx

so the broadcasted pushs are bcuz of having both jailbroken and hactivation?

wouldnt a simple work around be to use a dead att sim for activation to keep half the PNS together be enough?

The best workaround is to buy a properly unlocked iPhone and not have to worry about all of this !

Originally Posted by syntrak

The best workaround is to buy a properly unlocked iPhone and not have to worry about all of this !

Of course but I bought my iphone 3GS for 700 dollars - factory unlocked ones are a hell of a lot more then that!!

However even if I had a factory unlocked iphone I would still have to jailbreak it as caller ID wont work in my country unless I fix it as it is not supported!!

The easiest solution and I hope it does happen is for Apple to stop pissing about and simply sell the iphone unlocked with all countries languages and caller ID, regions supported.

Although making a fortune from AT&T im sure they would sell and make more money in the long run and their iphones would dominate the market like the ipods do to MP3 players!

ok well i can think of several better things to spend 1200 on than an iPhone 3GS... dirtbikes, a car, etc lol

any idea if after activation or hactivation the ID can be changed to reflect the SIM actually in it, to guarentee individual nonrepeating numbers?

Originally Posted by truehybridx

ok well i can think of several better things to spend 1200 on than an iPhone 3GS... dirtbikes, a car, etc lol

any idea if after activation or hactivation the ID can be changed to reflect the SIM actually in it, to guarentee individual nonrepeating numbers?

Well I agree but I bit the bullet and got myself a 3GS officially unlocked.

Fantastic piece of kit and I am using it all day for email instead of my MB Air.

Just hope I dont drop it like my first 3G and smash the screen....I bought a hard case for it also !

well then its got a nice 1yr warrentee and it doesnt matter if you unlocked cuz it already is

Originally Posted by syntrak

The hack simply identifies the new jailbroken phone to Apple as another phone that already exists, enabling messages to be sent to the wrong device.

Wouldn't that mean that Pushs from official phones are also being delivered to multiple phones (ie. the original one and the one identifying itself as the original). Wouldn't that furthermore even be at least a nuisance for officially unlocked users as their push messages aren't delivered to only the correct person. Doesn't that mean Apple has a serious security flaw in PNS ?

BTW I am waiting for my factory unlocked 3GS being delivered during next week, but I don't feel about PNS so confident anymore. Apple just should have allowed (at least 1 or 2) background processes. The whole Idea of PNS doesn't seem right for me. Also the fact that all communication for PNS goes through Apples servers. Lets hope all PNS Datagrams are encrypted.

At this point, Apple really should drop the whole activation process. It made sense when they sold the original iPhone as they had to make sure that people actually signed up for a plan when they got home with it. Now, you need to sign up for the plan on the spot, so I don't get why phones still need to be activated.

If Apple just automatically activated phones when they were plugged in to iTunes, this would solve the PNS dilemma. Yes, they'd be giving into unlockers a little bit, but they'd also save their own asses with all this PNS BS.