WEBVTT

1
00:00:00.600 --> 00:00:07.775
Welcome. Why does anyone jailbreak an iPhone or root an Android phone, and what do they gain and lose?

2
00:00:08.225 --> 00:00:14.400
There are two very different groups: owners who want more control, and attackers who want more access.

3
00:00:14.850 --> 00:00:19.300
Understanding both is the key to deciding how your app should react.

4
00:00:20.900 --> 00:00:28.200
A jailbreak uses a vulnerability to bypass Apple's restrictions and gain privileged access to iOS.

5
00:00:28.650 --> 00:00:36.100
Rooting gives a user, or an app, superuser access on Android. It usually starts with unlocking the bootloader.

6
00:00:36.550 --> 00:00:43.825
Different mechanics, same effect: the sandbox and the code signing the vendor enforces stop being guarantees.

7
00:00:44.275 --> 00:00:50.150
The result is privileged access to the whole device, and that is what everyone is after.

8
00:00:51.767 --> 00:00:58.742
Most owners are after customisation: themes, system tweaks, and features the vendor does not offer.

9
00:00:59.192 --> 00:01:05.792
Others want the freedom to install apps from alternative sources, or to keep an older version they prefer.

10
00:01:06.242 --> 00:01:12.667
Some want privacy and control, such as system-wide ad blocking, firewalls, and full backups.

11
00:01:13.117 --> 00:01:20.442
And developers and researchers do it to inspect traffic, test their apps, and understand how the system really works.

12
00:01:22.067 --> 00:01:28.842
Attackers want what the sandbox protects: other apps' data, including keychain items and tokens.

13
00:01:29.292 --> 00:01:35.642
They want to bypass your logic: hook functions, defeat SSL pinning, and skip login checks.

14
00:01:36.092 --> 00:01:42.492
They want to tamper with your app, then re-sign it and redistribute a cracked or trojanised copy.

15
00:01:42.942 --> 00:01:48.942
And they want fraud at scale, spoofing devices and automating abuse across many accounts.

16
00:01:50.567 --> 00:01:57.967
On the upside, owners get deep customisation. On the downside, the security model is weakened or gone.

17
00:01:58.417 --> 00:02:05.567
They can install apps from outside the official store, but that makes it easier to install malware or a tampered app.

18
00:02:06.017 --> 00:02:13.917
They get full control of files, backups, and the network, but apps that depend on device integrity may refuse to run.

19
00:02:14.367 --> 00:02:20.367
And they get freedom to research and debug, though updates, warranty, and support can be affected.

20
00:02:21.967 --> 00:02:28.992
The biggest cost is a larger attack surface: any app that gains root can reach everything on the device.

21
00:02:29.442 --> 00:02:37.767
Many banking, payment, game, and media apps block rooted or jailbroken devices, so the owner loses access to them.

22
00:02:38.217 --> 00:02:44.242
Updates become fragile, because a system update can break tweaks, or the jailbreak itself.

23
00:02:44.692 --> 00:02:47.817
In short, more freedom, and less protection.

24
00:02:49.433 --> 00:02:54.783
The library can see the state of a device. It cannot see the intent behind it.

25
00:02:55.233 --> 00:03:00.458
An unlocked bootloader can be a developer test phone, or the first step to rooting.

26
00:03:00.908 --> 00:03:06.458
An attached debugger can be you in Xcode, or someone reverse engineering your app.

27
00:03:06.908 --> 00:03:13.308
An emulator can be your QA team, or a bot farm. That is why the policy is configurable.

28
00:03:14.933 --> 00:03:20.883
First, detect without assuming. The signals are risk indicators, not proof of malice.

29
00:03:21.333 --> 00:03:27.608
Second, respond by risk. Warn, limit features, or block only the high-value actions.

30
00:03:28.058 --> 00:03:36.033
Third, confirm on the server with Apple App Attest and the Play Integrity API, because client checks can be bypassed.

31
00:03:36.483 --> 00:03:42.208
Fourth, be fair to power users. Do not lock harmless tinkerers out of low-risk screens.

32
00:03:43.833 --> 00:03:50.658
Let us recap. One: jailbreaking and rooting give the same access to two groups with different motives.

33
00:03:51.108 --> 00:03:57.408
Two: owners gain freedom, through customisation, sideloading, privacy tools, and research.

34
00:03:57.858 --> 00:04:04.458
Three: they also lose protection, with a larger attack surface, blocked apps, and fragile updates.

35
00:04:04.908 --> 00:04:12.008
Four: your app cannot see intent, so it should judge the risk, respond proportionately, and confirm on the server.

36
00:04:13.633 --> 00:04:19.358
Thanks for watching. The jailbreak and root videos show exactly how each signal works.

37
00:04:19.808 --> 00:04:24.508
The README threat model explains the limits of client-side detection.