Nicholas Allegra

Background

Nicholas Allegra, widely known online as "comex," is an American software developer and security researcher who became prominent within the iOS jailbreaking community in the late 2000s and early 2010s. He was reported to be 19 years old at the time his work drew national media attention in 2011. Like several other well-known jailbreak developers of the era, Allegra operated largely under his handle within the hobbyist and security-research communities that reverse-engineered Apple's mobile software.

JailbreakMe

Allegra is best known as the developer behind JailbreakMe 2.0, nicknamed "Star," released on August 1, 2010. Unlike earlier jailbreak tools that required connecting a device to a computer, JailbreakMe worked entirely through the device's Safari browser: visiting the JailbreakMe website triggered a chain of vulnerabilities, including a flaw in the FreeType font-rendering library used in PDF processing, that allowed the site to gain code execution and jailbreak the device on the spot. JailbreakMe 2.0 was the first publicly available jailbreak for the iPhone 4 and supported a range of iOS versions on multiple device models.

In July 2011, Allegra released JailbreakMe 3.0, nicknamed "Saffron," which again exploited a PDF-rendering flaw and became the first public jailbreak for the newly released iPad 2. The tool was reported to have been used to jailbreak millions of devices. Because the underlying vulnerabilities allowed arbitrary code execution simply by loading a webpage, security researchers and Apple itself treated the flaws as serious, and Apple issued software updates to patch them shortly after each release.

Recognition and Apple internship

For his work on JailbreakMe, Allegra received a Pwnie Award for "Best Client-Side Bug" at the Black Hat security conference in August 2011, an award given by the security research community to recognize particularly notable vulnerability discoveries. Later that same month, Allegra announced on Twitter that he would begin an internship at Apple. In comments to reporters at the time, he described the move toward defensive security work as "kind of refreshing," framing his motivation as being driven by technical challenge rather than opposition to Apple. Apple's decision to hire Allegra, rather than pursue legal action, was widely contrasted in press coverage with Sony's contemporaneous lawsuit against hacker George Hotz over jailbreaking of the PlayStation 3.

Significance and legacy

JailbreakMe's browser-based, "visit a webpage to jailbreak your phone" model made mobile exploitation vastly more accessible to ordinary users than earlier tethered or semi-tethered jailbreak methods, and it briefly turned Safari's PDF and font-parsing code into one of the most consequential attack surfaces on iOS. The episode is frequently cited in the history of mobile security as an early, high-profile demonstration that a single malicious web page could fully compromise a modern smartphone, and as one of the clearer instances of a technology company absorbing an outside hacker into its own security organization rather than treating the disclosure purely as a legal or adversarial matter.

Timeline

• 2010-08-01Releases JailbreakMe 2.0 ("Star"), a browser-based jailbreak exploiting a FreeType PDF-rendering flaw and the first public jailbreak for the iPhone 4.
• 2011-07-06Releases JailbreakMe 3.0 ("Saffron"), the first public jailbreak for the iPad 2, again using a browser-based PDF exploit.
• 2011-08-04Receives a Pwnie Award for Best Client-Side Bug at Black Hat 2011 for the JailbreakMe exploit chain.
• 2011-08-26Announces via Twitter that he will begin an internship at Apple, reported by Forbes as "Apple Hacker Extraordinaire Comex Takes An Internship At Apple."