# Apple's iPhone XS-to-11 Just Got an Unpatchable Crack — "usbliter8" Breaks In In 2 Seconds **URL:** \ **Category:** News & Articles\ **Tags:** hacking, phone, privacy, tips-tricks, news\ **Created:** [มิถุนายน 21, 2026, 5:04pm UTC](https://onehack.st/t/apples-iphone-xs-to-11-just-got-an-unpatchable-crack-usbliter8-breaks-in-in-2-seconds/323286 "2026-06-21T17:04:55Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Sarah](https://onehack.st/user_avatar/onehack.st/sarah/32/166974_2.png) [@Sarah](https://onehack.st/u/Sarah)\ **Post date:** [มิถุนายน 21, 2026, 5:04pm UTC](https://onehack.st/t/apples-iphone-xs-to-11-just-got-an-unpatchable-crack-usbliter8-breaks-in-in-2-seconds/323286/1 "2026-06-21T17:04:55Z")
# 🔓 Apple’s iPhone XS-to-11 Just Got an Unpatchable Crack — “usbliter8” Breaks In In Under 2 Seconds _A hardware bug baked into the chip itself. No update can fix it. Ever. And it’s public now._ **Affected: iPhone XS, XS Max, XR, iPhone 11 (all of them), plus some iPads + Apple Watches. Attack time: under 2 seconds. Patchability: zero.** Researchers at a crew called Paradigm Shift dropped the full how-to on June 18, 2026. They named it usbliter8. It lives in the chip’s birth-code — the stuff burned into silicon at the factory — so Apple literally cannot push a fix. [Here’s the writeup via 9to5Mac.](https://9to5mac.com/2026/06/18/new-unpatchable-exploit-targets-apple-devices-with-a12-and-a13-chips/) Between you and me? This is the same kind of door that turned old iPhones into the wild west years ago. Apple thought they sealed it. They didn’t. → A whole pile of “dead” phones just became playgrounds again. Let me break down what actually happened and where the money’s hiding. > **🧩 Dumb Mode Dictionary (read this first, nothing scary)** > > | Term they use | What it actually means | > | --- | --- | > | **SecureROM / BootROM** | The very first code a phone runs the second you power it on. Burned into the chip at the factory. Can’t be changed. | > | **Unpatchable** | Apple can’t fix it with a software update. The flaw is in the metal, not the software. | > | **usbliter8** | The nickname for this new hack. Plays on “USB” + “obliterate.” | > | **DFU mode** | A special “I’m totally asleep, reprogram me” state the phone goes into. | > | **A12 / A13 chip** | The brains inside iPhone XS, XR, and the iPhone 11 family (2018-2019 phones). | > | **Jailbreak** | Removing Apple’s locks so YOU decide what runs on the phone, not them. | > | **RP2350** | A $5 hobbyist chip board (the new Raspberry Pi Pico brain) you plug in to run the hack. | > **📟 What actually happened (the short version)** > > - A research group, [Paradigm Shift](https://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.html), found a bug in the USB controller of Apple’s A12 and A13 chips. > - They combined it with a firmware mistake and got full control of the phone — running their own code before iOS even wakes up. > - It’s **physical only** : you need the phone in your hands, plugged into a little [RP2350 board](https://www.raspberrypi.com/products/raspberry-pi-pico-2/) via USB. > - Once it’s done (under 2 seconds), the phone stays cracked through updates, restores, reboots — forever. > - This is basically the spiritual sequel to [checkm8](https://en.wikipedia.org/wiki/Checkm8), the legendary 2019 unpatchable exploit. Old-timers know the play. > **📱 Which phones are sitting ducks** > > | Device | Chip | Status | > | --- | --- | --- | > | iPhone XS / XS Max / XR | A12 | Crackable | > | iPhone 11 / 11 Pro / 11 Pro Max | A13 | Crackable | > | Several iPads (2018-2019) | A12/A13 | Crackable | > | Apple Watch S4 / S5 | S4/S5 | Crackable | > > Translation: any iPhone from roughly 2018-2019. There are _hundreds of millions_ of these floating around in drawers, repair shops, and resale markets worldwide. [MacRumors has the full device list.](https://www.macrumors.com/2026/06/18/a12-and-a13-chips-facing-exploit/) > **🗣️ What the timeline's saying** > > - Privacy folks are split: [PrivacyGuides flagged](https://www.privacyguides.org/news/2026/06/19/unpatchable-exploit-found-apples-a12-a13-chips/) that if someone grabs your old phone, they can own it forever. Don’t hand these off without wiping AND retiring them from anything sensitive. > - Tinkerers are _thrilled_ — unpatchable = a permanent, reliable door for modders and repair shops. > - Apple’s response so far: it needs physical access, so they’re shrugging in public. (They were “coordinated disclosed,” meaning the researchers told Apple first.) > **⚠️ The honest catch (so you don't get burned)** > > Nobody’s hacking your XR over wifi from across the planet. This needs **hands-on the device + a USB cable + a little board**. So the real danger is a lost/stolen/secondhand phone — not your daily driver sitting in your pocket. → That same limitation is exactly why the _legit_ hustles below work: you’re doing this to phones YOU own. #### Cool. So a bunch of “obsolete” iPhones just got immortal. Now What the Hell Do We Do? (ง •̀\_•́)ง ![circuit board](https://media.giphy.com/media/AdtB8TtizElk0OrRGR/giphy.gif) > **🪦 The Graveyard Flipper** > > Repair shops and recyclers sit on piles of A12/A13 phones marked “locked” or “parts only” — sold dirt cheap because nobody could do anything with them. This crack changes what “useless” means. Buy the cheap pile, turn them into clean, modded, single-purpose devices, sell them for 4-5x. > > 🧠 _Example:_ A 24-year-old repair-shop kid in Lagos, Nigeria buys “for parts” iPhone XRs at ~$22 each from local resellers on [Jiji](https://jiji.ng/), cleans them into media/retro-game devices, and resells on the same platform for $90-110. He moves 15 a month. > > > 📈 **Timeline:** First flip in a week. Stays good 6-9 months until local prices on these old units climb as everyone catches on. > **🎮 The Pocket Arcade Factory** > > An A13 iPhone 11 is a stupidly powerful little computer. Once it’s jailbroken, you can load emulators and turn it into a dedicated retro handheld — no app store, no Apple permission, no nags. People pay a premium for a clean “console” that isn’t their phone. > > 🧠 _Example:_ A 19-year-old in Manila, Philippines grabs cracked iPhone XRs, installs free emulators via [AltStore](https://altstore.io/), preloads them, and sells “retro pocket consoles” on Facebook Marketplace for ₱5,500 (~$95). Buyers love that it just works out of the box. > > > 📈 **Timeline:** First sale in days. Honest plateau when bigger sellers flood the same niche in ~3 months — get in early. > **🛡️ The Burner-That-Isn't** > > Here’s the angle nobody’s talking about: a jailbroken old iPhone can be stripped down into a locked-down, single-purpose device — one app, no tracking junk, no background phone-home. Small businesses love a cheap “kiosk” tablet/phone they fully control. You sell setup + the device. > > 🧠 _Example:_ A 27-year-old in Medellín, Colombia turns cracked iPhones into single-app order-kiosks for cafés (menu app only, locked down), charging shops $140 per unit + $15/month for swaps. Five cafés signed in his first month. > > > 📈 **Timeline:** First client in 2 weeks. Recurring income holds as long as you keep the devices serviced — this one actually lasts. > **⛏️ Sell the Picks, Not the Gold** > > Everyone’s gonna want to try this, and 90% won’t know how to wire up an [RP2350 board](https://www.raspberrypi.com/products/raspberry-pi-pico-2/). So don’t chase the hack — sell the _kit_. Pre-flashed board + cable + a one-page idiot-proof guide. The people digging for gold always need shovels. > > 🧠 _Example:_ A 22-year-old electronics student in Shenzhen, China sources RP2350 boards for ~$3, pre-flashes them, bundles a cable + printed guide, and sells “plug-and-go kits” on [AliExpress](https://www.aliexpress.com/) for $24. Pure margin, ships worldwide. > > > 📈 **Timeline:** First orders in 10 days. The window is the loud part — heaviest demand in the first 2-3 months while it’s front-page news. > **🔧 The Data Rescue Desk** > > Tons of people have an old iPhone XS/11 they’re locked out of — forgotten passcode, dead owner, hand-me-down. With physical access and the owner’s permission, this exploit opens doors a normal repair shop can’t. Offer “locked old iPhone? We’ll recover your photos” as a legit, consent-based service. > > 🧠 _Example:_ A 30-year-old in Karachi, Pakistan advertises “old iPhone photo recovery” on [OLX](https://www.olx.com.pk/), only takes devices with proof of ownership, and charges Rs 6,000 (~$21) per recovery. Word-of-mouth got him 20 jobs in month one. > > > 📈 **Timeline:** First paying job in a week. Steady demand — old phones break and get forgotten forever, so this doesn’t really dry up. > **🛠️ Follow-Up Actions** > > | Step | Do this | Resource | > | --- | --- | --- | > | Learn the landscape | Read the technical writeup | [The Hacker News](https://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.html) | > | Get the board | Order an RP2350 / Pico 2 | [Raspberry Pi](https://www.raspberrypi.com/products/raspberry-pi-pico-2/) | > | Get jailbreak tools | App sideloading without Apple | [AltStore](https://altstore.io/) | > | Source cheap phones | Local “for parts” listings | [eBay](https://www.ebay.com/) / local marketplaces | > | Stay safe | Understand the privacy risk | [PrivacyGuides](https://www.privacyguides.org/news/2026/06/19/unpatchable-exploit-found-apples-a12-a13-chips/) | **⚡ Quick Hits** | You want to… | Here’s the move | | --- | --- | | 💸 Flip dead phones | Buy “parts-only” [A12/A13 units](https://www.macrumors.com/2026/06/18/a12-and-a13-chips-facing-exploit/), revive, resell 4-5x | | 🎮 Build retro consoles | Jailbreak + [emulators via AltStore](https://altstore.io/) | | 🔌 Sell the kit | Pre-flashed [RP2350 boards](https://www.raspberrypi.com/products/raspberry-pi-pico-2/) + guide | | 🛡 Protect yourself | Retire old iPhones from anything sensitive — [here’s why](https://www.privacyguides.org/news/2026/06/19/unpatchable-exploit-found-apples-a12-a13-chips/) | | 🧠 Understand it | Read the [checkm8 backstory](https://en.wikipedia.org/wiki/Checkm8) — this is round 2 | _Apple sealed the door. Turns out the lock was painted on. → The drawer full of “dead” iPhones just woke up._