What JailbreakMe 3 did
Jailbreaking removes the restrictions Apple places on its own devices, allowing software the company has not approved. Most jailbreaks of the period required a cable, a desktop computer and a sequence of steps. Allegra's did not: a user visited a web page and the device was unlocked.
The mechanism, as Forbes described it, was a vulnerability in the way iOS handled fonts inside PDF files. From that foothold the exploit located and repurposed hidden system commands, defeating the memory-randomisation defences that are supposed to make such attacks unreliable. It took complete control of the device and survived a reboot without crashing the system.
Nine days, and Apple's answer
Adoption was immediate. Forbes reported 1.4 million iPhone owners running the jailbreak within nine days of the July 2011 launch, and more than 600,000 subsequently.
Apple patched the vulnerability in nine days and blocked JailbreakMe.com from the WiFi networks in its own stores. Both responses are telling. A nine-day turnaround on a fix is fast for a mobile operating system, and blocking a website in retail locations is an admission that customers were using the demonstration units to jailbreak their own phones.
What security researchers said about it
The technical community's judgement was not that the tool was clever for a teenager. It was that the tool was exceptional by any standard. The security researcher Dino Dai Zovi compared its sophistication to Stuxnet, the state-built worm used against Iranian centrifuges, and told Forbes that Allegra was “probably five years ahead of” the advanced-persistent-threat hackers working for governments.
The comparison is about engineering rather than intent. Stuxnet was assembled by well-funded teams over years. JailbreakMe 3 was written by one person who had to make it reliable enough to run on millions of different handsets without leaving them unusable, since an exploit that bricks phones destroys its own distribution.
How he learned it
Allegra taught himself Visual Basic at nine, using web forums. By high school he had covered the fundamentals of computer science, and he practised on the Nintendo Wii, picking apart its files to understand an obscure operating system from the outside.
That is the standard apprenticeship for this kind of work, and it is entirely self-directed: reverse engineering is learned by taking apart systems nobody documented. His own account of the motive was flat. “It’s just about the challenge, more than anything else,” he told Forbes, describing himself as an Apple fanboy rather than an opponent of the company.
Where Nicholas Allegra is now
At the time of the Forbes article he was on leave from Brown University, living at home and looking for an internship. The sources used for this page do not record what he did next, where he worked or whether he returned to Brown.
The wider point outlasts the individual record. JailbreakMe 3 demonstrated that a single self-taught teenager could find and weaponise a flaw in the most scrutinised consumer operating system in the world, and could do it well enough for a million people to trust it with their phones inside a week. Companies now pay large bounties for exactly the work Allegra published for free.
| 人物 | 国家 | 里程碑 | 年龄 / 数据 |
|---|---|---|---|
| Nicholas Allegra | 美国 | JailbreakMe 3，发布于2011年7月 | 9岁 |
| Sawsan Ahmed | 美国 | 布劳沃德学院最年轻的毕业生，12岁，2021年12月 | 12岁 |
| Arvind Mahankali | 美国 | 2013年斯克里普斯全国拼字比赛冠军，13岁 | 13岁 |
| Kerry Close | 美国 | 2006年斯克里普斯全国拼字比赛冠军，13岁 | 13岁 |
| Shania Muhammad | 美国 | 兰斯顿大学最年轻的毕业生，15岁 | 15岁 |
What is documented — and what is not
✓ Documented
- Released JailbreakMe 3 in July 2011, exploiting a PDF font-handling flaw in iOS (Forbes)
- 1.4 million users within nine days, plus more than 600,000 afterwards; Apple patched in nine days (Forbes)
- Taught himself Visual Basic at nine; on leave from Brown University and living in Chappaqua, New York, in 2011 (Forbes)
? Unverified, disputed or wrong
- No date of birth published
- No reporting used here on his work, employment or studies after August 2011
- The article records no statement from him about future plans
Questions people ask about Nicholas Allegra
Who is comex?
The handle used by Nicholas Allegra, the American developer who released the JailbreakMe tools. Forbes identified him at 19 in August 2011.
How old is Nicholas Allegra?
Forbes described him as 19 in August 2011, placing his birth around 1992. No date of birth is published in that source.
What did JailbreakMe 3 do?
It jailbroke an iPhone from a web page, using a vulnerability in how iOS handled fonts inside PDF files to take full control of the device.
How many people used it?
Forbes reported 1.4 million users within nine days of the July 2011 release, with more than 600,000 afterwards.
How did Apple respond?
It patched the vulnerability in nine days and blocked JailbreakMe.com from the WiFi networks in its retail stores.
Was jailbreaking illegal?
The source used here does not address the legal position. It reports the tool, its adoption and Apple's technical response.
Where is Nicholas Allegra now?
At the time of the Forbes profile he was on leave from Brown University and seeking an internship. The sources used here record nothing after that.
Is Nicholas Allegra on Wikipedia?
No Wikipedia article was identified in the research behind this page, though his handle appears throughout coverage of iOS jailbreaking.
Quick quiz: how well do you know Nicholas’s story?
What flaw did JailbreakMe 3 exploit?
How many people used it in the first nine days?
Which researcher compared its sophistication to Stuxnet?
Sources
- Meet Comex, The 19-Year-Old iPhone Uber-Hacker Who Keeps Outsmarting Apple — Forbes, 2011-08-01
Checked by the Geniuses.club editorial team. Ages are given as of September 2026.
.jpg)
