Filed under: Security, Apple, iPhone
My iPhone is jailbroken - is it insecure?
There has been a lot of attention given to some recent iPhone hacks that potentially affect users of jailbroken iPhones, especially now that a malicious attack has been discovered. If you've jailbroken your phone, and you are worried about whether you are potentially vulnerable, here's a simple answer:
If you have not installed OpenSSH (or any other SSH package), you are not vulnerable to the current attacks.
To check this, go into the Cydia installer app on your jailbroken iPhone, tap the Manage button, tap the Packages button, and scroll alphabetically through the list of installed packages looking for OpenSSH. If it's not there, you're good, you can relax. If you're using an alternative installer like Rock the steps will be much the same.
If OpenSSH is there, you can follow this guide from our friends over at TUAW to change your iPhone's root and mobile passwords.
I don't know if this is a labor of love or merely the brainchild of four very gifted games designers, but Level Up is a really weird mash-up of gaming elements that you have probably never seen in a Flash game before.
Let's start with the premise itself: Groundhog Day meets Memento. The game experience revolves around 'days': you explore the world and the clock slowly ticks towards the evening. You bounce around picking up gems and talking to the denizens of 'Level Upland'. Eventually you feel tired and head back to ...
Reader Comments (Page 1 of 1)
Evenio said 11:47AM on 11-26-2009
Kudos for posting this bit of anti-FUD goodness!
Reply
blaszta said 2:41PM on 11-26-2009
If you jailbreak your iphone and install SSH, also install SBSettings. It will provide you quick access to disable and enable SSH service/daemon.
Also as best practice, replace the default root password (alpine) using command "passwd" in terminal (if you don't have it, you can also install it from Cydia).
Please keep in mind that if you forgot your new root password, the only way to SSH back to your iPhone is by restoring it using default/custom firmware
Reply