iPhone 3G[s] - Page 99

karbon · 03-11-2009, 11:17

i think it's more that apple charge a massive amount for the handset and neither company can bring it down below that. as i understand o2 had to change the iphone contract a few times to stop themselves losing money on it (hence the no unlimited texts and stuff)

also the charge for tethering is so that they don't lose money on people with a mobile broadband dongle. hence the same pricing for that as tethering.

leowyatt · 03-11-2009, 12:55

Just seen this on digg about a dutch hacker taking control of iPhones. Not sure if it's relevant to any jailbroken phones here but thought I'd let you all know

Burble · 03-11-2009, 13:06

That just goes to show why unnecessary services (SSH as usual) should be disabled when not needed and passwords shouldn't be left as default.

Unfortunately a freshly jailbroken iPhone will be ripe for the picking as they'll have SSH running and a default known password (alpine in this case).

Mark · 03-11-2009, 13:09

Interesting, though the likes of Saurik have been warning about this one for a while. It's an SSH-based exploit. If you use SSH on your iPhone, change the default password. Job done.

Don't think I have SSH on my iPhone. I didn't choose to install it, at any rate.

Burble · 03-11-2009, 13:11

I thought that OpenSSH was installed by default when Cydia went in, but thinking about it I did specifically install it.

Mark · 03-11-2009, 13:21

I think OpenSSL may be installed by default (for HTTPS access presumably). OpenSSH isn't.

I just checked port 22 over wi-fi and it's closed. Interestingly when I tried the same thing over the WAN IP, I got nothing (not even a response to a ping), so maybe this is also network-dependant.

Burble · 03-11-2009, 13:29

Quote:

Originally Posted by Mark

I think OpenSSL may be installed by default (for HTTPS access presumably). OpenSSH isn't.

I just checked port 22 over wi-fi and it's closed. Interestingly when I tried the same thing over the WAN IP, I got nothing (not even a response to a ping), so maybe this is also network-dependant.

Isn't the WAN IP an RFC1918 address? In which case you wouldn't be able to scan unless you initiated the scan from something else in that subnet.

Incidentally the chap has posted removal instructions.

Mark · 03-11-2009, 13:36

True, it is. Didn't spot that one but I should have.

Anyway, if I install OpenSSH (which I doubt I will) I'll be sure to change the password.

Joe 90 · 27-11-2009, 16:18

connected my phone to itunes for the first time in months yesterday after i couldn't get an app straight from my phone - had to use the pc to download it.

anyway, i'm back to that old problem of itunes removing loads of apps and now some of those downloaded wont install 'due to an unknown error'

I can't find the fix that Desmo told me last time but i've got, what i thought was, everything i need installed; Cydia, installous (and rock if that makes a difference)
what am i missing?

Desmo · 27-11-2009, 18:48

AppSync in the Hackulo repo

03-11-2009, 11:17	#981
karbon Long Island Iced Tea Join Date: Sep 2007 Location: Glasvegas Posts: 475	i think it's more that apple charge a massive amount for the handset and neither company can bring it down below that. as i understand o2 had to change the iphone contract a few times to stop themselves losing money on it (hence the no unlimited texts and stuff) also the charge for tethering is so that they don't lose money on people with a mobile broadband dongle. hence the same pricing for that as tethering. __________________

03-11-2009, 12:55	#982
leowyatt Chef extraordinaire Join Date: Jul 2006 Location: Infinite Loop Posts: 11,143	Just seen this on digg about a dutch hacker taking control of iPhones. Not sure if it's relevant to any jailbroken phones here but thought I'd let you all know __________________ "Dr Sheldon Cooper FTW!"

03-11-2009, 13:21	#986
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	I think OpenSSL may be installed by default (for HTTPS access presumably). OpenSSH isn't. I just checked port 22 over wi-fi and it's closed. Interestingly when I tried the same thing over the WAN IP, I got nothing (not even a response to a ping), so maybe this is also network-dependant. Last edited by Mark; 03-11-2009 at 13:23.

27-11-2009, 16:18	#989
Joe 90 Absinthe Join Date: Jan 2007 Location: Chester Posts: 2,345	connected my phone to itunes for the first time in months yesterday after i couldn't get an app straight from my phone - had to use the pc to download it. anyway, i'm back to that old problem of itunes removing loads of apps and now some of those downloaded wont install 'due to an unknown error' I can't find the fix that Desmo told me last time but i've got, what i thought was, everything i need installed; Cydia, installous (and rock if that makes a difference) what am i missing? __________________ 360 Blog \| Join GiffGaff \| Twitter

27-11-2009, 18:48	#990
Desmo The Last Airbender Join Date: Jun 2006 Location: Pigmopad Posts: 11,915	AppSync in the Hackulo repo __________________

03-11-2009, 13:06	#983
Burble Rocket Fuel Join Date: Jul 2006 Posts: 7,826	That just goes to show why unnecessary services (SSH as usual) should be disabled when not needed and passwords shouldn't be left as default. Unfortunately a freshly jailbroken iPhone will be ripe for the picking as they'll have SSH running and a default known password (alpine in this case).

03-11-2009, 13:09	#984
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Interesting, though the likes of Saurik have been warning about this one for a while. It's an SSH-based exploit. If you use SSH on your iPhone, change the default password. Job done. Don't think I have SSH on my iPhone. I didn't choose to install it, at any rate.

03-11-2009, 13:11	#985
Burble Rocket Fuel Join Date: Jul 2006 Posts: 7,826	I thought that OpenSSH was installed by default when Cydia went in, but thinking about it I did specifically install it.

03-11-2009, 13:36	#988
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	True, it is. Didn't spot that one but I should have. Anyway, if I install OpenSSH (which I doubt I will) I'll be sure to change the password.