There is a big exploit in iOS 4 firmware which jailbreak me uses for jailbreak. If you are on iOS 4 you have it.All it installed are PdaNet & My3G on my iPhone 4. Did not install any SSH apps. Am I open to the public just by using JailbreakMe.com?
Generally the time out occurs because your phone goes to sleep. You have to keep the screen awake and alive long enough to change your passwd.I tried doing this the other day.
Mobile Terminal crashes upon opening.
And when i try to SSH on my computer, and run the passwd command, it times out?
or open cydia and add http://cydia.xsellize.com as a source, then search for mobileterminal ios4. I used that to change my passwdHere is what I did to make sure the SSH password is locked down:
1: Download and install the Mobile Terminal 426 Debian package.
2: Install sudo via Cydia, and add
ALL = (ALL) NOPASSWD: ALL
via the visudo command. This will you to bypass entering the root password by using sudo -i.
3: Change both the mobile user and the root user's passwords. I'd say minimum, 20 characters, realistically 32-48 characters. Just make sure you have both copied down somewhere to be safe.
4: Set /etc/sshd/sshd_config to disallow ssh in as root, disallow ssh in with any password (public key authentication only), and disable it in SBSettings when I can. This should keep almost anyone out, unless there is a zero-day hole in ssh. Maybe changing the port would help, but a decent blackhat likely has run nmap on the box and found where it likely moved to, so I didn't bother.
With these steps, the sshd is still usable for sftp and other items, but using RSA keys, so an attacker is unable to do a brute force attack on the passwords.
simples!!Here is a super easy way to change your ssh password. Install rock from Cydia and it will detect your default alpine password and tell you if you want to change your password when you open rock. Just change it from there and then unistall it. The password will still be changed when you uninstall it.