iPhone Compromise Security by Jailbreaking

Discussion in 'Jailbreaks and iOS Hacks' started by klamse25, Jun 27, 2014.

  1. klamse25 macrumors 6502a

    klamse25

    Joined:
    Oct 25, 2009
    #1
    Does simply jailbreaking and having nothing but Cydia compromise the security of my device?

    Say my phone is passcode locked and find my iPhone is enabled.
    Could anyone gain root access to my phone and get data stored on it?
     
  2. Syndicate0017 macrumors 6502

    Joined:
    May 3, 2013
    #2
    No...but why would you jailbreak and have nothing but cydia? The only way you really jeopardize yourself is using insecure protocols like afc2add, using openssh with the default root password, or downloading from sketchy repos.
     
  3. HenryLong macrumors 6502

    HenryLong

    Joined:
    Apr 11, 2013
    Location:
    Germany
    #3
    As long as you don't grant unprotected root access the vulnerability is not higher than being on stock iOS. Best way to enable secure root access is using OpenSSH with individual password.
    Using afc2 (Apple File Conduit 2) to gain root access will leave your device unprotected.
     
  4. klamse25 thread starter macrumors 6502a

    klamse25

    Joined:
    Oct 25, 2009
    #4
    Well considering I have super important data on my iPhone, I need to make 100% sure this info won't be compromised. I want to only have Cydia until all of my tweaks are properly updated.
     
  5. Dreamliner330 macrumors 6502a

    Joined:
    Sep 1, 2011
    #5
    Some were saying Pangu may compromise security, by adding malware.... I don't know though.
     
  6. dhlizard macrumors G4

    dhlizard

    Joined:
    Mar 16, 2009
    Location:
    The Jailbreak Community
    #6
    If you have anything of such genuine critical nature, perhaps it shouldn't be on your phone.
     
  7. klamse25 thread starter macrumors 6502a

    klamse25

    Joined:
    Oct 25, 2009
    #7
    1password maybe? Don't need to get snarky. You are the kind of toxic people that destroy this community.
     
  8. Carlanga macrumors 604

    Carlanga

    Joined:
    Nov 5, 2009
    #8
    lmk when 1password protects "super important data" stored on an iPhone…

    Also, if you don't know DHL, then you are pretty new to the overall jb community… He has helped many and is def not toxic to the community, you in the other hand...
     
  9. dhlizard macrumors G4

    dhlizard

    Joined:
    Mar 16, 2009
    Location:
    The Jailbreak Community
    #9
    Kudos
     
  10. aPple nErd macrumors 68030

    aPple nErd

    Joined:
    Feb 12, 2012
    Location:
    Jailbreaks/IOS Hacks
    #10
    Lol dhlizard being "toxic to the comunity"? Wtf?
     
  11. HankHowdy macrumors 68040

    HankHowdy

    Joined:
    Dec 2, 2012
    Location:
    Victorville CA
  12. alkalifly macrumors regular

    alkalifly

    Joined:
    Apr 13, 2004
    #12
    Are you saying that 1password does not do a good job protecting data on an iPhone? I have been using it for a while now, and always figured it was pretty secure, but am I being naive to think so?
     
  13. MikeyMike01 macrumors 6502

    Joined:
    Apr 4, 2010
    #13
    12 year olds would be deeply offended to be associated with the OP.
     
  14. Applejuiced macrumors Westmere

    Applejuiced

    Joined:
    Apr 16, 2008
    Location:
    At the iPhone hacks section.
    #14
    The particular poster is well known to post nonsense like this just to get a kick out of people's responses.
    I learned to ignore him and many if his similar threads.

    http://forums.macrumors.com/showthread.php?t=1741484
     
  15. Carlanga macrumors 604

    Carlanga

    Joined:
    Nov 5, 2009
    #15
    Currently 1password only works with websites/web services, not stored data inside your phone unless an app adds support. :cool:
     
  16. alkalifly macrumors regular

    alkalifly

    Joined:
    Apr 13, 2004
    #16
    Ahh, gotcha. I had thought you were saying that 1password wasn't actually protecting its data, but now I understand what you meant. It actually does allow you to store any text as a "secure note" and you can attach any arbitrary file type, which will get encrypted in the 1password data file (so I have, for example, a scanned copy of my passport). That said, I doubt the OP of this thread will be convinced one way or the other
     
  17. that be me macrumors 6502

    Joined:
    Sep 12, 2013
    #17
    Would a program like ifunbox allow for access to photos and videos with the device being locked and no Apple File Conduit installed? Never really thought about the idea of having AFC on my device and someone getting into it through that or similar programs.
     
  18. darricksailo macrumors 601

    darricksailo

    Joined:
    Dec 18, 2012
    #18
    For pictures and videos, you can just access them through the normal file browser (via my computer on windows)
     
  19. HenryLong macrumors 6502

    HenryLong

    Joined:
    Apr 11, 2013
    Location:
    Germany
    #19
    You can access photos and videos through iFunBox even without AFC but it doesn't allow root access.
     
  20. klamse25 thread starter macrumors 6502a

    klamse25

    Joined:
    Oct 25, 2009
    #20
    AFAIK, web storage is optional. I linked it to my service of choice a few hours after my passwords were updated.
     
  21. charlituna macrumors G3

    charlituna

    Joined:
    Jun 11, 2008
    Location:
    Los Angeles, CA
    #21
    If you aren't careful when you jailbreak yes. Things like forgetting to change default passwords for root level for example.

    ----------

    That is true even without jailbreaking.
     
  22. klamse25 thread starter macrumors 6502a

    klamse25

    Joined:
    Oct 25, 2009
    #22
    That's only when you have OpenSSH installed, correct?
     
  23. darricksailo macrumors 601

    darricksailo

    Joined:
    Dec 18, 2012
    #23
    I think that was what dhlizard was trying to say. Jailbroken or not, such critical info shouldn't be on a phone
     
  24. dhlizard macrumors G4

    dhlizard

    Joined:
    Mar 16, 2009
    Location:
    The Jailbreak Community
    #24
    Yep, if I had "super important data" (whatever that translates to), I might not keep it on a mobile device. :eek:
     

Share This Page