Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
YOU are the one who sounds like someone who hasn't ever jailbroken an iPhone. By default, SSHing into your iPhone won't work. Jailbreaking and installing the SSH app allows SSH connections to come through, thus you can SSH to the iPhone's IP address and password 'alpine'. So please, do your research beforehand and know what you are talking about.

You clearly didn't read his/her post. Your previous scaremongering post about jailbreaking also leads me to believe you either have a poor understanding of comprehension or you are trolling.
 
...beside is way more fun to JB and play around my JB iPhone than to play with 99% of the over 50,000 games distributed in the App Store.
 
I hate these losers taking credit as if they're hackers or something!!!!

I could have done it if I really wanted to (just I don't like breaking people's iPhones because I'm not a d!ckhead.)

Method...
login: root
password: alpine

most people don't check this. So if you can get them to install your software (thinking it's legit software) then you can do anything... how about just a basic terminal script that says:

rm -r *

It's no secret that if you have somebody's root password then a simple unix command (like the one above) will delete the whole thing.

Damn I shouldn't have said this!!!! The losers who made this "virus" (hardly a dangerous worm or something...) will probably copy my method because they didn't know!!

---

Why is this news? EVERYBODY knew it was possible... but most people aren't interested in breaking people's iPhones.

Most people who jailbreak know a bit more about computers...etc than your average loser, and could probably make apps... FFS not apps... SCRIPTS:

su
alpine
rm -r *

Those 3 lines are enough (I can enter them into your iPhone's terminal if you don't believe me.)

Most jailbroken users are not STUPID enough to download an app called "coolappthatgetsyoulotsofsexandfreebooze" seriously thinking it will give them sex + free booze, only to find out that it really trashes things.

---

This script (I refuse to call it a virus) is already blacklisted on cydia (you need to install a private repo to get it anyway... showing how stupid you'd have to be)... so it's unlikely that any users will be effected because when you try to install it, cydia says "this is malware... are you stupid enough to install it?"

If you say yes then you deserve to have your iPhone's data deleted...
WTF man i read this thread on my l33t h4x3d iPh0n3 and now its bricked, omg!!!11!!eleven! your virus pwn3e|> me :mad:

OK, i need to take my meds now....

Common sense, thank dog its long dead. :rolleyes:
Change all default passwords BEFORE putting the system online
Don't run services/process you don't need
Understand what each service/process is that is running
 
Originally Posted by Gasu E.
Not me. I always change the default password to the name of my dog, Admin.

Hah! :) Me too. Except I don't have a dog. So I leave the password blank..
Me too,
But with all the passwords i have to change on a weekly basis I have started doing the same to my Dog. Now we are both confused.
.
Now he answers to...
Admin, God, TrustNo1, jesus, password, qwerty, ,monkey("My Key" in french), love, 12345678, princess, letmein, master, internet, whatever, starwars, matrix, superman and football.
>;p
 
Jailbreaking sucks. Hasn't Apple given everyone what they want?
HaHaHahahaha I'm still waiting far a MATTE screen order option for an iMac .
I'd write a list but i binned the first one while waiting for MMS on my iPhone.. Oh... and changeable SMS Tones.
 
No offense, but why is the "news" here always a day late?

Anyway, this is kind of common sense people. It's like many software installations that provide a default password; when you install a wireless router in your home, do you keep that default admin password? If you do, I feel for you and for the future of your gene recipients.

While I agree with you, the interesting thing about this exploit to me is that these are devices which are not behind NAT routers or firewalls (unlike many home computers these days), and to which you do not need to be in close physical proximity (like a wireless router).

Plus, these devices have unique hardware (GPS, digital compass) that could be used to invade privacy in a way not possible with most other hardware which is online these days. Imagine a backdoor on your phone that let somebody track every where you go, could even tell what direction you were currently looking in.

And since iPhones are very likely to traverse multiple, physical networks, the "virality" of this worm has a whole new dimension.
 
There is nothing positive about this news at all. Though I am not surprised that the righteous immature fanbois here are voting this as positive, get a life honestly!. How can you consider this to be good? We are talking about peoples personal information being stolen through an exploit.

Also drop the righteous BS about users that have not changed their default password deserve this, the reality is that the average iphone user has no idea what SSH is. I hope you realize that a very large group of these jailbreakers are huge apple fans, and they have jailbroken their phones to unlock them. This is the group of Apple fans who have gone out of their way to get an iphone in countries where Apple has not setup their bloody $$$$ exclusive carriers. Fans that have gone out of thier way to get an iphone and have paid extra for them, early adopters that gave apple free publicity around the world. These same people would have bought their phones unlocked, knowing nothing about the process of jailbreaking, and now might get screwed over.

It was Apples own damn greed that created the unlocking community. If your from the States, well awesome for you, but outside of the states there are alot of diehard Apple fans that went out of their way to get iphones early, they did not deserve this! For the ones with some tech knowledge, they can protect themselves, though alot are going to get screwed.
 
In fairness, while I knew about the default "alpine" password many, many moons ago, and I don't have SSH installed on my iPhone anyway, I've not seen too many people with "free car" signs on their cars, and yet these exploits on the iPhone do actually seem to be attracting targets. So you can conclude that many jailbreak users are idiots. Fine. But the fact remains that there are vulnerable people out there....

aside from the "jailbreakers are idiots" why bother posting the rest?

you buy a closed system, knowing full well it is closed, break it, and then the security is bad? shocking!
 
my ssh access password is still alpine! hack me!

ps i always just disable ssh via sbsettings toggle when i'm not using it anyway :p
 
And it's really Apple, trying to get people to not Jailbreak :p.

If you jail break, either change thebdefault password that the apple techs would use or turn off ssh.

After being with AT&T for almost 10 years, i jail broke my phone last month now I have teethering which I've only used twice just to see how well it worked and it was faster than my wifes moms dsl. But the coolist things are the utlilities kr flash player. Free Tom Tom. Video in non 3gs phones, quick swipe, mem free apps, other gps nav free apps plus hundereds more.

But the best is gv mobile. You add that number to a list and all calls made via that number are free. Also the reason I jail broke it. Plus of course texts of voice mails and controlling any phone to ring when that number is called.

Peace.
 
Wait so let me get this straight Intego...

In order to fall victim to this worm you'd have to do the following:

1. Be so technically savvy as to have the inclination to install OpenSSH to remote access your iPhone from a command line. (A shockingly small minority within a minority of owners)

2. Be somehow that technically savvy yet, at the same time be so technically inept as to forget to set a password.

3. Seek out or stumble into the same LAN as your attacker does right at the time he decides to start looking for iPhones to hack.

4. Somehow indicate to him that you have a jailbroken iphone so he can get out his and scan yours for goodies.

5. Stick around long enough for him to download all your stuff.

By my reading you'd have to be the world's biggest dumb*** to fall for this. More security firm (maybe Apple?) FUD....If you are installing things on your iphone and you dont want to play in Apple's sandbox, know what you are doing. Otherwise, you deserve what you get.

Gah!

/endrant


PS- I read the forums and site a lot but this got me so hacked off I signed up just to reply....
 
It's called the power of google. Those users with the blank stares only care about the SMS tones. So they google it. They'll follow the directions and won't give a second thought to what program they used to get their SMS tones. In the meanwhile, their phone gets infected and they'll have no idea why.

Fair enough, but I still stick to the fact that if you install SSH (or any other app for that matter), it is your responsibility to know what it is, and how to use it.

So simply following directions and installing a software on your phone (just because a guy (usually between the age of 16-18) on YouTube says so) and not giving a second thought to what you have just done, in my eyes, is a disaster waiting to happen ... and should anything go wrong ... I believe it is the sole responsibility of your negligence. (not talking about you :))

:apple: KrayzieKray :apple:
 
In order to fall victim to this worm you'd have to do the following:

1. Be so technically savvy as to have the inclination to install OpenSSH to remote access your iPhone from a command line. (A shockingly small minority within a minority of owners)

2. Be somehow that technically savvy yet, at the same time be so technically inept as to forget to set a password.

3. Seek out or stumble into the same LAN as your attacker does right at the time he decides to start looking for iPhones to hack.

4. Somehow indicate to him that you have a jailbroken iphone so he can get out his and scan yours for goodies.

5. Stick around long enough for him to download all your stuff.

By my reading you'd have to be the world's biggest dumb*** to fall for this. More security firm (maybe Apple?) FUD....If you are installing things on your iphone and you dont want to play in Apple's sandbox, know what you are doing. Otherwise, you deserve what you get.

Gah!

/endrant


PS- I read the forums and site a lot but this got me so hacked off I signed up just to reply....

So true ... so true. My views exactly!

:apple: KrayzieKray :apple:
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.