Jailbreakers that don't change their default passwords get hacked

Mon, 11/02/2009 - 7:24pm — Seth Weintraub

Here's the short version: You jailbreak your iPhone and SSH access is opened on it. If you don't change your default root password, a hacker can log into your iPhone (or iPod touch) and gain full control very easily. A Dutch hacker takes this a bit further by throwing up an SMS popup after breaking into unsecured iPhones and asking €5 for instructions on how to secure the iPhone. We'll save you €5 -- do a restore.

The long version is at Ars.

If you want to stay clear of this kind of nonsense, change your password after jailbreaking, or obviously, don't jailbreak.

( Filed Under:

iPhone - iPod

)

Comments

Hacker

Mon, 11/02/2009 - 8:17pm — Zedd (not verified)

The even more simple solution: Turn off SSH when you're not using it. SBSettings for 3.0 or OpenSSH for 2.x will do the job for free.

also don't connect to wifi

Mon, 11/02/2009 - 8:47pm — 9to5Mac Admin (not verified)

also don't connect to wifi networks. i use 3G most of the time, (when i have service of course). if you are at a hotspot, use a laptop.

... you jailbroken ones are a

Mon, 11/02/2009 - 9:34pm — battiato1981 (not verified)

... you jailbroken ones are a rather silly lot.

'... if you are at a hot spot, use a laptop ...' . Like I just happen to have one in my OTHER pocket, ... er, I know its in here somewhere ...

Kind of saps a lot of the mobile utility out of the thing.

if your in a hotspot, there

Mon, 11/02/2009 - 10:13pm — 9to5Mac Admin (not verified)

if your in a hotspot, there is most likely a strong enough signal that you won't need wifi. especially because 3g unrestrictor lifts our 3g limits. but like we already stated, there are ways to turn off SSH. the point is, as a cell phone you shouldn't be tied to wifi where you could be vulnerable if you are a complete idiot and know nothing about jailbreaking and the risks

note: you have to install

Mon, 11/02/2009 - 9:16pm — 9to5Mac Admin (not verified)

note: you have to install open SSH in order to SSH into your phone. don't install open SSH, don't worry.

first off u dont need to have

Tue, 11/03/2009 - 2:33am — 9to5Mac Noob (not verified)

first off u dont need to have openssh turned on all the time. ! so dont use it or turn it on. if u need to copy files or transfers use ihone browser or others. That is so dumb so tell people to change their passwords !