Cydia Stories June 23, 2014

Pangu is a new untethered jailbreak tool for iOS 7.1 and 7.1.1 that was recently released for Windows. There’s no current ETA on an OS X version (OS X is now version available), but after some initial testing, we’ve determined this to be a legitimate tool for jailbreaking iOS 7.1 and up. The process does seem a bit shady, but we have yet to experience any issues with it. Pangu iOS 7.1-7.1.X jailbreak is compatible with all iOS 7 devices.

Keep in mind, this tool is from an unknown team and we’re unsure of the long-term reliability of the jailbreak and exploits used. Proceed at your own risk, but like I mentioned above, everything seems to be working as advertised…

expand full story

Cydia Stories June 12, 2014

The well-known jailbreak application Cydia has received a fairly notable update today, bringing the utility to version 1.1.10. The new version of the app makes it much easier to manage sources and packages, and brings a refreshed iOS 7-style icon as well as other fixes.  expand full story

Cydia Stories May 23, 2014

ActiveBoard is a new tweak for iOS 7 that adds a couple of useful features to the home screen. Using a pulsating glow behind app icons, ActiveBoard will let you know if an app has a notification or is running in the background. A red glow and bouncing animation will indicate a missed or unread notification, while a white glow informs you of the app’s background status.

expand full story

Cydia Stories April 28, 2014

Review: Stride 2 jailbreak tweak brings a customizable gesture-based passcode to iOS 7 devices

If you’ve been around the jailbreak community for a while, it’s possible that you’re familiar with the popular iOS 5/6 gesture-based lock screen tweak Stride. This tweak worked as a lock screen passcode alternative and allowed users to set a custom gesture to unlock an iOS device.

Created by the popular tweak developer Adam Bell, Stride is making a comeback and is fully compatible with iOS 7 devices. This exciting release provides a very similar experience, but has been given a very clean makeover. This results in a beautiful native-like iOS 7 gesture-based lock screen and I just can’t get enough of it.

Cydia Stories April 22, 2014

Chinese iOS malware stealing Apple IDs and passwords from jailbroken devices

Security researcher Stefan Esser (via ArsTechnica) has discovered that an issue reported on Reddit as causing crashes on jailbroken iPhones and iPads is actually a piece of malware designed to capture Apple IDs and passwords from infected devices.

This malware appears to have Chinese origin and comes as a library called Unflod.dylib that hooks into all running processes of jailbroken iDevices and listens to outgoing SSL connections. From these connections it tries to steal the device’s Apple-ID and corresponding password and sends them in plaintext to servers with IP addresses in control of US hosting companies for apparently Chinese customers.

Early indications are that the source of the malware is likely to have been from a tweak downloaded from somewhere outside of Cydia. Esser has identified that the code only runs on 32-bit devices, meaning that the iPhone 5s, iPad Air and iPad mini with Retina display are safe, while other devices are vulnerable.

The blog post says that the malware is easy to check for, but may not be easy to remove. Using SSH/Terminal, check the path /Library/MobileSubstrate/DynamicLibraries/ for the presence of either Unflod.dylib or framework.dylib.

Currently the jailbreak community believes that deleting the Unflod.dylib/framework.dylib binary and changing the apple-id’s password afterwards is enough to recover from this attack. However it is still unknown how the dynamic library ends up on the device in the first place and therefore it is also unknown if it comes with additional malware gifts.

We therefore believe that the only safe way of removal is a full restore, which means the removal and loss of the jailbreak.

Cydia developer Jay Freeman, aka Saurik, pointed out on Reddit that adding random download URLs to Cydia is as risky as opening attachments received in spam emails.

Cydia Stories April 14, 2014

nds4ios has released a special version of the app that runs on non-jailbroken devices using a sneaky workaround. As the app is not available in the App Store, previously the app could only be installed on jailbroken devices, such as through the Cydia jailbreak app store. The app gets around Apple’s restrictions by using an enterprise provisioning profile reports TourchArcade. This is normally meant for businesses to distribute apps to company employees, but nds4ios is exploiting it as a way to enable widespread app distribution. Find install instructions after the break.

expand full story

Powered by WordPress.com VIP