Posted September 14th, 2007 @ 08:36pm by Erik J. Barzeski
I wonder how long it will be until someone's iPhone is hacked and their personal data stolen, say, at a Starbucks or something, because the user didn't change the root password but did install something like SSH.
If you've installed Installer.app and SSH, do yourself a favor: type passwd into an SSH session on your iPhone and change your root password.
This blog contains posts, all written by me, and comments, only some of which were written by me.
About Me
Disclaimer
The Sand Trap
… via Email
firstname@lastname.com
(Think about that one a little.)
… via IM
AIM: iacas
MobileMe: iacas
flickr: iacas
Yahoo: iacas
Twitter: iacas
MSN: iacas@hotmail.com
Xbox Live: erikjb
Google Talk: erikjb@gmail.com
ICQ: 8186546
Don't email me at any of the above IM addresses or I may never see the email. I use these accounts primarily for chat (IM) only.
… on Facebook
http://facebook.com/iacas
Donate Life: Because if you're not using your body parts, someone else can.
Posted 15 Sep 2007 at 1:14am #
Does the root account activated on the iPhone (it is not with Mac OS X client) ?
Posted 15 Sep 2007 at 8:21am #
Or someone releases a rogue application ...
Posted 15 Sep 2007 at 9:30am #
[quote comment="43325"]Does the root account activated on the iPhone (it is not with Mac OS X client) ?[/quote]
The root account, I believe, is the only account on the iPhone. As soon as someone installs an application (FTP, SSH) which allows access it is vulnerable.
Posted 17 Sep 2007 at 9:41am #
Isn't there a "mobile" account as well - I thought I remembered reading that somewhere.