📅 October 30, 2013

New Vulnerability Lets Attackers Hijack iOS Apps’ Web Requests Over WiFi [video]

Be careful which WiFi hotspots you use — Skycure has just revealed a web-based exploit that lets attackers hijack an iOS device on the same network through its mobile apps.

iphone-wifi-vulnerability-FSMdotCOM

Be careful which WiFi hotspots you use — Skycure has just revealed a web-based exploit that lets attackers hijack an iOS device on the same network through its mobile apps. The technique intercepts some apps’ attempts to cache a web status message, redirecting the request to a hostile server; after that, an intruder can stealthily inject malware from any location.

Continue reading “New Vulnerability Lets Attackers Hijack iOS Apps’ Web Requests Over WiFi “

📅 February 10, 2011

Fraunhofer SIT Researchers Steal iPhone Passwords In Six Minutes [video]

Losing your smarpthone is bad enough. But if you lose your iPhone and don’t issue a remote wipe command (available for free with the Find My iPhone app) then you could find yourself in a world of hurt. Researchers at the Fraunhofer Institute Secure Information Technology (Fraunhofer SIT) can jailbreak and decrypt passwords from the iPhone’s keychain — for say, your Gmail account, corporate VPN, home WiFi, and MS Exchange — in about six minutes using existing, known exploits. Sorry kids, your flimsy lockscreen passcode won’t help.

Video proof, after the jump…

Continue reading “Fraunhofer SIT Researchers Steal iPhone Passwords In Six Minutes “

📅 October 16, 2009

DevTeam: iPhone 3Gs With New iBoot NOT Jailbreak-Proof

Eric McDonald, a member of the DevTeam, said in a telephone interview with wired.com that there is nothing to fear about, because even on the “new iPhone 3Gs” we will be able to run the Jailbreak.

As you might know, Apple introduced a new version of iBoot to fix a security vulnerability that prevents the 24kpwn exploit .Eric McDonald, a member of the DevTeam, said in a telephone interview with wired.com that there is nothing to fear about,  because even on the “new iPhone 3Gs” we will be able to run the Jailbreak.

It’s not going to be impossible to jailbreak even if the exploit we used is gone

Continue reading “DevTeam: iPhone 3Gs With New iBoot NOT Jailbreak-Proof”

📅 June 29, 2009

DevTeam Explains Why They Wont Release iPhone 3Gs Jailbreak Yet…

DevTeam Explains Why They Wont Release iPhone 3Gs Jailbreak Yet… the reason is pretty much self explanatory but Spock said it best: “The needs of the many outweigh the needs of the few…”

You all know that GeoHotz finally jailbreaked iPhone 3Gs, but the dev team is delaying the official release until the new FW is released by Apple. The reasons are obvious but, as promised this morning, the DevTeam has written a new article on the official blog, which explains some important details about the iPhone 3Gs Jailbreak.

Pretty much the iPhone 3Gs Jailbreak is ready , and they can release the tools anytime, but by doing that, they will allow Apple to check out the tools, and implement protection in the new iPhone OS update 3.0.1. And if they do that, all the work needs to be redone ( more or less , but still…. ).

  • If you are already holders of an iPhone 3GS and have saved the certificate on your ECID, you are safe and Jailbreak there will always be possible. IF you didnt save the certificate on your ECID, DO IT NOW!!!
  • If you dont have a 3Gs , but your thinking on upgrading, step it up, and do it. Once you did it, save the certificate on your ECID.

The 3Gs hardware allows Apple to block the installation of  .ipsw files without digital signature and it is precisely for this reason that saving the certificate through the ECID is a must.

Continue reading “DevTeam Explains Why They Wont Release iPhone 3Gs Jailbreak Yet…”