JailbreakMe highlights just how vulnerable iOS users are

http://www.extremetech.com/mobile/89210-jailbreakme-highlights-just-how-vulnerable-ios-users-are

by ukdm • 15 years ago

47 17 15 years ago

daemonize• 15 years ago

uhm. this "revelation" was already written about the first time jailbreakme did this, at least a year or two ago... Why is this news?

mrspeaker• 15 years ago

It was proven on the last jailbreak-via-web - it was amazing to see it work the first time and you really understood the severity of a simple bug. I think it's news now for many people (perhaps not a large bunch of HNers) because the first time was "huh - pretty crazy! But I'm sure it won't happen again" and now it's "holy shit, there IS no security!"

msbarnett3• 15 years ago

A working remote code exploit highlights how vulnerable users of the software containing the remote code exploit are?

How...insightful?

code_duck• 15 years ago

iPhones and iPads are perceived by some as invulnerable to viruses or spyware, like a game console. It is important to note that this is not the case.

msbarnett3• 15 years ago

Sure. But to what audience does that need highlighting?

Is extremetech's audience really so unfamiliar with the basics of technology that they needed an article to point out that this remote code exploit demonstrates that users are vulnerable to a remote code exploit?

I get that there is some audience that might need to have it pointed out to them that people walking into your house and taking your stuff illustrates how vulnerable unlocked doors are, but is the audience for that article really hanging out at extremedoorlocks and commenting on Locksmith News?

pixdamix3• 15 years ago

As an android user (I previously owned an iPhone 3G) I don't feel especially safe either.

I'm kind of worried by the current status of mobile securiy. I kind of need to log on my bank account on my phone (That's why I own a 'smart' phone after all). But I really don't feel safe, I try to not install suspicious applications because I'm aware of the various risks but as someone pointed out the other day: "Given a choice between dancing pigs and security, users will pick dancing pigs every time."

Time will tell, maybe we need a Blaster/Stuxnet like event on smartphones in order to realize what's really going on.

Smartphone security feels like the Windows 9x era, let's go on the internet and pray !

[1] http://en.wikipedia.org/wiki/Dancing_pigs

canistr2• 15 years ago

And even with mobile security like Lookout installed, we still can't be sure it completely protects Android devices.

Splines• 15 years ago

Time will tell, maybe we need a Blaster/Stuxnet like event on smartphones in order to realize what's really going on.

I think you're right. Most people who see what JailbreakMe is doing probably don't understand that you're not supposed to do be able to do that.

canistr2• 15 years ago

On one hand, I like to jailbreak my iOS devices to have the extra power and freedom.

But on the other hand, sites like jailbreakme.com really highlight just how terrible Apple's security is. Things like this really shouldn't happen and it would probably be better that jailbreaks didn't exist. With all the different types of transactions and personal information stored on iOS devices, it's really unsettling to think that a simple website could remotely exploit a security flaw and provide complete access to my iOS device.

albedoa• 15 years ago

> it's really unsettling to think that a simple website could remotely exploit a security flaw and provide complete access to my iOS device.

The thing is, these exploits exist before the jailbreaks themselves. If jailbreaks were no longer released publicly, the exploits would still be there. Who knows what would have happened if they were discovered by someone else (and who knows that they actually weren't)?

When the PDF exploit was found for the last jailbreakme exploit, the first iOS users to have a patch available to them were those who jailbroke their devices. Apple followed shortly thereafter.

saurik• 15 years ago

...and users with an iPhone 2G were never given official patches from Apple, and are still vulnerable unless jailbroken. :(

r00fus• 15 years ago

I know Apple doesn't publicly like the jailbreak community, but I can't seem to think they don't really mind it (well other than the security egg-on-face).

From a product standpoint, apps are features/content (specifically, multiple thousands of little features) for Apple's devices.

The App Store is the default, curated way to get apps for iOS. However, having Cydia around hardly devalues the App Store or it's apps.

Kind of like Microsoft's (and Adobe's) views on piracy for the expansion and domination of Windows (and Photoshop/CS)...

pixdamix3• 15 years ago

You forgot, Appulous, Crackulous etc... I think that's their problems, not the apps you found on cydia (Except maybe some things like, 3G unrestrictor and things like that)

ZipCordManiac• 15 years ago

If I run this on my phone that is loaded up with apps and music, will it damage anything ? I've always wanted to jailbreak but didn't want to risk messing up my phone. I also heard jail breaking it causes your phone to become unstable and crash. Any truth ?

JailbreakMe highlights just how vulnerable iOS users are

Related Stories