Filed under: Security, iPhone, Jailbreak/pwnage
For the last few days, some jailbroken iPhone users have found their home screen background a little different than they remembered. A hacker, going by the name “ikee,” created a worm that changes the home screen background on jailbroken iPhones whose owners failed to change the default password after installing SSH. Simply jailbreaking your iPhone will not make you vulnerable to this sort of hack. The iPhone OS, in general, is also immune to this hack. Still confused? Let’s back up a bit.
On jailbroken iPhones, SSH is installable with a package from Cydia that allows you to connect to your phone and make changes to the filesystem. It does this by logging into the root user with the password “alpine.” After installing SSH, it is always recommended that you change “alpine” to the password of your choosing. This hack can only affect people who chose not to change that password — no one else.
This hack originated in Australia, the home country of ikee, and has possibly spread to other iPhones in other countries, but we’ve been unable to verify that. A gentleman by the name of JD held an interview with the hacker over IRC and posted it to his blog. In ikee’s own words, here’s how the worm has spread:
…The code itself is set to firstly scan the 3G IP range the phone is on, then Optus/Vodafone/Telstra’s IP Ranges (I think the reason Optus got hit so hard is because the other 2 are NAT’d) then a random 20 IP ranges. I’m guessing a few phones hit a range that another vulnerable phone was on.
Basically, once your phone is infected, the worm starts looking for other iPhones on the cellular network that use the root:alpine combination. Once it finds another vulnerable iPhone, it installs itself and begins the process again… and again… and again.
Luckily for the jailbreakers in the audience who may have been affected, there’s really no harm done — at least not with this version of the worm. According to the hacker, this was more of an experiment than anything else. The worm changes your background and then disables inbound SSH, which is a good thing. If SSH was left turned on, a similar worm could follow along but conceivably do much more damage. For instructions on how to delete this worm, read JD’s interview with ikee. I would recommend reading the interview just for the information it presents; I found it pretty interesting. If you’ve got a jailbroken iPhone or iPod touch and you’ve never changed the default device password, now’s the time. Here’s how, if you are using terminal:
Type: ssh root@(iPhone IP address)
When prompted for the password type: alpine
Now you’re connected the phone…
type: passwd
It should then prompt your for a new password — type one that you’ll remember. There’s no easy way to reset it if you forget it.
That’s it. Please remember to be responsibly secure with your devices. Hackers like ikee are troublesome, but this could have been much worse. While I don’t personally condone his actions, he’s prevented a lot of people from being vulnerable to more malicious attacks later down the road.
Thanks, James!
TUAWWorm rickrolls unsecured jailbroken iPhones via SSH originally appeared on The Unofficial Apple Weblog (TUAW) on Sat, 07 Nov 2009 22:45:00 EST. Please see our terms for use of feeds.
Read | Permalink | Email this | Comments
Apple in a rare weekend update released Apple TV 3.0.1. The firmware upgrade, accompanied by a support document, mends a flaw which made music, video and other content from “disappearing” until the Apple TV next syncs with its host iTunes computer. The company urges customers to apply the update “immediately” and suggests rebooting the Apple TV followed by checking for an update in the Settings menu….
Venturing into Sonos’ world has historically been expensive and partly redundant: listeners have usually needed at least two pieces of equipment, and it isn’t at all uncommon to see setups that cost over $1,000. The ZonePlayer S5 aims to fix this with a single-piece $399 speaker and receiver that relies on what you already have — such as a computer or an iPod touch — to provide its multi-room audio. Our full S5 review will let you know whether the drop in cost is a better bargain….
Several readers have urged me to try the 
id Software co-founder John Carmack has described working with Apple as a “rollercoaster ride” in a new interview, arguing that Apple executives are not happy with the increasing popularity of the iPhone and iPod touch as a gaming platform. Carmack — responsible for Doom, Quake and other titles — has spent several years working with Apple in order to get games such as Doom Classic onto the App Store….
In spite of the relative newness of the Magic Mouse, some complaints have begun emerging on Apple’s support forums. Anticipated drag and swipe functions are sometimes said to be failing, leaving only regular click commands available. When the special wireless mouse software is applied, a Mac may still fail to detect a Magic Mouse….
