iPhone Hacks · Hacks, Cracks, Mods, Homebrew, Utilities

GreenMyMac discovered and published a security vulnerability for iPhone 2.0.x at MacRumours last night. The security flaw affects iPhone users who use the password protect feature when locking their keypad, but using this very simple trick gives anyone full access to your cell phone’s private information in Mail, SMS, Contacts, and even Safari.

To recreate this exploit yourself, password protect your phone and lock it. Next slide to unlock and do the following:

1. Tap emergency call.
2. Double tap the home button.

You should now be in your favorites. Seems like a convenient feature feature at first, but the security problem here is scary. Anyone who picks up your iPhone can make a call to anyone in your favorites and can access their address and for some service providers this will let a stranger access your voice mail.

Let’s go a little further down the rabbit hole now:

• If you click in a mail address, it will give you full access to the Mail application. All your mail will be exposed.
• If there’s a URL in your contact (or in a mail message) you can click on it and have full access to Safari.
• If you click on send text message in a contact, it will give you full access to all your SMS.

Until Apple addresses this security threat, there is an easy work around to secure your personal information.

1. In ‘Settings’, select ‘General’.
2. Select ‘Home Button’.
3. Select either ‘Home’ or ‘iPod’

QuickPwn RC3 & PwnageTool 2.0.3.1 followed swiftly after the initial releases yesterday of PwnageTool 2.0.3 & QuickPwn GUI 150. Many people complained of experiencing bugs while attempting to jailbreak and unlock iPhone 2.0.2. Patche fixes were quickly released to help solve any issues the iPhone, iPod touch users are still being warned to wait for the next release to solve some of their bugs.

QuickPwn RC3 Notes:

FEATURES
* Support for FW v2.0.0, v2.0.1, v2.0.2
* Jailbreaking and Pwning iPhone 2G, iPhone 3G and iPod Touch
* Adding Cydia and Installer
* Replacing boot logos
* Unlocking iPhone 2G

WARNING
* Functionality under virtualized environments is not guaranteed.
* iTunes must be installed prior to use.

CHANGES FROM 1.5.0
* Fixes for Windows XP, Vista x64

PwnageTool 2.0.3.1 Notes:

We’ve had some issues with iPod touch devices and the latest version of PwnageTool for the Mac, in certain conditions incorrect permissions will be used and the keychain doesn’t save passwords. So hold on and wait for the next release, we’ll push out the updated version via Sparkle as soon as it is tested (it is being tested right now).

Of course we have updated our iPhone Downloads section with the lastest versions:

QuickPwn RC3 Download
PwnageTool 2.0.3.1 Download

Like Alias420 said, It’s update day! The iPhone Dev Team have released PwnageTool 2.0.3 adding support for iPhone and iPod Touch firmware 2.0.2 5C1, it also has an updated Installer.app version (b6), and contains a new .de localization for the folks at Germany.

PwnageTool 2.0.3 is now available as a Sparkle update, or a direct download here. This version provides support for iPhone/iPod firmware 2.0.2 5C1, it has an updated Installer.app beta (b6) and contains a new .de localization for our large amount of German friends.

Download PwnageTool 2.0.3.1 from our iPhone Downloads section

Please note, this is Mac OS X Only.

Digg It!

It’s update day! The iPhone Dev Team has released it’s latest version of QuickPwn for Windows coupled with poorlad’s improved QuickPwn GUI. This update is labeled ‘150′. Mac user’s you haven’t been forgotten the dev team plans to release an update to PwnageTool today as well. We will make sure to bring that to as soon as it is released.

QuickPwn Windows doesn’t work well with virtualization as there are some problems with the way USB resets are handled, so we wouldn’t advise trying it, we have had reports of some success with VMWare Fusion 2.0 Beta 2, but this shouldn’t be relied on, use PwnageTool instead, or wait for QuickPwn Mac.

QuickPwn for Mac is being tested right now by a group of testers and we’ll release this when it is ready for public beta (this won’t be within the next 24 hours, but should be within the next week).

There are no significant updates with regard to the 3G baseband unlock, most of us have been busy with real life, when we get any further we’ll let you know.

Download QuickPwn RC3 from our iPhone Downloads Section.

Saurik the creator of Cydia which appears to be the new defacto standard for installing 3rd party homebrew apps on your jailbroken iPhone, has released ‘Cycorder’ a free iPhone video recorder App, opting to use on-screen text ads rather than charging users. It’s a great alternative to the buggy ‘iPhone Video Recorder’ App which requires you pay after you’ve recorded 30 videos limited to 30 seconds each. The previously reviewed Qik will capture audio & video for free but requires you to be connected to a WiFi connection to steam the video to their service.

Cycorder can be installed via Cydia in the ‘Multimedia’ section.

Cycorder offers 6 - 15 frames per second depending on lighting and movement using MJPEG compression at 384×288 (4×3) screen resolution. This gives Cycorder an edge when it comes to video quality by sacrificing the small file size offered by the competition. You can watch videos on the iPhone itself or to really see the quality of the video you can download them to your computer. MOV extension video files can be found in the ‘/private/var/mobile/Media/Videos/’ folder on your iPhone. Unfortunately audio is still in the works and is expected in a future release.

Click the ‘more…’ link to see an example video, the latest in the Alias420’s boring apartment video series.

(more…)

Rip Dev has released beta 6 of the iPhone Installer 4.0 app. You will find this latest version available under the ‘Updates’ category from within which ever version of the beta you are currently using. If you don’t have it installed you can use the latest versions of PwnageTool for Mac or WinPwn for Windows. Either of these tools should install both Cydia and Installer by default.

What’s New in Installer 4.0 Beta 6:

• Search. It searches among packages from the repositories you have added, and, if you let it sit for 5 seconds, will query our server and return packages that are available from repositories you don’t have added (that we know about) with an option to automatically add and install. Repository owners, upgrade to the latest version of the repo code (below) to have your repository added to the search engine.
• Uninstall now works correctly.
• Fixed a lot of locking issues especially with custom HTML info pages.
• Updated the Categories and Tasks icons so they are less ugly.
• Fixed a bug with multiple copies of Installer appearing in Installed Packages under some circumstances.
• Installer will now correctly check and prompt for an update of itself.

Recently the power button on my iPhone failed, luckily I was able to use the iReboot app to turn off the unit or lock the keypad (reboot springboard). But this made doing things like DFU or Restore mode a real pain in the ass. Noticing a company advertising in our Google AdSense ads with the link ‘Toronto iPhone Repair’ I clicked through to investigate (who knew those ads could actually be useful?). The link landed me at TechKnowSpace.com. To my great fortune they are located about 2 blocks from my home and could replace the power button within an hour for $89CAD.

I took the long 5 minute walk over to Front st & Spadina st right in the downtown core of Toronto and dropped my phone off. 1 hour later I returned and they had my newly functional iPhone ready to go. I was impressed they were fast, friendly and most importantly got my beloved iPhone back to it’s original splendor.

If you live in or around the Greater Toronto Area and need to have your iPhone repaired I would recommend them. I inquired whether they serve people online wishing to get their iPhones repaired. Unfotunately they aren’t setup to process orders via their web page but you can feel free to make arrangements by phone and send your iPhone in via courier or snail mail.

BTW: I have received nothing for endorsing these guys.

Qik isn’t the newest news but I just tried out for the first time today. I must say I was impressed. Qik is a homebrew 3rd party native App that can be install via Cydia under the ‘Multimedia’ category. It ties in with their free video web service that you need to register for. The registration was pretty quick and painless but did involve sending a SMS message to my iPhone. There was an option to not have to do this but I didn’t bother following that route opting for quickly clicking on the link in the SMS message to tie my iPhone to my Qik account.

Once all this is done the fun begins, all you do is open Qik press record and it will start streaming live audio and video from your iPhone to your Qik account where it can be viewed from anywhere in the world. You can obviously select whether a video is publicly viewable or not.

From my iPhone:

If you’re someone that cares about bandwidth costs, maybe because you live in Canada (F@#! YOU ROGERS!) Then you might want to make sure you’re using WiFi or 3G and not EDGE. This could result in a hefty bill at the end of the month. Quite the price to pay for trying to stream live footage of your cat on to the net.

While Mac users are still waiting for their version of the easy to use QuickPwn, Windows users will be enjoying two iterations of QuickPwn. Currently there is poorlad’s QuickPwn GUI which was created at brake neck speed (5 hours after release of QuickPwn command line). Now WinPwn has announced that we will see WinPwn 2.5 released by the end of this week and it will be using the latest QuickPwn behind the scenes.

Features:

• QuickPwn support (2.0/2.0.1/2.0.2)
• DFU helper
• Automatic updater (yay no more downloading new installers)
• Plus much more….

Update:

Sorry about the delay. I have been trying to fix a quickpwn 2.0.2 bug.
If it doesn’t get solved in the next day you will see a release with just quickpwn 2.0.1 support.
I will keep you updated! Thanks again for the support.

To wet our appetites all new screen shots have been released, click ‘More…’ to see them all.

(more…)

The iPhone Dev Team have released an updated version of QuickPwn for Windows. It contains the Dev Team’s new bundles for 2.0.2 and have added support for devices running version 2.0 which means the device can be running 2.0, 2.0.1 or 2.0.2.

Here is the updated QuickPwn for Windows, wrapped by Poorlad’s GUI. It contains our new bundles for 2.0.2 and we’ve added support for version 2.0 devices which means the device can be running 2.0, 2.0.1 or 2.0.2. Remember this is still beta software, so usual rules apply, no complaints if anything goes wrong and use the tool at at your own risk!

In addition, the Mac GUI guys on the team are working on a GUI version of Quickpwn for Mac OS X.

The Mac GUI whizzes in the team are working on a graphical Mac OS X version of QuickPwn and also some nice little tweaks to the next release of PwnageTool. As soon as these are finished and tested, we’ll let you know, but don’t hold your breath and refresh for these, the release is not imminent

Please remember that QuickPwn is still in beta so use it at your own risk!

We have it in our iPhone Downloads section in ‘Utitlities’::’Windows’ or follow this direct link Download QuickPwn GUI 1.2.0

(more…)