Security-Protocols

Wouldnt it be nice if you could have your iPhone’s filesystem on your desktop? Well, you actually can when using SSHFS. SSHFS which is a MacFUSE extension can use SSH to mount your iPhone over wireless to your Mac. Once your iPhone is mounted, the entire filesystem is available just like any other hard drive on your system. Below is how you can do it:

To do this, you will need to have SSH already installed on your iPhone. You can install OpenSSH from Installer.app on your iPhone. Then you will need to make sure that logging in via Terminal works before using MacFUSE. If you are unable to login via Terminal, then you will need to remove the “known_hosts” file from your /mahuser/.ssh directory.

The How to:

- Get the latest version of MacFUSE, as well as SSHFS.

- Install MacFUSE and reboot your system.

- Move sshfs.app to the Applications folder.

- Now, launch sshfs.app and put it your iPhone’s IP address as root with the remote directory set to / . Then you will need to enter the iPhone’s password. The default for versions 1.0.2 and earlier is dottie, and the default password for version 1.1.1 its alpine.

Boom!, your done.

So he finally gave into the fact that third party apps are good, and that an SDK will help Apple sell more iPhones.. sighh..

Let me just say it: We want native third party applications on the iPhone, and we plan to have an SDK in developers’ hands in February. We are excited about creating a vibrant third party developer community around the iPhone and enabling hundreds of new applications for our users. With our revolutionary multi-touch interface, powerful hardware and advanced software architecture, we believe we have created the best mobile platform ever for developers.

You can read the rest of Steve’s message at the link below:

Third Party Applications on the iPhone

So ive been fuzzing Safari on the iPhone a bit lately and have found some interesting flaws. Anyway, below is a link to a text file of the proof-of-concept which will trigger the crash.

http://www.security-protocols.com/poc/iphun.txt

If you have an iPhone and or iPod touch with v1.1.1, click here:

http://www.security-protocols.com/poc/iphun.html

This will only reproduce the issue causing Safari to crash. For some reason, this crash does not create a crashreporter log on the iPhone.

Niacin over at the Toc2rta blog has released a .TIFF exploit which allows you to get full read/write access on your iPhone and or iPod touch with v1.1.1. So, the fight continues for Steve to try and keep people from unlocking their iPhones. I can only imagine how many more image parsing flaws exist on the iPhone. Guess I should start fuzzing it to find out.

iPhone/iPod touch Firmware v1.1.1 TIFF Exploit
http://jailbreak.toc2rta.com