Security-Protocols

Wouldnt it be nice if you could have your iPhone’s filesystem on your desktop? Well, you actually can when using SSHFS. SSHFS which is a MacFUSE extension can use SSH to mount your iPhone over wireless to your Mac. Once your iPhone is mounted, the entire filesystem is available just like any other hard drive on your system. Below is how you can do it:

To do this, you will need to have SSH already installed on your iPhone. You can install OpenSSH from Installer.app on your iPhone. Then you will need to make sure that logging in via Terminal works before using MacFUSE. If you are unable to login via Terminal, then you will need to remove the “known_hosts” file from your /mahuser/.ssh directory.

The How to:

- Get the latest version of MacFUSE, as well as SSHFS.

- Install MacFUSE and reboot your system.

- Move sshfs.app to the Applications folder.

- Now, launch sshfs.app and put it your iPhone’s IP address as root with the remote directory set to / . Then you will need to enter the iPhone’s password. The default for versions 1.0.2 and earlier is dottie, and the default password for version 1.1.1 its alpine.

Boom!, your done.

So he finally gave into the fact that third party apps are good, and that an SDK will help Apple sell more iPhones.. sighh..

Let me just say it: We want native third party applications on the iPhone, and we plan to have an SDK in developers’ hands in February. We are excited about creating a vibrant third party developer community around the iPhone and enabling hundreds of new applications for our users. With our revolutionary multi-touch interface, powerful hardware and advanced software architecture, we believe we have created the best mobile platform ever for developers.

You can read the rest of Steve’s message at the link below:

Third Party Applications on the iPhone

So ive been fuzzing Safari on the iPhone a bit lately and have found some interesting flaws. Anyway, below is a link to a text file of the proof-of-concept which will trigger the crash.

http://www.security-protocols.com/poc/iphun.txt

If you have an iPhone and or iPod touch with v1.1.1, click here:

http://www.security-protocols.com/poc/iphun.html

This will only reproduce the issue causing Safari to crash. For some reason, this crash does not create a crashreporter log on the iPhone.

Niacin over at the Toc2rta blog has released a .TIFF exploit which allows you to get full read/write access on your iPhone and or iPod touch with v1.1.1. So, the fight continues for Steve to try and keep people from unlocking their iPhones. I can only imagine how many more image parsing flaws exist on the iPhone. Guess I should start fuzzing it to find out.

iPhone/iPod touch Firmware v1.1.1 TIFF Exploit
http://jailbreak.toc2rta.com

Ambrosia Software has released iToner, which is a Mac OS X application that allows you to put custom ringtones on your iPhone.

iToner features a drag and drop interface which makes it simple to drage and drop your ringtones into the “virtual” iPhone and press the home button. iToner will automatically put the ringtones on your iPhone. According to Ambrosia, the ringtones will continue to work with future iPhone OS updates, as it does not modify the iPhone operating system.

iPhoneRingtoneMaker offers a similar application for PC users, that includes a feature to create custom ringtones from your iTunes music collection. It has been speculated that Apple will use their scheduled September 5th event to introduce ringtone functionality within iTunes.

iToner retails for $15 and is available as a free trial.

George Holtz who runs the blog “Finding JTAG on the iPhone” is claiming to have unlocked the iPhone using a hardware hack. The hack involves a piece of hardware that is installed temporarily into the iPhone only during the unlocking process. After the iPhone has been unlocked, the hardware can be removed and the iPhone can run completely normally using any carrier’s SIM card.

They have also stated that a software hack might be available soon, but for now its a hardware hack only which is supposed to be released one week from today.

Below is a video which they posted on youtube demonstrating an unlocked iPhone using a T-Mobile SIM card and placing a call to their home land line.