Step by step: Hacking
an iPhone 3GS with Ubuntu
Bad news for anyone with an
iPhone 3GS: even if you have the latest OS, even if you have a PIN
number, even if it isn't jailbroken - it can be hacked by anyone using a
computer running Ubuntu Lucid Lynx. I wouldn't ordinarily reveal
exactly how to hack an iPhone within a news story such as this, but what
the heck, here's all the gory detail revealed, step by step. *
Step 1 - Take a powered down iPhone 3GS and connect it to your computer
running a fully up to date version of Ubuntu Lucid Lynx. * Step 2 -
See Step 1. Seriously, that really is all it takes according to
security blogger Bernd Marienfeldt who reckons that the way Ubuntu
Lucid Lynx handles the iPhone means that a ton of data is accessible,
even if that iPhone is PIN protected and running the very latest version
of the OS. How much data exactly? Well how about all your Google safe
browsing databases, game content, music, photos and videos, voice
recordings and so on for starters? The person gaining access in this way
will leave no visible footprints to show the iPhone has been
compromised, and will enjoy full read and write access during the hack.
About the only thing someone could not do is make phone calls without
having your PIN number, but that's precious little comfort should your
lost or stolen iPhone end up in the hands of someone with access to a
Ubuntu machine. According to Bernd "Apple could reproduce the as
described serious issue and believes to understand why this can happen
but cannot provide timing or further details on the release of a fix".
Nice.
|