Comments on: How to Secure Your Jailbroken iPhone From SSH Hack http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/ iPhone Tips, How-to Guide and iPhone Application Review Tue, 16 Mar 2010 10:07:53 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: AJ http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-60128 AJ Sat, 13 Mar 2010 13:38:08 +0000 http://www.simonblog.com/?p=4279#comment-60128 omg i just remembered after watching a youtube video, a few days ago the Rock app told me my password hasnt been changed yet so i changed it there to a password i use for everything..... damn im so forgetfully dumb... i have the right password now. sorry for my post lol but i was worried omg i just remembered after watching a youtube video, a few days ago the Rock app told me my password hasnt been changed yet so i changed it there to a password i use for everything….. damn im so forgetfully dumb… i have the right password now. sorry for my post lol but i was worried

]]> By: AJ http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-60124 AJ Sat, 13 Mar 2010 13:11:36 +0000 http://www.simonblog.com/?p=4279#comment-60124 K I type in SU, press enter and then it says password, i type in alpine press enter and it says incorrect password. I havnt changed the password, so why is it incorrect? ive tried a couple times just in case of typos but still incorrect... what do i do?? K I type in SU, press enter and then it says password, i type in alpine press enter and it says incorrect password. I havnt changed the password, so why is it incorrect? ive tried a couple times just in case of typos but still incorrect… what do i do??

]]> By: blake http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-58788 blake Sun, 07 Mar 2010 21:03:14 +0000 http://www.simonblog.com/?p=4279#comment-58788 my root pw is not alpine. i have not changed it in the past. is it possible that a virus has already hurt my iphone? i jb'd with blackrain and am running iphone os 3.1.2 openssh is installed, although i recently uninstalled it, and i have cyberduck on my mac--and cyberduck does show the iphone, but cant connect bc, sorry for the redundancy, but alpine is not my pw. my root pw is not alpine.
i have not changed it in the past.
is it possible that a virus has already hurt my iphone?

i jb’d with blackrain and am running iphone os 3.1.2

openssh is installed, although i recently uninstalled it, and i have cyberduck on my mac–and cyberduck does show the iphone, but cant connect bc, sorry for the redundancy, but alpine is not my pw.

]]> By: lolhai http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-49120 lolhai Fri, 15 Jan 2010 02:32:51 +0000 http://www.simonblog.com/?p=4279#comment-49120 are you just hacking me? are you just hacking me?

]]> By: com3.es | Got an iPhone as a New Year Gift? Here are Some Tips to Get Start http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-47684 com3.es | Got an iPhone as a New Year Gift? Here are Some Tips to Get Start Thu, 31 Dec 2009 23:03:34 +0000 http://www.simonblog.com/?p=4279#comment-47684 [...] How to Secure Your Jailbroken iPhone From SSH Hack [...] [...] How to Secure Your Jailbroken iPhone From SSH Hack [...]

]]> By: Davii http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-46152 Davii Wed, 16 Dec 2009 23:55:27 +0000 http://www.simonblog.com/?p=4279#comment-46152 You SHOULD only be vulnerable if you have an app installed that can accept incoming connections; in this case we are talking about OpenSSH, but the same principal applies if you have installed another file-manipulating server app eg. HTTP or FTP. The bottom line is that both Cydia and Rock recommend changing your passwords is the first thing you should do, and I would certainly advise the same. It has already been mentioned, but the article still hasn't been updated, so I think it bears reiterating: you MUST change BOTH passwords! You SHOULD only be vulnerable if you have an app installed that can accept incoming connections; in this case we are talking about OpenSSH, but the same principal applies if you have installed another file-manipulating server app eg. HTTP or FTP.

The bottom line is that both Cydia and Rock recommend changing your passwords is the first thing you should do, and I would certainly advise the same.

It has already been mentioned, but the article still hasn’t been updated, so I think it bears reiterating: you MUST change BOTH passwords!

]]> By: george http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-46130 george Wed, 16 Dec 2009 21:19:50 +0000 http://www.simonblog.com/?p=4279#comment-46130 thanks simon one question if I remove open SSH from my iphone I'm still vulnerable to a virus atack?? sorry but i'm new at this thanks simon one question if I remove open SSH from my iphone I’m still vulnerable to a virus atack?? sorry but i’m new at this

]]> By: Jim http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-43413 Jim Mon, 23 Nov 2009 18:26:31 +0000 http://www.simonblog.com/?p=4279#comment-43413 As it's becoming more and more important (there's now a very malicious piece of malware stealing people's money), let me just explain that you should ALSO CHANGE THE PASSWORD FOR MOBILE!!! The mobile account is just as vulnerable as the root account and it holds ALL your data! After doing step 1, 2 and 3 above, with the terminal still running, you should type: passwd mobile and it asks for your new password (twice). It is OK to use the same new password you used for the root account. Just don't use 'alpine'. As it’s becoming more and more important (there’s now a very malicious piece of malware stealing people’s money), let me just explain that you should ALSO CHANGE THE PASSWORD FOR MOBILE!!! The mobile account is just as vulnerable as the root account and it holds ALL your data!

After doing step 1, 2 and 3 above, with the terminal still running, you should type:

passwd mobile

and it asks for your new password (twice). It is OK to use the same new password you used for the root account. Just don’t use ‘alpine’.

]]> By: Jim http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-43412 Jim Mon, 23 Nov 2009 18:21:10 +0000 http://www.simonblog.com/?p=4279#comment-43412 The current worms affect jailbroken iPhones and iPod touches that have OpenSSH running. (Technically that's not an SSH client but an SSH server.) As far as I gather from your post, that wouldn't be you. I don't know where your problem with Cydia comes from, but it sounds like the connection to one or more of the sources (repositories) is not working; it's an internet connection issue. Some of the sources are offline some of the time, and your own connection could have temporary problems. The current worms affect jailbroken iPhones and iPod touches that have OpenSSH running. (Technically that’s not an SSH client but an SSH server.) As far as I gather from your post, that wouldn’t be you. I don’t know where your problem with Cydia comes from, but it sounds like the connection to one or more of the sources (repositories) is not working; it’s an internet connection issue. Some of the sources are offline some of the time, and your own connection could have temporary problems.

]]> By: guy wire http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-43410 guy wire Mon, 23 Nov 2009 18:09:53 +0000 http://www.simonblog.com/?p=4279#comment-43410 Double POst Sorry but I don't know how to edit my above. I have cydia but do not have a ssh client on my JAU'd iphone 2g 3.0.1 When I try to open cydia I get all kinds of error messages about not fetching data. Am I vulnerable to these worms and if so what should I do? . Double POst Sorry but I don’t know how to edit my above. I have cydia but do not have a ssh client on my JAU’d iphone 2g 3.0.1 When I try to open cydia I get all kinds of error messages about not fetching data.
Am I vulnerable to these worms and if so what should I do? .

]]> By: guy wire http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-43409 guy wire Mon, 23 Nov 2009 18:01:57 +0000 http://www.simonblog.com/?p=4279#comment-43409 I can't get cydia to work I get "502 bad gateway "message I can’t get cydia to work I get “502 bad gateway “message

]]> By: First iPhone Virus Affected my Jailbroken iPhone 3GS — The iPhone Blogging http://www.simonblog.com/2009/11/10/how-to-secure-your-jailbroken-iphone-from-ssh-hack/#comment-42536 First iPhone Virus Affected my Jailbroken iPhone 3GS — The iPhone Blogging Tue, 17 Nov 2009 03:09:16 +0000 http://www.simonblog.com/?p=4279#comment-42536 [...] changed the root password to secure your iPhone from Ikee worm attack. Follow simonblog’s step-by-step guide to change the default root password using Mobile [...] [...] changed the root password to secure your iPhone from Ikee worm attack. Follow simonblog’s step-by-step guide to change the default root password using Mobile [...]

]]>