Jailbreak iPhone, iPod Touch, iPad

This week Gareth Wright reported that Facebook’s app for iOS has a security vulnerability through which malicious users can access login credentials saved in a .plist file of the app. With a copy of that .plist file malicious users could automatically log into the affected user’s Facebook account on another device. Reportedly, the vulnerability also exists on Android devices.

Wright describes several different ways in which your login credentials could be obtained by a malicious user, including hidden applications installed on shared PCs, customized apps, or modified speaker dock that could copy your plist.

According to Facebook, the issue only affects jailbroken or lost devices, as it requires physical access or installation of a custom app on the device. But Wright and The Next Web pointed out that simply plugging into any device would be sufficient for malicious users to gather these files.

The Next Web has confirmed that Dropbox for iOS is also vulnerable to this issue. Given that two such high-profile apps as Facebook and Dropbox are vulnerable to credential theft, it is likely that other apps are also affected by the issue.

As many reports note, this method of gathering login credentials is not actively utilized in a malicious manner, and users can protect their data for the time being by not plugging their devices into shared computers and charging stations.

Having problems activating your iPhone? Don’t have original SIM-card? Cannot get passed emergency unlock screen? We have a solution:

If you have iPhone 3G, just use redsn0w to jailbreak and hactivate. If you have iPhone 3GS or iPhone 4 follow these instructions:

If you are already Jailbroken:

So you have an iPhone with iOS 4.0, but don’t have the original SIM and stuck on the Emergency Call Screen:

1. Download ifunbox software (download link)
2. Run ifunbox software and sync with phone
3. Go to /private/var/root/Library/, delete original lockdown folder and put this lockdown folder after you extract it from the zip file
4. Restart phone

If you are not jailbroken

Sherif Hashim discovered that you can activate your iPhone 4, iPhone 3GS or even iPhone 3G without the original carrier SIM card. You need a “phonebook sim card” or 02 simcard. You can buy these type of sim at radioshack, bestbuy or other mobile electronics store (for example here).

Once you get passed the Emergency Call screen, connect to Wifi, jailbreak using JailbreakMe.com and unlock using ultrasn0w. Once that is complete you should be passed activation and unlocked (able to use any sim). If you get a different simcard error, do the following final step:

1. Download ifunbox software (download link)
2. Run ifunbox software and sync with phone
3. Go to /private/var/root/Library/, delete original lockdown folder and put this lockdown folder after you extract it from the zip file
4. Restart phone

If you have itunes invalid response problem:

1. Connect to wifi and ssh to your phone (via winscp, putty, terminal, etc).
2. Navigate to your lockdown folder (/private/var/root/Library/).
3. Delete pair_records folder
4. Reconnect the cable and see that your invalid response problem is gone.

If you bought your iPhone 4 on ebay you will need the official sim (at&t) or a universal sim, like ones you can grab at bestbuy for $10 this will get you passed Emergency Screen.

via jailbreakmatrix and gsmhosting

Action Menu, utility that extends traditional Copy / Paste functionality, is updated to version 1.0.1.

Here is an official changelog:

• No longer allow copying secure text fields
• Add option to disable extended menu support
• Support for launching Birdfeed via the Tweet action
• Remember language in Translate service
• Allow carriage returns in Lookup (for supported services)
• Option to sort Favorites alphabetically
• Translations now work (Italian, German, Japanese, French)
• Additional Support for more apps
• Fix for Facebook crash
• Fix for copying song or album name in iPod app
• Fix biteSMS-button related crashes
• Fix crash when Lookup action is used inside SpringBoard
• Fix Copy All breaking copy in the Photos app
• Fix crash in iTunes password dialog
• Fix for freeze in Fast Notes
• Fix annoying popup on Wifi network/ringtone cells in Preferences
• Revert 1Password to value-only copying
• Prevent Safari freeze when invoking inside a window.prompt (temporary fix)

Action Menu can be installed or updated via Cydia on a jailbreaked iPhone (iPod Touch).

PdaNet updated to version 1.33. This tool allows you to connect any desktop or notebook to internet through iPhone 3G. Here is a changelog:

This application is avaliable via Cydia Installer for jailbreaked iPhones.

Many iPhone 3G users would like to use internet on a desktop or notebook through their phone. There were several solutions: iPhoneModem, NetShare, 3Proxy.. they all used SSH and SOCKS proxy. One of the working ones was described here get internet on a desktop or notebook through IPhone 3G.

Couple days ago PdaNet (fullname is PdaNet WiFi Router) was ported to iPhone. Now our life is much much easier.

What you need is a jailbreaked iPhone with Cydia installer. Then install PdaNet.

All you need to do is simply to create an ad-hoc WiFi network on the computer and connect your iPhone to it (instructions). Your computer then goes online automatically. There is no need to specify IP (or any other) settings on either end.

Some nice features:

• You will get FULL Internet access on the computer! (Instead of only applications that support Socks proxy.) In technical terms, all applications make direct TCP/IP connections to the server. Since there is no proxy involved, that also means less problems and less delays.
• You don’t need to configure anything on the computer end whenever you connect PdaNet. No proxy settings, no extra software installation, no messing with static IP assignment, no switching settings back and forth when going back to your home’s WiFi router.
• Yes it will connect at 3G speed if your phone has the coverage.
• Supports PC, MAC, Linux or anything (include other PDA/phones) that connects to a WiFi router.
• PdaNet runs in the background so you can still use other iPhone features when PdaNet is connected. But when you are done with them, go back to PdaNet to prevent the phone from entering idle and drops your connection.
• To turn off the phone screen when using PdaNet, just cover the upper part of the phone (or simply flip the phone upside down). This will conserve your battery.
• It is recommended that you charge the phone at the same time while using PdaNet, because both WiFi and 3G will be put on full speed, both consume a lot of juice.

One last note: over-usage of PdaNet’s tethering is likely to draw the eye and the ire of AT&T (if you use this provider), so use with care!

Thanks to Dev Team and the porting work of Jay Freeman as well as the authors of 3Proxy, it is now possible to “tether” your iPhone 3G and use its Internet connection on your laptop.

Warning – Tethering your iPhone is against the iPhone data plan terms. AT&T could slap you with huge fees if you overuse this. I recommend only using it during emergencies.

Here is a basic plan (by the way, this should work for old IPhone also):

• Jailbreak your iPhone 3G
• Install 3Proxy and Terminal
• Create an ad-hoc Wi-fi network using your laptop
• Join the network with your iPhone
• Find the iPhone’s IP address
• Open Terminal and run the proxy program
• Open Safari on your iPhone and open a web page
• Configure your browser to use the proxy

Later we’ll discuss it with more details.

Step 1: Jailbreak your iPhone

Just download PWNageTool 2.0. Run it and follow the instructions. Make sure to add Cydia, when asked.

Step 2: Install 3Proxy and Terminal

During the jailbreak, Cydia should have appeared on one of your app pages: use it and let Cydia load and self-update.

Then head to Install, All Packages, then find MobileTerminal and 3Proxy (3Proxy is at the bottom). Install both and hit your Home button. Your phone will restart and you’ll see Terminal installed on your home screen. 3Proxy isn’t a GUI app and as such won’t have an icon.

Step 3: Create an ad-hoc Wifi network using your laptop

Using whatever wireless software suite you have, create an ad-hoc network. On a Mac it’s in the Airport menu, under “Create network…”. Name it something inconspicuous. I called mine “baladoux”. On your iPhone, join the ad-hoc network.

Step 4: Find your iPhone’s IP address

Then, hit the blue arrow next to it, and wait for your IP address to show up:

Memorize (or write down) this IP address. You will need it later.

Step 5: Open Terminal and run the proxy program

Simple enough. Open Terminal, type “socks” and hit return.

Nothing will appear to happen, but the SOCKS server will be running. You can hit the home button to push Terminal to the background (remember to terminate it later, by switching back to Terminal and holding the Home button until it closes).

Step 6: Open Safari on the iPhone and open a web page

Any page will do. I recommend http://jailbreak-iphone.ru

This step is important. The page will take a while to load. When Safari realizes it can’t get to the Internet using the ad-hoc Wifi, it will do some internal magic to switch back to 3G for Internet while still on your ad-hoc network. That lets the proxy do its thing.

Step 7: Configure your browser

In Firefox, head to Preferences, and under Advanced, Network, hit Settings:

Then, fill in the iPhone’s IP address (which you memorized earlier) into the SOCKS Host field, and put 1080 as the port number. Make sure all other proxy fields are blank and/or 0 as shown:

Then, since the proxy doesn’t forward DNS, you will also have to change an advanced option in Firefox. In the Firefox URL bar, enter “about:config” and hit Enter

In Filter, type “socks” and then double-click “network.proxy.socks_remote_dns” to make its value “true”.

That should be all you need! Firefox should be able to browse the Internet through your iPhone’s 3G connection.

Tethering costs a lot of battery life on the iPhone so make sure you have it plugged in. When you’re done, make sure to quit Terminal by opening it back up and pressing and holding the Home button until it quits.

–

Thanks to cre.ations.net for this tutorial.

Our comments:

5. No voice dialing

There is do such feature. But.. There is an application called VoiceDial. For old jailbreaked IPhones it is possible to install via Installer. For the new IPhone 3G VoiceDial is avaliable through AppStore. By the way it is not free, cost is about $30.

4. No cut and paste

Indeed, not in IPhone or IPhone 3G for now. But, read this.

3. Can’t use as a modem

That is a problem. No such feature. And there will be no such feature in the future.

UODATE: Get internet on a desktop or notebook through IPhone 3G

2. No multimedia messaging

There is an application called SwirlyMMS – works well. Costs $8, works well on old IPhones.

1. Locked up

Not only this. It is not possible to buy IPhone 3G without a contract. We’ll wait for an unlock and sells without a contract.