Add to del.icio.us     Digg this

May 5, 2010

Attackers have once again succeeded in causing trouble for iPad and iPhone users with the release of so-called 'jailbreaking software' that allows hundreds of unapproved mobile apps to be installed on the devices, and without even the user knowing about it.

Dubbed by some as "Spirit" the malicious software was released May 1st for devices running firmware versions 3.1.2, 3.1.3, and 3.2.

The hacker software allows users to customize homescreen images, adjust the devices to a computer so they can be used as a modem and do other nasty things. It also allows users to install third-party apps from unapproved repositories such as Cydia and RockYourPhone.

The jailbreak software allows devices to remain in the unlocked mode even after they are rebooted or plugged in to a computer. 'Spirit' exploits a common security vulnerability in the heavily locked-down "userland" section of a wireless device, something the authors said hasn't been achieved since the early days of the iPhone.

Unfortunately, Spirit is available on both Mac OS X and Windows operating systems.

By most accounts, installation appears to be seamless, but the software authors did report some errors for Windows users and say they can be overcome by setting the compatibility mode in Spirit to Windows 98 or even Windows 95... (!)

For now, Spirit only works on iPhones and iPads that have been activated and are already running an unmodified version of recent Apple firmware.

Devices that have been 'jailbroken' by another program should be restored to 3.1.2, but users should ensure 'SHSH Blobs' have been backed up, the authors stress.

For now, it provides no support for unlocking wireless carriers, so users will still be stuck with current mobile service providers after running the software.

They also warn that some of the apps offered by Cydia are "not designed for the iPad, and might damage your system and require you to restore."

Step-by-step installation instructions from ReadWriteWeb are available on their site.

Add to del.icio.us     Digg this

Source: TSC.