iPhone hackers have released a tool that allows owners of firmware 1.1.1 iPhones and iPod Touches to open up their devices to third-party apps - all without the need for a host Mac or PC.
AppSnapp AppSnapp in action
The utility's called AppSnapp, and it's launched via the devices' Safari web browser. The code uses a known …
"The code uses a known vulnerability with firmware 1.1.1, which it subsequently patches."
so if it fixes the vulnerability, then how would you go about reversing the changes if you no longer wish to use the not-really-all-that-amazing-3rd-party-apps afterwards? and when Apple release 1.1.x with the killer must-have enhancement that you want, how do you go about applying a hack to revert your iPhone to pre-hack status? surely only a hardware reset which'll wipe all your data
also, while you have to respect there is some technical complexity probably involved in opening the machines via a web interface, it just makes it too easy doesn't it? which means that Apple will be bound to step in to fix it, which ultimately means it'll make it harder for the machines to be hacked in the future
(my main gripe here is that by the time i get my hands on an iPhone at the UK launch next month, it'll be impossible for me to load 3rd party apps and it'll all be the fault of this AppSnap!! damn their eyes!!)
Not that I'd ever buy an iPhone but good to see Apple kicked in the teeth for their lockdown nonsense. Same with Sony and the PSP, when will the corporates learn to let people do what they want with their devices once they have bought them?
"When will the corporates learn to let people do what they want with their devices once they have bought them?"
Probably the day after consumers stop going for lower up-front costs, and instead consider only total cost of ownership. Which will happen shortly after loans stop making sense. That is, never.
"when will the corporates learn to let people do what they want with their devices once they have bought them?"
When will people who are on a mobile phone contract realise that they don't own the *subsidised* phone until they have paid for it?
Also, games consoles are often subsidised as they are sold at loss on the hope of revenue generated by software purchases. If you are able to run homebrew o the PSP then you won't buy any games.
If you want freedom you buy a SIM free phone, open source games console (or a PC for games).
part of the problem specific with the i-devices, especially the iPhone, is you *cannot* buy an unsubsidized device. That's the reason for the CA based class action lawsuit. AT&T/Apple did not make the option available at launch, and possibly haven't even done so yet. Not even for a ridiculous premium. Even Apple employees were unable to score an unlocked device. Also, IIRC, the device physically cannot function in any mode without the SIM card, so they refused to sell a non-working device.
It's a common known fact that the iPhone is not subsidised. Also, the iPod touch is purchased outright, as it has no contract, so in both cases the buyer does own the product from day one.
Anyone out there who doesn't want their iPhone, just box it up and send it to me. You won't see me listing it on eBay, 'cause it's gonna be jailbreak'd and set up on Viaero -- the only GPRS (or whatever) carrier available in central Nebraska (I do miss my old North Texas home)
Isnt this a little worrying, that the product can be hacked remotely and so easily ? How long before the malware crowd start to take notice of this trick ?
What a wonderful thought, Zombie iPhones spewing out Viagra spam :)
I tried this last night and within half an hour I managed to Jailbreak my iPod Touch, install the BSD SubSystem and OpenSSH so I could connect using SFTP from my PC and then put the 'missing' iPhone applications like mail and maps onto my iPod - fantastic!
If Apple decides to release new firmware with some amazing extra features then maybe I'll reset to factory defaults and upgrade, but I really can't see myself doing that unless they offer some compelling feature I can't get through 3rd party applications.
There's really nothing to lose by Jailbreaking an iPod Touch at the moment, iTunes works exactly as it did before the Jailbreak and I have some great extra functionality. Coupled with my BT-FON Wireless access I can now get my mail on the move in a very friendly UI :-)
Register
iPhone hackers have released a tool that allows owners of firmware 1.1.1 iPhones and iPod Touches to open up their devices to third-party apps - all without the need for a host Mac or PC. AppSnapp AppSnapp in action The utility's called AppSnapp, and it's launched via the devices' Safari web browser. The code uses a known …
possibly a bad idea
"The code uses a known vulnerability with firmware 1.1.1, which it subsequently patches."
so if it fixes the vulnerability, then how would you go about reversing the changes if you no longer wish to use the not-really-all-that-amazing-3rd-party-apps afterwards? and when Apple release 1.1.x with the killer must-have enhancement that you want, how do you go about applying a hack to revert your iPhone to pre-hack status? surely only a hardware reset which'll wipe all your data
also, while you have to respect there is some technical complexity probably involved in opening the machines via a web interface, it just makes it too easy doesn't it? which means that Apple will be bound to step in to fix it, which ultimately means it'll make it harder for the machines to be hacked in the future
(my main gripe here is that by the time i get my hands on an iPhone at the UK launch next month, it'll be impossible for me to load 3rd party apps and it'll all be the fault of this AppSnap!! damn their eyes!!)
Works fine on Touch
If only all installations were this easy.. A URL, one click and a reboot was all it took to ruin yet another work day playing with my Touch!
In other words: it works like a charm.
Woo
Not that I'd ever buy an iPhone but good to see Apple kicked in the teeth for their lockdown nonsense. Same with Sony and the PSP, when will the corporates learn to let people do what they want with their devices once they have bought them?
Re: Woo
"When will the corporates learn to let people do what they want with their devices once they have bought them?"
Probably the day after consumers stop going for lower up-front costs, and instead consider only total cost of ownership. Which will happen shortly after loans stop making sense. That is, never.
Hold on?
"when will the corporates learn to let people do what they want with their devices once they have bought them?"
When will people who are on a mobile phone contract realise that they don't own the *subsidised* phone until they have paid for it?
Also, games consoles are often subsidised as they are sold at loss on the hope of revenue generated by software purchases. If you are able to run homebrew o the PSP then you won't buy any games.
If you want freedom you buy a SIM free phone, open source games console (or a PC for games).
RE: Works fine on Touch
You say it works fine, what you going to do when Apple releases 1.1.2 and your touch suddenly stops working???
Restore
@jai:
If you no longer want a Jailbreak'd device, you just do a full restore via iTunes. Everything is back to normal after that.
@ Giles
part of the problem specific with the i-devices, especially the iPhone, is you *cannot* buy an unsubsidized device. That's the reason for the CA based class action lawsuit. AT&T/Apple did not make the option available at launch, and possibly haven't even done so yet. Not even for a ridiculous premium. Even Apple employees were unable to score an unlocked device. Also, IIRC, the device physically cannot function in any mode without the SIM card, so they refused to sell a non-working device.
love the article title...
"Tool opens iPhone"... now it's official, only a "tool" would buy one in the first place. Or does it take thinly-endowed users to open the case? :P
now the Touch-if it makes a good PDA, now that might be something.
Erm...
Giles,
It's a common known fact that the iPhone is not subsidised. Also, the iPod touch is purchased outright, as it has no contract, so in both cases the buyer does own the product from day one.
Happy to assist...
Tell y'all what...
Anyone out there who doesn't want their iPhone, just box it up and send it to me. You won't see me listing it on eBay, 'cause it's gonna be jailbreak'd and set up on Viaero -- the only GPRS (or whatever) carrier available in central Nebraska (I do miss my old North Texas home)
Am I missing something ?
Isnt this a little worrying, that the product can be hacked remotely and so easily ? How long before the malware crowd start to take notice of this trick ?
What a wonderful thought, Zombie iPhones spewing out Viagra spam :)
Worked like a charm!
And to think that last week you had to go through some 100 step geek-fest to get it working, just incredible work.
The ipod touch is now the greatest gadget of all time.
Works just fine
I tried this last night and within half an hour I managed to Jailbreak my iPod Touch, install the BSD SubSystem and OpenSSH so I could connect using SFTP from my PC and then put the 'missing' iPhone applications like mail and maps onto my iPod - fantastic!
If Apple decides to release new firmware with some amazing extra features then maybe I'll reset to factory defaults and upgrade, but I really can't see myself doing that unless they offer some compelling feature I can't get through 3rd party applications.
There's really nothing to lose by Jailbreaking an iPod Touch at the moment, iTunes works exactly as it did before the Jailbreak and I have some great extra functionality. Coupled with my BT-FON Wireless access I can now get my mail on the move in a very friendly UI :-)
Err... restore....
Restoring is great for getting rid of software changes etc, but a hardware reset is somewhat unlikely to reset a firmware change folks.
It would be a bit daft if it did.
Shouldn't the title read...
"iPhone software hideously insecure, owners advised to avoid all websites until patch is issued"?
Seriously - visiting a website is all it takes to make large changes to the device? 'kin hell.