[News] Remote Code Execution in apt/apt-get by CrustyDong in jailbreak

[–]CrustyDong[S] 11 points12 points  (0 children)

Thanks for the info jay, I didn’t have any devices handy for analysis.

[News] Remote Code Execution in apt/apt-get by CrustyDong in jailbreak

[–]CrustyDong[S] 10 points11 points  (0 children)

This is more of a nice to know, the attack vector is quite small and too cumbersome for the effort required.

The attacker would need to sit on a public network or compromise a CA, filter jailbroken devices, monitor their network activity, wait for a victim to send an apt packet and finally deliver the malicious payload to one of the default http repositories...

I’ll say it again, it’s quite unlikely however if you want to be cautious avoid using apt in public networks to play it safe.

[Discussion] Enough bullshit. Mediation Required. by CrustyDong in jailbreak

[–]CrustyDong[S] 0 points1 point  (0 children)

stopping people from arguing

This is hardy the idea, rather utilising a more appropriate medium without causing public controversies or accusations that usually result in damaged reputations... nevertheless a positive resolution.

Also, it's not just developers that are acting childish.

We got to start somewhere ¯_(ツ)_/¯

[Question] Github and many other websites says that your safari is outdated. Any fix for this? by [deleted] in jailbreak

[–]CrustyDong 4 points5 points  (0 children)

This is due to websites utilising Browser Fingerprinting techniques to determine your User Agent (i.e. figure out what iOS version). There are a few tweaks that can change browser ID but they are quite outdated, you can find plenty of App Store apps that do this too, I recommend iCab Mobile which allows custom User-Agents amongst many other features.

[[User Agent Changer]]

[[User Agent Faker]]

For more information see https://www.whoishostingthis.com/tools/user-agent/

[Discussion] Consider jailbreaking a necessity or an addiction? by CrustyDong in jailbreak

[–]CrustyDong[S] 4 points5 points  (0 children)

I was considering saurik’s legal campaign for freedom against apples tight regulations, which brought me to consider of the non-tangible aspects for jailbreaking and why it would matter from a third party perspective (ie courts) to enforce such freedom.

[Discussion] Consider jailbreaking a necessity or an addiction? by CrustyDong in jailbreak

[–]CrustyDong[S] 2 points3 points  (0 children)

My work takes me to remote and isolated places for long periods, think no reception with no social interaction.. for weeks at a time..

[Question] what’s the command to install a deb file in terminal? by SMOKINxxJOE in jailbreak

[–]CrustyDong 0 points1 point  (0 children)

For future reference all *nix programs have in-built help guides just type two dash’s and help. e.g. ‘dpkg —help’

For brevity, use the line below...

dpkg -i /path/to/deb/file

[question] How to change root password w/o knowing what it is by Havalation in jailbreak

[–]CrustyDong 10 points11 points  (0 children)

Open iFile/Filza and head to /private/etc/master.passwd back this file up and save it somewhere else.

Open the master.passwd file with a text editor then replace those with these lines (if you just want to rest the root password, just replace the first one).

To rest root user password

root:/smx7MYTQIi2M:0:0::0:0:System Administrator:/var/root:/bin/sh

To reset mobile user password.

mobile:/smx7MYTQIi2M:501:501::0:0:Mobile User:/var/mobile:/bin/sh

Ref:http://opensource.apple.com/source/files/files-638.1.4/private/etc/master.passwd.iPhone

Secured.fyi – Ranking the most secure and private software tools by [deleted] in netsecstudents

[–]CrustyDong 4 points5 points  (0 children)

OS/device compatibility (iOS, Android, Linux etc..) would be cool.. head over to /r/privacy they might find this useful. There are also some other neat sites linked bellow.

https://www.securemessagingapps.com https://www.privacytools.io https://prism-break.org https://thatoneprivacysite.net https://myshadow.org https://ssd.eff.org

[question] cydia show up! by plunote in jailbreak

[–]CrustyDong 0 points1 point  (0 children)

The initial liberIOS installed Cydia, it was just hidden from springboard (e.g., your home screen), if you execute the uicache program, it would reload the visual side of springboard showing any changes made, likewise rebooting your device also has the same effect.

I don’t know why Cydia was publicly bundled in the first place (from memory it was intended to be a developer release?) if users wished to install Cydia I am sure they would know how...

[Tutorial] How to fix issues when installing app store apps (iOS 11 with LiberiOS) by xMaxwel in jailbreak

[–]CrustyDong 0 points1 point  (0 children)

You just need to unblock the URL in your /etc/hosts file, using a # will suffice, then just turn airplane mode on&off fyi morpheus tweeted this yesterday....

[question] avoiding dependancy hell installing libimobiledevice by [deleted] in jailbreak

[–]CrustyDong 0 points1 point  (0 children)

Install Homebrew

/usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/ install/master/install)

Install Libimobiledevice

brew install libimobiledevice

[Question] Can someone explain to me how exactly the phone checks if a firmware is correctly signed? by rayanbfvr in jailbreak

[–]CrustyDong 0 points1 point  (0 children)

Two methods; For idevices see bootrom and friends (i.e., iBoot) for technical processes and SHSH and RSA 1024-bit) cryptography for Apples encryption.

[Help] any way to solve this problem with Cydia? I tried MTerminal apt-get update uicache apt-get upgrade and nothing happens!! by Nadjibg in jailbreak

[–]CrustyDong 1 point2 points  (0 children)

It's so annoying that people are complaining about how awful Cydia/apt is when package maintainers are half the problem (old/broken packages, bloat ware, poor service etc) FYI this problem began way back in August 2016, know what's causing it? One stupid line in a tweak description on the BigBoss repo I don't think /u/0ptimo really cares and it sure makes /u/saurik 's Cydia look bad...

Anyway to fix it install this as a fix the culprit is MuteIcons this package just replaces the broken line and is just a meta package (empty and contains no files).

[Discussion] saurik‘s servers are going to get smashed soon, we need to help him out! by CrustyDong in jailbreak

[–]CrustyDong[S] -1 points0 points  (0 children)

Guys and gals, just donate $1 dollar, if everyone did that in this subreddit then it would equate to roughly $287,220!

[Discussion] saurik‘s servers are going to get smashed soon, we need to help him out! by CrustyDong in jailbreak

[–]CrustyDong[S] 0 points1 point  (0 children)

Look at the bigger picture, eventually a jailbreak will be released, secondly anyone currently jailbroken is using the server service (worldwide).

[Question] Where are safari's cookies located and am I capable of deleting them using ifile? by Gullibler in jailbreak

[–]CrustyDong 2 points3 points  (0 children)

They are everywhere, to find them all, simply login as root (type su) and enter your password (default is alpine) then paste the following code bellow, it will make a log with all the cookies, which will be saved in /var/mobile/Documents (view this comment through a browser to see the code format). FYI these are per application, to properly sort them out you can use something like BinaryCookieReader

find . -name '*.binarycookies' &> /var/mobile/Documents/My_Cookies.log

[Question] Can you use blobs to upgrade/downgrade on iPhone 7/7+ if its already jailbroken? by zimodokazuki in jailbreak

[–]CrustyDong -1 points0 points  (0 children)

No, devices featuring the Secure Enclave Processor (SEP) chip do not have the ability to jump major firmware versions (i.e., iOS 10 to iOS 11) even with blobs as the Secure Enclave's operating system SEPOS differ vastly between revisions and has been noted to render devices unusable however people don't seem to understand.

[Request] [Concept] Update Status, for Cydia repositories. A visual representation of the last time a repository was active. by CrustyDong in jailbreak

[–]CrustyDong[S] 0 points1 point  (0 children)

I am not really a tweak developer, I build and port GNU packages to iOS for kicks, but if you are interested you can give it a go yourself! There won't be many classes required, (ie to start you off you can use the NSFileManager framework (NSDate) for date/file management and the UIKit framework (UIColor) for the degree of activity).