[Home]  [Headlines]  [Latest Articles]  [Latest Comments]  [Post]  [Sign-in]  [Mail]  [Setup]  [Help] 

Status: Not Logged In; Sign In

MSG ERUPTS Into USA Chants As Trump PULLS UP With Elon Musk And THE AVENGERS To UFC 309! Preschool teacher-turned-soldier brings down Russian missile with Igla system Sunday Morning Futures With Maria Bartiromo 11/17/24 | BREAKING FOX NEWS November 17, 2024 Sadhguru's Message to America After Donald Trump's Election Victory U.S. states are passing internet age verification laws as a cover to compel people into using digital IDs US Train trackss creak with ago se we build a new line in Peru!! EVIDENCE OF A ZIONIST MAFIA ₪ HOW ISRAEL CONTROLS THE US AND GLOBAL POLITICS Women Have Been RADICALIZED, Men HAVE NOT, Data Proves Women Are Becoming MORE EXTREME Politically Democrat Congressman Dan Goldman Has Worst Case of TDS Yet? It Is Called 18 U.S.Code 242 Boebert Asks Witnesses If DoD Is Creating ‘Hybrids’ Of Human & Non-Human Genetics IRAN EXPANDS "NOTAM" TO FOUR ADDITIONAL ZONES - Retaliation Against Israel? East Coast's Largest Grocer Hit by Cyber Attack: Ahold Delhaize Operations Halted Sen. Mike Lee Has an Excellent Idea to Stop Democrat Bob Casey From Stealing Pennsylvania’s Senate Race Left-wing dark money network hauled in more than $1.3B in anonymous donations for liberal causes in 2023 Kennedy to use DOJ investigate and punish collusion between Big Pharma and medical boards /medical journals Bessent Vs. Lutnick: Musk & RFK Push For Pro-Crypto Treasury Secretary While Bass Backs Rumored Favorite CNN’s Dana Bash slams anti-Israel protester who confronted her at synagogue: ‘No shame, no decency, and no clue’ Biden's Cabinet Nominees Were Completely Unqualified Compared To Trump's Elon Musk's X Corp. files notice in Alex Jones' Infowars bankruptcy case Pilot Fired by Biden. Hired ny Trump. Blacks have to be defined more than as victims of oppression No, We Will Not Honor Your Delusions! – Young Conservative Israeli Troops Reach Deepest Point In Lebanon Since Ground Op Began Elon Musk Met With Iran's UN Ambassador Schumer Moves to Silence Criticism of Israel as Hate Speech With 'Antisemitism Awareness Act' Historic English town that inspired Charles Dickens’ best stories RFK Jr drives pharma to 15-year low COL. Douglas Macgregor : What happen at the secret meeting between Israel and Russia? The CDC Planned COVID Quarantine Concentration Camps Nationwide

Science/Tech
See other Science/Tech Articles

Title: Phone root password cracked in three days
Source: Builder.Au
URL Source: http://www.builderau.com.au/blogs/b ... b/viewblogpost.htm?p=339270810
Published: Jul 3, 2007
Author: Nick Gibson
Post Date: 2007-07-04 20:29:26 by boonie rat
Keywords: None
Views: 86
Comments: 1

Phone root password cracked in three days By Nick Gibson | 2007/07/03 16:56:16

It's been out just three days, but already the Apple iPhone has been taken apart both literally and figuratively. The latest: inquisitive Apple fans have hacked into the firmware and discovered the master root password to the smart phone.

The information came from an an official Apple iPhone restore image (rename as a zip file and extract). The archive contains two .dmg disk images: a password encrypted system image and an unencrypted user image. By delving into the unencrypted image inquisitive hackers were able to discover that all iPhones ship with predefined passwords to the accounts 'mobile' and 'root', the last of which being the name of the privileged administration account on UNIX based systems.

Hackers used the simple UNIX program 'strings' to extract a list of human readable character strings from the disk image, which contained a list of user accounts and their corresponding encrypted passwords (equivalent to the /etc/passwd file on UNIX and Linux systems). A call was then made out on the Full Disclosure mailing list for someone to run the popular password cracking tool John the Ripper on the encrypted passwords.

It took one replier just sixteen seconds to extract the passwords for both accounts -- both passwords were simple six letter words of lower case letters.

Having the passwords will not do anybody any good for the moment. The iPhone has no console or terminal access, so there is no way to log in as either account. In fact, nobody even seems certain that the accounts access the machine at all, some Internet commentators suggesting that the password file was left over from early development work, or was intentionally included to throw hackers off the scent.

Poster Comment:

For Jobs said that the Iphone was good and it shall be good, Amen.

Post Comment   Private Reply   Ignore Thread  

#1. To: boonie rat (#0)

Isn't it curious that so many devices, such as the iPhone and routers, are using a unix/linux operating system rather than a proprietary system?

...with the power of conviction, there is no sacrifice.

rack42  posted on  2007-07-04   22:06:19 ET  Reply   Trace   Private Reply  

[Home]  [Headlines]  [Latest Articles]  [Latest Comments]  [Post]  [Sign-in]  [Mail]  [Setup]  [Help]