Step by step: Hacking an iPhone 3GS with Ubuntu

happygeek 1 1K Views

Bad news for anyone with an iPhone 3GS: even if you have the latest OS, even if you have a PIN number, even if it isn't jailbroken - it can be hacked by anyone using a computer running Ubuntu Lucid Lynx.

I wouldn't ordinarily reveal exactly how to hack an iPhone within a news story such as this, but what the heck, here's all the gory detail revealed, step by step.

  • Step 1 - Take a powered down iPhone 3GS and connect it to your computer running a fully up to date version of Ubuntu Lucid Lynx.
  • Step 2 - See Step 1.

Seriously, that really is all it takes according to security blogger Bernd Marienfeldt who reckons that the way Ubuntu Lucid Lynx handles the iPhone means that a ton of data is accessible, even if that iPhone is PIN protected and running the very latest version of the OS. How much data exactly? Well how about all your Google safe browsing databases, game content, music, photos and videos, voice recordings and so on for starters? The person gaining access in this way will leave no visible footprints to show the iPhone has been compromised, and will enjoy full read and write access during the hack.

About the only thing someone could not do is make phone calls without having your PIN number, but that's precious little comfort should your lost or stolen iPhone end up in the hands of someone with access to a Ubuntu machine.

According to Bernd "Apple could reproduce the as described serious issue and believes to understand why this can happen but cannot provide timing or further details on the release of a fix".

Nice.

Dani AI

Generated

Short summary: the 2010 report about Ubuntu Lucid (10.04) auto‑mounting iPhone storage describes a real, physical‑access issue: plugging a powered‑off iPhone 3GS into an Ubuntu 10.04 machine then powering it on could expose large parts of the device filesystem despite a passcode. Apple investigated and changes in the iOS 4.x release family addressed the underlying problem. (arstechnica.com)

What happened and why it mattered: researchers reproduced the behavior on non‑jailbroken 3GS units and showed the automounter/pairing flow (a TOCTTOU/pairing race) could be forced so the phone’s decrypted files are accessible. The exploit requires brief physical access — not a remote network attack — but it allows copying or writing files if an attacker can trigger the mount. Reporting and disclosure at the time include independent reproductions and mailing‑list discussion. (pcworld.com)

Practical, modern takeaway (applies to anyone reading this thread years later): update devices to a patched iOS (iOS 4.x fixed the race condition in 2010 and later releases improved data protection), perform the full‑restore/upgrade process Apple documents so the passcode is used as an encryption key, enable a non‑trivial passcode, enable encrypted iTunes backups, and keep Find My iPhone/remote‑wipe active. Avoid connecting phones to untrusted machines (or disable automatic USB mounting on Linux) and treat any lost device as compromised until proven otherwise. For historical context, ’s short steps captured the risk; (3G/3GS) and (iPad) should note Apple’s update path covered the affected device families — update and restore where possible. (macstories.net)

Member Avatar for Alex_
Alex_ 0 Junior Poster

Does it work with iphone 3g?

Member Avatar for happygeek
happygeek 2,411 Most Valuable Poster

Dunno, not tried it as I don't have an iPhone 3G - however, I suspect it most likely does as I cannot think of any reason why it wouldn't.

Member Avatar for BeyondtheTech
BeyondtheTech 0 Newbie Poster

I'd me more interested if this can be done with an iPad. I've been waiting for 3 years to change the email sound without jail breaking the goddamn OS.

Member Avatar for happygeek
happygeek 2,411 Most Valuable Poster

You've waited 3 years to change something on device that's only been around for less than 3 months? :-)

Member Avatar for BeyondtheTech
BeyondtheTech 0 Newbie Poster

You've waited 3 years to change something on device that's only been around for less than 3 months? :-)

Read again and think harder. It's been the same OS core over the past three years when the first iPhone came out.

Member Avatar for happygeek
happygeek 2,411 Most Valuable Poster

I know, hence the smiley. File under dry British sense of humour :-)

Member Avatar for ITDonNo1
ITDonNo1 0 Newbie Poster

a great time pass thread........ha ha ha ha ha..

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

Edit Preview