Is Your info safe on your jaibroken iPod or iPhone, I have just did it to my Touch and I'm just wondering I don't want my passwords for iTunes, Facebook, Twitter ect. ect. getting leaked to other people
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Is your Information Safe on a Jailbroken iPod Touch or iPhone
- Thread starter AppleTecFan
- Start date
- Sort by reaction score
If you have OpenSSH installed make sure you change your root password.
If not you're safe and always be carefull what open Wifis you connect to and what you visit on them.
If not you're safe and always be carefull what open Wifis you connect to and what you visit on them.
Yes. The only thing to really worry about is ssh. If you have this installed, you need to change your default passwords. If you didn't install it, don't worry about it. I would also steer clear of cracked apps but other than that, it is pretty much the same as a factory iPod or iPhone.
Of COURSE your information is NOT safe on a Jail-broken phone! The whole point of jail-breaking is to (1) give applications the ability to access all data on the phone and (2) the ability to modify system components.
That said, since you asked specifically about passwords... you have a modicum of protection, in that your web passwords live in the browser keychain. Each app also has it's own individual keychain that it can store sensitive data in. (And may choose to do so or not...).
Keychains are encrypted, so you have SOME protection. However, since a jailbroken phone gives apps the ability to change the system software, it then becomes possible to install keyloggers, etc. that could pluck passwords during use. (i.e. an app couldn't just go in and read a keychain, but it would be possible for it to intercept a password at the time of use.)
edit: As others have pointed-out above, I don't think there is any additional threat from outside attack. The threat would be from rogue apps. The threat would be mostly from cracked apps (which might have extra goodies added...) or jailbreak-only apps that may do nefarious things beyond what they are advertised to do. Even possibly apps downloaded from the app store! Although presumably Apple does what it can to detect this, an app store app could certainly test to see if the phone is jailbroken, and, if so, do nasty things, including trying to steal passwords or other private data.
That said, since you asked specifically about passwords... you have a modicum of protection, in that your web passwords live in the browser keychain. Each app also has it's own individual keychain that it can store sensitive data in. (And may choose to do so or not...).
Keychains are encrypted, so you have SOME protection. However, since a jailbroken phone gives apps the ability to change the system software, it then becomes possible to install keyloggers, etc. that could pluck passwords during use. (i.e. an app couldn't just go in and read a keychain, but it would be possible for it to intercept a password at the time of use.)
edit: As others have pointed-out above, I don't think there is any additional threat from outside attack. The threat would be from rogue apps. The threat would be mostly from cracked apps (which might have extra goodies added...) or jailbreak-only apps that may do nefarious things beyond what they are advertised to do. Even possibly apps downloaded from the app store! Although presumably Apple does what it can to detect this, an app store app could certainly test to see if the phone is jailbroken, and, if so, do nasty things, including trying to steal passwords or other private data.
Jailbreak app that gives acess to the iphones filesystem thru wifi connectivity.
If you dont know it you probably didnt install it.