Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
iPhone Openssh without sbsetting
- Thread starter Sseguin
- Start date
- Sort by reaction score
Why would you want to turn off SSH? It's lightweight and it could save your jailbreak in a pinch. I leave it in all the time just in case, and it has saved my ass on at least one occasion.
You can access your phone's filesystem using a cable as well, without the need of keeping SSH open.
Please explain, as I was under the impression you/me needed SSH to get (s)FTP going to the phone ... at least that is how I have done it
On your iDevice: get afc2add from Cydia
On you computer: get iExplorer
Connect iDevice to computer, open iExplorer - full access
"Sigh". When did I compare root access to the file system to a shell? I've never needed to run commands on my phones in order to save a jailbreak, access to the filesystem was all that was needed.
I would want to turn off ssh to guarantee refusal of any unauthorized log ins to my live file system.
Simply change the password and port number. SSH is a wonderful thing to leave on. It does a lot more than file system manipulation. And the file system stuff it can do is much better and advanced than anything you can do via a cable. It can even work in some cases where the AFC service doesn't load as its startup position is later whereas OpenSSH's startup is independent from the rest of iOS.
I have. I have been able to uninstall packages using apt-get uninstall over SSH when the AFC service would not load due to a respring loop. If I had had SSH turned off, I would have lost my jailbreak.
A strong password will do the same and give you the ability to gain shell access to your phone if you need it. You have changed your root and user passwords, right?
That is just SSH via USB and needs you to download Python also if I remember correctly.
----------
Wait for updates I guess
I know, the point was that with physical access to the device one wouldn't need to have SSH enabled "just in case".
Often physical access isn't enough. In some cases, the iPhone's AFC service restarts before you can do anything to fix it or it doesn't start at all. Having the OpenSSH daemon running in provides a better route as it is independent from the Springboard and AFC service. Still a very good thing to have around and installed on one's device. Then there's the problem that may arise if you're using a computer than hasn't been trusted with iOS. It would refuse all connections and you wouldn't be able to connect at all.
you guys seem to know a lot about SSH, mind if I ask you a few questions?
Are there other forms of SSHing to your device?
How would you SSH into the device without the device being connected to wifi? It seems afc is more reliable in this case (assuming the afc service starts up) since you can always connect a cable to access the device (say for recovering pictures before doing a DFU restore)
Even if the SSH service starts up, it doesn't seem like you can connect to the device if it doesn't connect to wifi
as with the others, the main reason I use SSH or the AFC service is to access the file system so I apologize if they aren't meant to used in this way
If the device is an A4 or older device, you can access it via a SSH ramdisk over USB. Really nifty little things. You can access it over USB through usbmuxd using tcprelay, part of the Linux distribution of usbmuxd. It's a python script. usbmuxd isn't hooked into Springboard like AFC is. Because of this, it'll still work even when Springboard is crashing and trying to load. Then there's advanced stuff like auto-reverse SSH tunneling through the cellular network, but that's not really used very much due to battery drain.
It's not that they aren't meant to be used that way; most such protocols can be used for file transfer. It's just that it can be used for so much more. SSH can give you shell access to your phone so that you can run any unix command, install and uninstall packages, repair permissions, etc. When I hear someone talk about SSH, file transfer is the last thing I'm thinking about.
There's a flipswitch switch called "SSH Toggle" that works on my 5s. In the ModMyI repo. Requires Flipswitch, obviously. I use it with FlipControlCenter.
Thanks! Wait...Are you sure it's not called SSH Switch for Flipswitch?
Didn't find that one yet. Still, not sure if I'd use the toggle now that both passwords are changed. My memory fails me...SSH comes on with every reboot, correct?