Slashdot Mirror


Over 225,000 Apple Accounts Compromised Via iOS Malware

An anonymous reader writes: Researchers from Palo Alto Networks and WeipTech have unearthed a scheme that resulted in the largest known Apple account theft caused by malware. All in all, some 225,000 valid Apple accounts have been compromised. The theft is executed via variants of the KeyRaider iOS malware, which targets jailbroken iOS devices. Most of the victims are Chinese — the malware is distributed through third-party Cydia repositories in China — but users in other countries have also been affected (European countries, the U.S., Australia, South Korea, and so on). "The malware hooks system processes through MobileSubstrate, and steals Apple account usernames, passwords and device GUID by intercepting iTunes traffic on the device," Palo Alto researcher Claud Xiao explained. "KeyRaider steals Apple push notification service certificates and private keys, steals and shares App Store purchasing information, and disables local and remote unlocking functionalities on iPhones and iPads."

217 comments

  1. Jail broken devices? by Anonymous Coward · · Score: 5, Insightful

    Only jail broken devices were affected. Anyone who jail breaks is aware of the risk they are taking.

    1. Re:Jail broken devices? by geogob · · Score: 4, Insightful

      Anyone who jail breaks is aware of the risk they are taking.

      I think they just heard me laugh all the way to China. Seriously, most people can't even grasp the concept of risk when think of software and operating systems. How in the world do you expect them to understand those risk?

      No. Contrary to some believes, most (as in almost) all jailbrokers have no clue what they do and have no idea of what are the risks involved and how important (or not) they are.

    2. Re:Jail broken devices? by war4peace · · Score: 1

      Correct question is "why do they jailbreak?".

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    3. Re:Jail broken devices? by Anonymous Coward · · Score: 0

      I can give you plenty of reasons for jailbreaking:

      1: If I try to view websites on Safari, I either wind up dumped on the App Store for some lame F2P/P2W app because of an ad redirect, redirected to some shitty site after 15 seconds of pulling up an article, or wind up at a page demanding I create a user. AdBlock actually makes my iPhone as usable as my Android device when it comes to Web browsing.

      2: Ever run Firewall IP? There are a LOT of sites an app bounces through, and you learn that even that innocuous fleshlight app is sending your telemetry, location, contacts, and other data to a lot of places where it shouldn't be going.

      3: I like PMP (protect my privacy). For apps that demand your location, they can have it... New york, new york. For apps that riffle through your music selection? They get plenty of garbage info. Without PMP, this is all up for grabs.

      4: I like the ability for robocallers to be blacklisted before they even ring the phone. Yes, I can chase my tail and ban callers after the fact, but what's the point of that?

      5: I like being able to archive saved games off. An iOS restore is all or nothing, and for huge games like Square apps, it is nice to save it off, then load it on later if I feel like playing again.

      There isn't a "think they need to". My iOS device requires it to have anywhere near the functionality of an Android device.

      Of course, repos are repos. Stay with BigBoss and the main ones, and one can have a clean device. Go off trying to pirate, and you will get more than just a cracked .ipa file.

    4. Re:Jail broken devices? by Spy+Handler · · Score: 1

      Correct question is "why do they jailbreak?".

      It said most of the affected devices were in China, infected via a third-party Cydia site. Meaning, they jailbreak so they can install pirated apps for free instead of paying Apple in the official app store.

    5. Re:Jail broken devices? by Anonymous Coward · · Score: 0

      I cant imagine a fleshlight app will give you much telemetry information.
      just up and down 6 inches or so

    6. Re:Jail broken devices? by BasilBrush · · Score: 2

      You're right, most of them don't have a clue. Yet they are still responsible for what they've done.

    7. Re:Jail broken devices? by Lord+Flipper · · Score: 2

      I can give you plenty of reasons for jailbreaking:..

      Thank you, AC. Finally, someone who actually knows something about the issue takes the time to respond.

      As for most of the rest of you...

      I've been jailbreaking my iPhones for years. Why? Simple aesthetic reasons, for the most part, and a few minor enhancements for keyboard layout, select/copy/paste routines, and minor, but very useful tweaks of the Control Center, App Switcher, OneTouch ID, Notifications, etc. Not to mention "hiding" some of the bullshit cruft "apps" that clutter up my situation.

      Apple, as usual, decides how the device will look and feel, and allows almost no "real" customization of the iPhone desktop, navigation, power switching (On/Off/Restart/Springboard relaunch), etc.

      I want... check that, demand... a transparent Dock, unlimited nested folders without that hideous gray background blur, no resource-killing "animations," no auto-redirect to "App Store," and a number of other personalized processes and "look and feel" adjustments that are ONLY available on the iOS to jailbroken hardware. Period.

      If kids, or old farts, for that matter, want to jailbreak so they can avoid paying... what(?) 99 cents or two bucks for some apps, and they get burned using some obscure Chinese software repository, who gives a fuck? I don't.

      I don't like my homescreen being cluttered up with icons. If Jonny Ive thinks that's cool, and Apple agrees to the point of not allowing the simplest, safe mods, well fuck him and them too. Once I buy the phone (outright, no subsidy), that bitch is mine.

      Pardon my french, you know, but it's bad enough we have to wade through all the fucking horseshit that does, indeed, exist in the JB "community," without having to listen to misinformed luddites, and chickenshits posturing about how bad it all is or how these "kids" you all speak of, get what you think they "deserve." If you're getting ready to chime in on moralistic bullshit, about a simple issue of choice, well then, fuck you, too, in advance.

      I feel better. Oh, and by the way, almost all of the serious root-level exploits that Apple has "patched," now, for years, have come courtesy of the JB underground. You're welcome... assholes.

    8. Re:Jail broken devices? by Anonymous Coward · · Score: 0

      Well, then they get what they deserve. Zero sympathy here.

  2. Headline leaves out one very important detail by berj · · Score: 5, Informative

    Headline leaves out the fact that this isn't just any old iOS malware. It affects only *jailbroken* devices.

    That's a pretty important distinction.

    1. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 2, Insightful

      Well, it's the same distinction that people miss on over 99% of android malware. The overwhelming majority of the malware is only viable on rooted devices and is spread via third-party app stores and "free" APK download sites.

    2. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 1

      The headline also leaves out the name of the malware, the country in which most of the victims resided, the names of the security researchers who uncovered this, etc...

      A headline is just a headline. It's not like anyone is trying to hide the fact that these were jailbroken devices -- it's in the second sentence of the Slashdot summary.

    3. Re:Headline leaves out one very important detail by dimeglio · · Score: 5, Insightful

      Pretty much. That's the point of living in a walled garden. You break the wall, who knows what's going to step inside.

      --
      Views expressed do not necessarily reflect those of the author.
    4. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Apple fan boy coming to Apples defense.
      *jailbroken* or no. This should still wake some people up to pay attention to what they are download or installing on any device.

    5. Re:Headline leaves out one very important detail by berj · · Score: 4, Insightful

      Your ridiculous post borders on a tautology.

      It's true... if you bypass security measures then you're no longer secure.

      That's hard for you to understand?

      You expect the lock maker to be liable if you leave your door open?

    6. Re:Headline leaves out one very important detail by gstoddart · · Score: 4, Informative

      Oh, really?

      The theft is executed via variants of the KeyRaider iOS malware, which targets jailbroken iOS devices. Most of the victims are Chinese â" the malware is distributed through third-party Cydia repositories in China

      The headline might leave it out, but the summary sure makes it plain.

      --
      Lost at C:>. Found at C.
    7. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 5, Insightful

      So, if I run OpenBSD, but replace OpenSSH with Bob'sSSH, and there is a security problem with Bob'sSSH, it's OpenBSD's fault?

    8. Re:Headline leaves out one very important detail by hyperar · · Score: 1, Insightful

      Headline leaves out the fact that this isn't just any old iOS malware. It affects only *jailbroken* devices.

      That's a pretty important distinction.

      So important that you couldn't get to the third line were it is clearly stated.

    9. Re:Headline leaves out one very important detail by berj · · Score: 1

      Has nothing to do with coming to anyone's defence. It as to do with people knowing, at a glance, that this doesn't affect them if their device isn't jailbroken.

    10. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      According to crazypoo, yes.

      It's also NOT your fault that you replaced secure SSH with insecure SSH and things didn't just work out for the best.

    11. Re:Headline leaves out one very important detail by Applehu+Akbar · · Score: 5, Funny

      The technical term for jailbroken, insecure versions of iOS is "Android."

    12. Re:Headline leaves out one very important detail by berj · · Score: 1, Insightful

      Yes.. it's important enough that it should be in the headline. It's just about the most salient fact about this exploit.

    13. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 1

      Right. Because other vendors cover all modifications to their products too, eh? You can just go in and do whatever you want and it's all good. Right? Care to name the vendors with this kind of policy in place?

    14. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      It's too bad Apple only cares about the security of sheep.

      It's even worse that there are fools like you who spew what is obvious bullshit because their
      ability to use logic is impaired by their personal agenda of dislike for a company.

    15. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Yes. How dare people insist on exercising their rights as device owners.

    16. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      If only you knew what you're talking about!! Imagine!

      Hugs and kisses,

      Juan Epstein

    17. Re:Headline leaves out one very important detail by gstoddart · · Score: 2, Insightful

      Would this be any different with Android or Microsoft?

      Root your device, and install software from unknown places ... and guess what ... it doesn't matter whose damned platform you're running.

      Hell, you can get malware from using download.com, cnet and other places too.

      News flash ... installing software from unknown sources can be a security risk no matter what your damned platform.

      Apple (or any other vendor) can't do a damned thing to protect your security when you go to great lengths to install software from sources you can't trust.

      --
      Lost at C:>. Found at C.
    18. Re:Headline leaves out one very important detail by gstoddart · · Score: 1

      So, read the entire summary ... and you too, can knowing at a glance, that this doesn't affect you.

      Just like the rest of us knowinged it.

      The knowing is available for anybody willing to read as many as four sentences.

      The glancing and the knowing are free. The lack of glancing at the knowing isn't a limitation of the story or the submission.

      --
      Lost at C:>. Found at C.
    19. Re:Headline leaves out one very important detail by hyperar · · Score: 1

      Yes.. it's important enough that it should be in the headline. It's just about the most salient fact about this exploit.

      Well, i disagree with you, it is not a Jailbroken malware, it is an iOS malware, you can't put everything in the title. Everyone with 20 seconds will know that it affects only Jailbroken devices.

    20. Re: Headline leaves out one very important detail by cyber-vandal · · Score: 1

      You still have to change a setting in order to install shady third party apps on Android.

    21. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Malware can provide its own jailbreak, duh!

    22. Re:Headline leaves out one very important detail by berj · · Score: 0

      Aw.. how cute. You thought I was agreeing with you. That's adorable.

    23. Re: Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Oddly enough, by rooting my much loved s2 and installing cyanogenmod I'm better off. Bit backwards isn't it :-/

    24. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Aw.. how cute. You thought I was agreeing with you. That's adorable.

      What did you think you were saying when you said what I said was "true"? Time to buy a dictionary, kid.

      I know it's a security feature. Problem is, it's for Apple's security first, and yours second. Yet, you're still grateful. Apple thanks you for your cognitive dissonance.

      All you every seem to be capable of contributing is insults and profanity. You are a very angry and bitter person and we all pity you.

    25. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Right. Because other vendors cover all modifications to their products too, eh? You can just go in and do whatever you want and it's all good. Right? Care to name the vendors with this kind of policy in place?

      Well, Slashdotters have had no problem in the past blaming Microsoft for the security issues arising from users installing trojans and actively ignoring (or removing) warnings.

    26. Re:Headline leaves out one very important detail by gstoddart · · Score: 1

      It's not a tweet, it's a story submission ... if headlines read like "Over 225,000 Apple Accounts Compromised Via iOS Malware but only if you jailbroke your phone and installed from a separate source but then that's your damned problem because you did it to yourself but it's Monday so who cares anyway because I need more coffee" it would be annoying and would get truncated.

      Honestly, this is you complaining about your lack of attention to read TFS.

      The story submission is fine. It's demanding you not have to read a couple of sentences which is the problem.

      --
      Lost at C:>. Found at C.
    27. Re:Headline leaves out one very important detail by Impy+the+Impiuos+Imp · · Score: 1

      Yes yes yes. This is all good and nice, but will there be more pctures?

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    28. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Well, it's the same distinction that people miss on over 99% of android malware. The overwhelming majority of the malware is only viable on rooted devices and is spread via third-party app stores and "free" APK download sites.

      You don't need a rooted Android device to use third-party app stores and be vulnerable to malware. And in many markets a significant share of Android phones are sold with third-party app stores instead of Google Play to avoid paying the license fee to Google.

    29. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      LOL at you not seeing that Apple's security IS your security on an Apple device. So if you break one, you break both.

      But rant on crazypoo.

    30. Re: Headline leaves out one very important detail by fluffernutter · · Score: 2

      When I purchased my Android phone I wanted a true Open VPN client and native access to the filesystem. Fortunately I could do that without rooting it. On the contrary I would have had to root an iPhone to get those features.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    31. Re: Headline leaves out one very important detail by fluffernutter · · Score: 0

      When I purchased my Android phone I wanted a true Open VPN client and native access to the filesystem. Fortunately I could do that without rooting it. On the contrary I would have had to root an iPhone to get those features and would have exposed myself.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    32. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Headline leaves out the fact that this isn't just any old iOS malware. It affects only *jailbroken* devices.

      That's a pretty important distinction.

      Jailbreaking a device is in effect the same as installing a rootkit, so already at the first step here iOS has been severely compromised in a way it shouldn't have allowed. Yes, the user did install the rootkit (at least now, earlier there were drive-by iOS jailbreaks/rootkits) -- same way rootkits for Windows usually gets installed -- but for the OS to allow to be compromised this way is a security failing.

    33. Re:Headline leaves out one very important detail by berj · · Score: 1

      Over 225,000 Apple Accounts Compromised Via jailbroken iOS Malware

      One extra word.. easy peasy.

      Or maybe:

      Malware on jailbroken iOS devices. Over 225,000 Apple accounts compromised.

      Two extra words.. still easy peasy.

      Other slashdot headlines are just as long so it can't possibly be about "too long for a submission headline".

      It's really not very hard to be concise and accurate in a headline.. if one is really interested.

    34. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Would this be any different with Android or Microsoft?

      I misread this at first as "Android or Minecraft", and was marveling that Minecraft had finally become so complex that it was an operating system rivaling iOS.

    35. Re:Headline leaves out one very important detail by infolation · · Score: 1

      You expect the lock maker to be liable if you leave your door open?

      I expect to be able to remove the housebuilder's lock (so the housebuilder can't wander into my house whenever they want) and put my own lock on the front door.

    36. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Two words: Lazy moron.

      Two extra words: Whiny idiot.

    37. Re:Headline leaves out one very important detail by ColdWetDog · · Score: 1

      Ok, you're hired. You can take Timothy's place.

      Are you happy now?

      --
      Faster! Faster! Faster would be better!
    38. Re: Headline leaves out one very important detail by flopsquad · · Score: 1

      When I purchased my Android phone I wanted a true Open VPN client and native access to the filesystem. Fortunately I could do that without rooting it. On the contrary I would have had to root an iPhone to get those features.

      This, I discovered the hard way, is not a universal quality of Android devices. Depending on the manufacturer and carrier, some are quite a bit less open than even iDevices.

      --
      Nothing posted to /. has ever been legal advice, including this.
    39. Re: Headline leaves out one very important detail by Noah+Haders · · Score: 1

      +1, that's not a bad point.

    40. Re:Headline leaves out one very important detail by swillden · · Score: 5, Interesting

      I expect to be able to go in and out of my door. That's what doors are for. Apple doesn't even give you a door. You have to break your way through the wall. Then there's a hole there. That's why Apple products are only sufficient for sheep. They don't break down walls, they just wander through holes.

      It's worth pointing out that if you root your Android device you're doing the same thing, breaking through a wall. That's fine if it's what you want to do, but you are giving something up in terms of security.

      As a member of the Android security team, I'm involved in lots of discussions about lots of different threat models and attack vectors, and while we do think about trying to maintain security on rooted devices, I'd say that 90% of the time we end up deciding that we just can't, so "device is running an official image[*] and is not rooted" becomes a foundational assumption of the analysis.

      This isn't because rooting is inherently bad, or because we're trying to control user's devices, but because it's impossible to reason about security in a vacuum. You have to know what you can depend on. For example, we might argue that apps can't break out of their sandbox in a particular way because the information they need to do it is managed by a particular system daemon which validates access in a particular way... but in a rooted device that daemon may be modified, or simply bypassed. We just can't know that stuff is still working the way it's intended to. Some members of the modding community do an outstanding job of adding flexibility without breaking the security model, but many others don't.

      Ideally, devices should provide enough native flexibility to allow users to achieve what they want while staying entirely within the normal mode of operation. In the case of Android that means staying within Google's "walled garden": install apps only from the play store, keep Verify Apps enabled (and follow its recommendations), don't root, definitely don't disable SELinux, etc. Where that ideal fails, and users want to do stuff that can't be done in the garden, they should have the option of stepping out of it, and they should be able to do so in a progressive way, not all-or-none... but each step they take increases the probability that they'll change something that violates a security assumption and thereby increases their risk of compromise.

      I suspect that Apple security engineers even more strongly assume that devices are not jailbroken. That's just a guess, but it's consistent with the general philosophy of iOS and, if correct, it means that jailbreakers have even less expectation of security. iOS users also live in a software monoculture, which exacerbates the risk. (Android users get security benefits from ecosystem diversity, though there are obvious costs to that diversity as well. Including the update problem.)

      [*] Note that given the state of updates in the Android ecosystem, we often don't assume that the device is running an up to date system image. From our perspective that's often easier to work with than a rooted device because at least we know how it behaves and can look at trying to mitigate risks at other layers. We're also working on the update situation, but that's hard given the nature of the ecosystem.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    41. Re: Headline leaves out one very important detail by flopsquad · · Score: 1

      I would have had to root an iPhone to get those features and would have exposed myself.

      AFAIK, they recommend flashing the firmware, not a bus full of nuns.

      --
      Nothing posted to /. has ever been legal advice, including this.
    42. Re:Headline leaves out one very important detail by jerk · · Score: 1

      And it seems that 225,000 people did the first part, but just left the lock off their door and didn't bother installing a new lock.

    43. Re:Headline leaves out one very important detail by macs4all · · Score: 0

      So, you're only safe with Apple so long as you do exactly what they tell you, and no more. As long as you are a shiny cog, you can have the shiny shiny. Step off the reservation, and you get shot in the face.

      That's an entirely unnecessary spin on the real situation, which is: Once you have modified the firmware in a device, the original manufacturer has no way of controlling nor safeguarding the devices behavior.

      Or in other words, are you saying that Samsung, HTC, LG, etc. should be responsible if bad stuff happens when you install a "Custom ROM"?

      The situation is ENTIRELY analogous.

    44. Re:Headline leaves out one very important detail by macs4all · · Score: 2

      I expect to be able to go in and out of my door. That's what doors are for. Apple doesn't even give you a door. You have to break your way through the wall. Then there's a hole there. That's why Apple products are only sufficient for sheep. They don't break down walls, they just wander through holes.

      Oh, PUH-LEASE!!!

    45. Re:Headline leaves out one very important detail by macs4all · · Score: 1

      I know it's a security feature. Problem is, it's for Apple's security first, and yours second.

      Prove it.

    46. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      The wall shouldn't be so easy to break. That's the takeaway. If you can root it, so can someone else. If it's rooted, encryption or any other security measure is meaningless.

    47. Re:Headline leaves out one very important detail by narcc · · Score: 1

      You're really upset about this. I can only guess as to why. Relax, Apple doesn't need you to help them. They'll be fine.

      Why not direct some of that energy at trying to figure out why so many users want to jailbreak their phones? Why aren't they satisfied with the 'experience' Apple provided? What could they do differently so as to make jailbreaking less attractive?

    48. Re: Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Yes, but only because you purchased a device that caters to the people who don't want to install apps for their features and expected things not to be done for you so you could do so yourself.

      Don't buy a Samsung device if you don't want everything done for you. Try an HTC or LG... a nexus sounds more like something you'd want.

    49. Re: Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Really? Which ones?

      Asides from a few months of lockdown which created a backlash and AT&T relented, which devices are less open?

      Every single carrier and every single Android phone I've ever seen has been able to sideload, access the filesystem, change or disable system apps, etc.

    50. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Rooting and Jailbreaking simply allows administrator access to the device (hence privilege escalation vulnerabilities).

      So what you're saying is that your laptop / desktop shouldn't have administrator access because an administrator account is a rootkit and could potentially install malware.

    51. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 1

      It really isn't, once they update the software (which they do often) the hole is closed. There have been entire years between jailbreak releases, then at times they come pretty quick. This is the nature of software. Everything is hackable, IOS devices less so than android devices. The difference between the 2 is you can more easily infect an unmodified android device than an IOS device. But You're an experts you already know all of this.

    52. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Rooting and Jailbreaking simply allows administrator access to the device (hence privilege escalation vulnerabilities).

      So what you're saying is that your laptop / desktop shouldn't have administrator access because an administrator account is a rootkit and could potentially install malware.

      Jailbreaking on iOS involves replacing system files, including boot loader, with modified versions from the jailbreaking kit. Are you seriously claiming that doing this is the same security wise as just having administrator login to your OS? You would not hesitate to replace core OS files with random hacked versions on your desktop/server OS?

    53. Re: Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Why do so many people install Cyn on their androids? Or OpenWRT on routers? Because they want features not offered. Same shit different toilet my friend.

    54. Re:Headline leaves out one very important detail by gumbright · · Score: 1

      You forgot the the "Ron Paul 2012!".

    55. Re:Headline leaves out one very important detail by swillden · · Score: 2

      The technical term for jailbroken, insecure versions of iOS is "Android."

      That's a common belief. In practice, I don't think it's true. In particular, although the Android world sees lots of announcements of vulnerabilities that affect X hundred million devices, the actual exploitation doesn't seem to follow. One reason is that many of the vulnerabilities aren't actually as widespread or are harder to exploit in practice than the researchers describe. Another is that the diversity of the Android ecosystem often means that an exploit has to be customized for each different manufacturer and model, making broad exploitation harder. A third is that Google is often able to successfully mitigate vulnerabilities with the Play store, Verify Apps and updates to the Play services app. There are other reasons as well.

      Whatever the reasons, it's interesting to note that we don't see reports of large numbers of Google accounts being compromised via Android vulnerabilities. I'm not claiming that's impossible, and it wouldn't shock me if it happened tomorrow, but the fact that we don't indicates to me that there is actually more right with the Android security situation than is commonly believed. The low real-world malware numbers disclosed in Google's Android security "State of the Union" report further buttress that view.

      (Disclaimer: I'm a member of Google's Android security team. I'm speaking only for myself, not for Google.)

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    56. Re:Headline leaves out one very important detail by macs4all · · Score: 1

      You're really upset about this. I can only guess as to why. Relax, Apple doesn't need you to help them. They'll be fine.

      Why not direct some of that energy at trying to figure out why so many users want to jailbreak their phones? Why aren't they satisfied with the 'experience' Apple provided? What could they do differently so as to make jailbreaking less attractive?

      I'm "really upset" at the idiot (drinkypoo) that keeps posting stuff like it is somehow Apple's responsibility, or even its power, to control the behavior of modified devices.

      You will notice that it is primarily Chinese users; who have a culture of wanting to rip off basically every bit of software they run on any Device. So, rather than pay the princely sum of 99 cents (equiv.) to get some stupid little App, they would rather go to some grey-market site and download a malware-infested knockoff.

      Then, they have the temerity to complain when that App steals their info, breaks their device, etc.

    57. Re: Headline leaves out one very important detail by macs4all · · Score: 1

      Why do so many people install Cyn on their androids? Or OpenWRT on routers? Because they want features not offered. Same shit different toilet my friend.

      That too.

    58. Re:Headline leaves out one very important detail by macs4all · · Score: 1

      Headline leaves out the fact that this isn't just any old iOS malware. It affects only *jailbroken* devices.

      That's a pretty important distinction.

      Jailbreaking a device is in effect the same as installing a rootkit, so already at the first step here iOS has been severely compromised in a way it shouldn't have allowed. Yes, the user did install the rootkit (at least now, earlier there were drive-by iOS jailbreaks/rootkits) -- same way rootkits for Windows usually gets installed -- but for the OS to allow to be compromised this way is a security failing.

      Boy, talk about damned if you do, and damned if you don't!

      So, if Apple battens down iOS such that NO ONE can jailbreak, then the slashdot crowd whines that Apple is Teh Evilz, and if Apple looks the other way when someone jailbreaks, then they are lax on their security.

      Which way do you guys want it, anyway???

    59. Re:Headline leaves out one very important detail by narcc · · Score: 1

      Okay. Some perspective: It's a forum post. There's no reason to get stressed-out. Who the hell cares what he thinks?

      You will notice that it is primarily Chinese users; who have a culture of wanting to rip off basically every bit of software they run on any Device.

      Bigotry aside for the moment, can you think of no other reason someone would want to jailbreak their device? The first time someone asked me to jailbreak an iOS device, it was because they wanted to use it as a wifi hotspot. The second time was for a guy who wanted webgl to work on his iPad.

      There's a guy here who wanted to jailbreak his device to make it easier for him to transfer files to and from his device. Granted, Apple has improved there a bit, they've got a long way to go if they want to give users the same functionality that they enjoy from practically every other mobile OS out there.

      A lot of people buy Apple stuff because it's supposed to be "the best", yet it fails to meet the needs of many users. Jailbreaking solves many common problems users face, so it's an attractive option.

      I asked you to consider the question: "What can Apple to do make jailbreaking less attractive?" The answer should be obvious by now, so why hasn't Apple reacted? In that way, Apple encourages jailbreaking. Some blame is justified.

    60. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Headline leaves out the fact that this isn't just any old iOS malware. It affects only *jailbroken* devices.

      That's a pretty important distinction.

      Jailbreaking a device is in effect the same as installing a rootkit, so already at the first step here iOS has been severely compromised in a way it shouldn't have allowed. Yes, the user did install the rootkit (at least now, earlier there were drive-by iOS jailbreaks/rootkits) -- same way rootkits for Windows usually gets installed -- but for the OS to allow to be compromised this way is a security failing.

      Boy, talk about damned if you do, and damned if you don't!

      So, if Apple battens down iOS such that NO ONE can jailbreak, then the slashdot crowd whines that Apple is Teh Evilz, and if Apple looks the other way when someone jailbreaks, then they are lax on their security.

      Which way do you guys want it, anyway???

      And by "you guys" you are assuming that everyone you discuss with on Slashdot is of the same opinion in all questions? My opinion is that it would be insane for Apple to "look the other way" regarding jailbreaks, and I don't believe they do, at all, because what enables a jailbreak is a huge security vulnerability in the OS that could be used for more nefarious purposes.

    61. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      It's more along the lines of "you took a sledgehammer to the exterior wall, and then got surprised when all kinds of crap could crawl in."

    62. Re:Headline leaves out one very important detail by MachineShedFred · · Score: 1

      You do know there's a massive gulf between "I can root it because I have physical access to the device and all the passwords" and "omg my device got rooted over the air by unknown parties!" ... right?

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    63. Re: Headline leaves out one very important detail by MachineShedFred · · Score: 1

      You are also a member of a small minority based on your requirements. Nothing wrong with that at all, and clearly an iPhone doesn't satisfy those requirements. I'm glad you found a device that did.

      I don't understand why Slashdot can't figure out that the type of people that frequent this site have very different requirements than other people, and that all devices must not meet the superset of requirements found here and elsewhere.

      It's a damn tool, like a socket set. If the socket set doesn't have the specialty socket you need for some relatively low-frequency job but another does, get the other one. Only when we start talking about electronics do we start to see this zealotry and irrational nonsense.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    64. Re: Headline leaves out one very important detail by MachineShedFred · · Score: 1

      Access to the filesystem, yes. OpenVPN - no.

      I use this on my iPad quite frequently to access systems in our AWS VPC.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    65. Re:Headline leaves out one very important detail by gnasher719 · · Score: 1

      I asked you to consider the question: "What can Apple to do make jailbreaking less attractive?" The answer should be obvious by now, so why hasn't Apple reacted? In that way, Apple encourages jailbreaking. Some blame is justified.

      Ask yourself: What's in it for Apple? If you buy an iPhone with the intent of jailbreaking, Apple has made a sale. Convincing people to not jailbreak doesn't give much benefit to Apple. And frankly, your claim that Apple encourages jailbreaking is ridiculous: They do their hardest to prevent jailbreaking from happening.

      But what Apple is really interested in is any improvement that makes more people buy an iPhone. And things that people jailbreak for are usually things that affect suitability of the iPhone for everyone, and would eventually reduce sales.

    66. Re:Headline leaves out one very important detail by narcc · · Score: 1

      And things that people jailbreak for are usually things that affect suitability of the iPhone for everyone, and would eventually reduce sales.

      People end up jailbreaking because they expect certain features that, after purchase, they discover aren't available. Further, things like "the ability to copy a file to and from the phone" aren't going to hurt the "experience" as users who don't need that feature aren't encumbered by it in any way.

      What does hurt users, of course, are the missing basic features. Apples stubborn refusal to address these issues is what drives users to jailbreak their phones. That's what I mean by "encourages".

      They do their hardest to prevent jailbreaking from happening.

      The best way for Apple to prevent jailbreaking is to adequately meet the needs of their users. Making it difficult to jailbreak while still leaving their users wanting doesn't seem to be in Apple's best interest. It'll catch up to them eventually. I already know a few former Apple users that left the platform for basic features available everywhere else.

    67. Re:Headline leaves out one very important detail by macs4all · · Score: 1

      People end up jailbreaking because they expect certain features that, after purchase, they discover aren't available. Further, things like "the ability to copy a file to and from the phone" aren't going to hurt the "experience" as users who don't need that feature aren't encumbered by it in any way.

      There are about two dozen (or more) File-Transfer Apps for iOS. Most just start up a little web server, and tell you where to point your browser to copy files to/from. Next!

      What does hurt users, of course, are the missing basic features.

      What "basic features" is iOS missing? Seriously, I really can't think of any "basic" features that iOS is missing, and although you keep trumpeting that phrase over and over, you have yet to come up with a list, and your "file copy" example is addressed in many ways. Fuck, GoodReader alone can talk to ftp, SFTP, afp, WebDAV, SMB, DropBox, SkyDrive, Google Drive, IMAP, POP3, SugarSync (whatever THAT is), box.net, and probably others by now, since I haven't updated the App in awhile. So, I'm not at ALL sure what you are talking about. And that's just ONE "File Transfer" App.

    68. Re:Headline leaves out one very important detail by jazzis · · Score: 1

      It really isn't, once they update the software (which they do often) the hole is closed. There have been entire years between jailbreak releases, then at times they come pretty quick. This is the nature of software. Everything is hackable, IOS devices less so than android devices. The difference between the 2 is you can more easily infect an unmodified android device than an IOS device. But You're an experts you already know all of this.

      Mod up as informative!

    69. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      Too bad your head's so far up your asshole.

    70. Re: Headline leaves out one very important detail by fluffernutter · · Score: 1

      All of those solutions lock the transferred file in the app itself, so you can only manipulate the file in the way that the app allows. Do any of them allow you to execute a windows exe off the device? I find it handy to have portable apps on my phone. Plug in a USB cable and they're all available.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    71. Re: Headline leaves out one very important detail by fluffernutter · · Score: 1

      Perhaps an iPhone is like a socket set, but one that only works on apple built products. I prefer a standard hex socket set that works on everything.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    72. Re:Headline leaves out one very important detail by exomondo · · Score: 1

      You do know there's a massive gulf between "I can root it because I have physical access to the device and all the passwords" and "omg my device got rooted over the air by unknown parties!" ... right?

      Forgotten JailbreakMe? Where your device could be jailbroken just by visiting a website?

    73. Re:Headline leaves out one very important detail by exomondo · · Score: 1

      The question that seems to have been missed is whether the jailbreak is just a mechanism to get the malware on the device or not. If this slipped through the curators of Apple's app store would devices be vulnerable to the exploit? Also we have seen web-based jailbreaks before that you could do just by visiting a website, doing that and installing malware in the process appears pretty viable.

      Given the history, sweeping this under the rug and saying it doesn't matter because it only affects jailbroken devices is a bit short-sighted.

    74. Re: Headline leaves out one very important detail by macs4all · · Score: 1

      All of those solutions lock the transferred file in the app itself, so you can only manipulate the file in the way that the app allows. Do any of them allow you to execute a windows exe off the device? I find it handy to have portable apps on my phone. Plug in a USB cable and they're all available.

      No, once you have transferred the file, you can open the file in any App that understands the file type. iOS has a similar file type association scheme to any other OS. So, unless you get off doing stuff like manipulating JPEGs in a text editor on your phone, I'm not sure what you are getting at. Use any of the several VNC/RDP clients (I routinely use "Jump" to access my work's Windows servers from home over our VPN) and run your Windows environment. Which I would imagine is exactly how you would do it on Android.

      Or you can use one of the remote keyboard/mouse Apps to run a computer within eyeshot. Some work with Bluetooth, most over WiFi. There might even be one or two that work over USB, I honestly don't know.

    75. Re: Headline leaves out one very important detail by farble1670 · · Score: 1

      This, I discovered the hard way, is not a universal quality of Android devices. Depending on the manufacturer and carrier, some are quite a bit less open than even iDevices.

      that's the kind of comment that is worthless without some details. the basic security features features, for better or worse, remain the same across vendors. obviously, since the underlying OS is the same.

    76. Re:Headline leaves out one very important detail by gstoddart · · Score: 1

      Blah blah blah ... you're so heartbroken that someone didn't include in the headline what was included in TFS. You didn't even need to read TFA.

      Whining, bitching, helpless and pointless. Woe is you.

      Get over your damned self, subscribe to a security twitter feed, and stop bitching about something so damned pointless as to make you sound like a spoiled child with ADD.

      The swooning must be fucking unbearable. I mean you are absolutely stricken with the vapors, it must be hard on you.

      Now go get yourself a clean pair of panties, and shut up already. The information you wanted was there. That you feel the need to be so laboriously and meticulously pandered to tells me that you're bitching for the sake of bitching.

      Boo hoo, your penis is small and you demand information be applied to you in precisely the way you envisioned or the world is unjust.

      Or, you know, you read a couple of fucking sentences and stop being a whiny little idiot about it. From time to time in the world, you will be called upon to RTFA, and if you can't do that, RTFS.

      Wah wah wah .. put it all in the headline lest you get distracted and don't know what it means.

      How the hell did you get a 7 digit ID again?

      --
      Lost at C:>. Found at C.
    77. Re:Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      "free" APK download

      I've heard you can get malware that way too.

    78. Re:Headline leaves out one very important detail by tsa · · Score: 1

      Why? Everybody here on /. knows about this.

      --

      -- Cheers!

    79. Re:Headline leaves out one very important detail by tsa · · Score: 1

      People who say this most likely have never even seen Apple products up close.

      --

      -- Cheers!

    80. Re: Headline leaves out one very important detail by fluffernutter · · Score: 1

      It all just seems like shoving a square peg in a round hole. Too much messing around making apps do what a filesystem is supposed to do.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    81. Re:Headline leaves out one very important detail by macs4all · · Score: 1

      People who say this most likely have never even seen Apple products up close.

      You're right about that.

      I think a lot of it demonstrates the sheeple-like mentality of many in the F/OSS "community". Talk about a "religion"...

    82. Re: Headline leaves out one very important detail by macs4all · · Score: 1

      It all just seems like shoving a square peg in a round hole. Too much messing around making apps do what a filesystem is supposed to do.

      No, you're just moving the goalposts. If I showed you the Finder ported to iOS, you'd bitch that the Finder is just another App (which, BTW, it is, just like Windows Explorer), so it didn't count. Grow up.

      Besides, I don't know of a filesystem that has intrinsic capabilities for file-transfer from/to other systems. Use the right terms or GTFO. Operating Systems might have those capabilities, or more often, they accomplish the "magic" (subterfuge) of those capabilities with an "always running" App like Finder or Explorer; but not filesystems. Since there is pretty-much never a network of iOS Devices. just like there is pretty-much never a network of Android Devices, where having constant access to other assets on the network is a necessity for most, if not all, Users, it doesn't make sense to build a whole networking stack into a mobile OS.

      And besides, for those who find that working between their mobile iOS device and their OS X or Windows computers is something they find themselves doing often, Apple offers iCloud Storage and even Air Drop peer-to-peer file-transfer to provide essentially the same access. And with the "Convergence" feature built into recent versions of OS X and iOS, the file-transfer is automagic. Start an email on your computer, finish it on your phone. Start a Pages Document on your Tablet, work on it on your phone, finish it on your laptop. All seamlessly. How's that? No file-browser needed.

      There's really no difference in the iOS Filesystem, per se; it is still a classic hierarchical file system with nested folders and files. The only difference is that instead of having an overarching file-browser, like OS X's Finder or Windows' Explorer, each App is responsible for managing its own files transparently to the User.

      It's just taking the concept of Sandboxing to the next level. And the ONLY difference between something like GoodReader and Finder/Explorer is that one App runs all the time and provides a "Desktop" metaphor, and the other launches on a single tap. So, for all your whining, there really is nothing to bitch about here; so move along.

    83. Re: Headline leaves out one very important detail by fluffernutter · · Score: 1

      Listen, obviously you have been able to make it work for yourself and you are happy fiddling with the various combinations of using apps and cloud services to accomplish your goal. I just don't want to do that, because that wheel has already been invented a long time ago. I still don't understand how you are approaching the simplicity of plugging in a usb cable and copying a file. All the apps force you to use some sort of protocol for file access which have their own limitations. I just don't want to fight with limitations.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    84. Re: Headline leaves out one very important detail by macs4all · · Score: 1

      Listen, obviously you have been able to make it work for yourself and you are happy fiddling with the various combinations of using apps and cloud services to accomplish your goal. I just don't want to do that, because that wheel has already been invented a long time ago. I still don't understand how you are approaching the simplicity of plugging in a usb cable and copying a file. All the apps force you to use some sort of protocol for file access which have their own limitations. I just don't want to fight with limitations.

      You realize, of course, that every OS has limitations. You've just been dealing with a certain set of limitations long enough that you don't see them as such. But they are there, I assure you.

      And quite frankly, I have only used something like GoodReader very occasionally, because a lot of Apps (e.g. "DAW") have their own web-based http file transfer system built in. And when they don't, I usually just use the tried and true method (in common use LONG before there were smartphones!) of emailing myself the file in question. Every App on iOS supports a "Share" menu, supporting several methods of getting a file out of the mobile device. And I believe that certain Apps, e.g. "Pages", have the equivalent for GETTING files, too.

      And all of this can happen over ad hoc peer-to-peer WiFi, even if I'm nowhere near a WiFi network. No need to dig up a stupid USB cable, nor to bring the mobile device within the cable's typically 3 foot reach. Heck, I can even run MIDI sessions over WiFi. Try THAT on Android.

    85. Re: Headline leaves out one very important detail by fluffernutter · · Score: 1

      Web based transfer only works for transferring files, not random access, not executing; as is the case with most protocols. But I have already covered this and now you are repeating that part. I also don't consider this 'just a limitation' since it is something that the vendor is consciously not fixing. This isn't just some bug. This is something

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    86. Re: Headline leaves out one very important detail by Anonymous Coward · · Score: 0

      You don't understand what he was saying, or you're being intentionally thick.

      The extreme vast majority of smartphone users don't need, nor want, file system access. They care about email, messaging, web browsing, and rich app stores. Think of this as the base set of requirements.

      You have additional requirements that make something that only meets the base requirements not adequate for your needs. There's nothing wrong with that. There are other devices out there that meet your requirements as well, and by all means you should purchase one. But that doesn't mean that other devices which may be perfect for you, are perfect for everyone. The iPhone is a fine device for >95% of people's needs, and saying otherwise is ridiculous. For that additional 5%, there are other devices which meet their needs, and that's how a market is supposed to work.

      There is no reason to trash talk one device because you are an edge case that isn't in the target market for that device. Just get something that does work for you and shut the hell up already.

    87. Re:Headline leaves out one very important detail by Uberbah · · Score: 1

      No dice. Burying the lede, Google it.

    88. Re:Headline leaves out one very important detail by Uberbah · · Score: 1

      Forgotten JailbreakMe?

      Forgotten that was five major software versions ago? Windows 10 is insecure, because XP had so many holes. Or something.

    89. Re:Headline leaves out one very important detail by exomondo · · Score: 1

      Forgotten JailbreakMe?

      Forgotten that was five major software versions ago?

      Oh well it's just not possible for it to happen again then I suppose.

      Windows 10 is insecure, because XP had so many holes. Or something.

      No, it's not causal. But it would braindead stupid to assume that Windows 10 isn't going to suffer drive-by malware just because Windows XP already did 10 years or so ago.

    90. Re:Headline leaves out one very important detail by Uberbah · · Score: 1

      It's also possible for Apple to go back to single-button mice and cooperative multi-tasking. Lotsa people here still bitch about those as if they were current issues, too.

      But it would braindead stupid to assume that Windows 10 isn't going to suffer drive-by malware just because Windows XP already did 10 years or so ago.

      That's playing the Jump to Conclusions Game again. Especially before SP2 was rolled into install disks, it was possible to do a fresh install of XP and find your machine compromised before you could even download security updates. That 10 will have it's own patches doesn't mean it's going to be a flaming bag of crap like XP was.

      That iOS 9 is going to have it's own patches doesn't mean you can have your phone rooted just by visiting a web site.

    91. Re:Headline leaves out one very important detail by exomondo · · Score: 1

      It's also possible for Apple to go back to single-button mice and cooperative multi-tasking. Lotsa people here still bitch about those as if they were current issues, too.

      WTF are you on about? I was being sarcastic, clearly the fact that it we have seen vulnerabilities in Safari in the past is no guarantee that we will not see vulnerabilities in the future.

      That's playing the Jump to Conclusions Game again.

      No I didn't jump to any conclusion at all, you obviously misread. All I said is that we have seen such vulnerabilities before and dismissing it on the basis that we have seen it before is just mindblowingly stupid.

      That iOS 9 is going to have it's own patches doesn't mean you can have your phone rooted just by visiting a web site.

      It also doesn't mean that can't happen, we've seen it before.

  3. Not True by Anonymous Coward · · Score: 0

    Apples are not affected by any virus/malware/trojans.

  4. Re:Rotten apple ?!? by Anonymous Coward · · Score: 5, Insightful

    Affect only jail-broken devices. How is the even relevant news?

  5. paper cash-only society by AndyKron · · Score: 1

    I'm pretty sure technology will drive us toward a paper cash-only society.

    1. Re:paper cash-only society by linuxguy · · Score: 1

      > I'm pretty sure technology will drive us toward a paper cash-only society.

      This story isn't about someone's bank account being depleted because of software security issues.

      For every story you show me where someone lost cash electronically because of software security issue, I will show you 10 where someone lost paper cash. Either it was stolen from their house, work or they were robbed on the street.

      Is paper cash more secure than electronic cash and transactions? The data certainly does not show it.

    2. Re:paper cash-only society by AndyKron · · Score: 1

      I think paper cash is more secure than electronic cash. What data do you have?

  6. Re:Rotten apple ?!? by Anonymous Coward · · Score: 5, Insightful

    I'd argue that it's relevant news but I would also say that people who are employing hacks on their devices should realize that the original vendor can't be held accountable for shoddy modifications from a bunch of script kiddies.

  7. Jailbroken is broken still with default by Anonymous Coward · · Score: 0

    Gee you jailbreak the OS, install non verifiable apps and you get hacked? Go figure.

  8. Re:Perhaps if Apple devices weren't so locked down by Anonymous Coward · · Score: 0

    Perhaps if iOS wasn't "locked down", a lot more people could have gotten this malware. And then Apple-bashers would be attacking Apple for NOT putting up some sort of protective wall on iOS devices.

  9. Re:More Micro$oft FUD by Anonymous Coward · · Score: 0

    It's not a mac, it's a Iphone, retard.

  10. Re:Perhaps if Apple devices weren't so locked down by Anonymous Coward · · Score: 0

    Less people would feel the need to jailbreak them

    The correct English is "FEWER" people. Perhaps you should spend less time
    commenting and more time studying English, so you make fewer comments
    which reveal you to be uneducuated.

  11. The topic's not english related topics by Anonymous Coward · · Score: 0

    See subject: If you can't determine the meaning of words or phrases within the context of the framework in which they're used, it's you with the problem. I suggest "hooked on phonics" remedial reading lessons for you.

    APK

    P.S.=> Idiots like you make the world a worse place online... apk

    1. Re:The topic's not english related topics by Anonymous Coward · · Score: 0

      We've all figured out that you're really Zontar and you're just trying to fuck with everybody. Give it up, "MINDLESS". This is getting old.

  12. Well... by Anonymous Coward · · Score: 1

    Tell that to the average Apple fan who when you tell them that an iPhone lacks the ability to do X, Y, Z, they respond "just jailbrake it man".

    1. Re:Well... by Anonymous Coward · · Score: 0

      I doubt the average Apple fan would ever say "just jailbreak it man".

    2. Re:Well... by Anonymous Coward · · Score: 0

      True. The average Apple fan will hear you say that the iPhone lacks the ability to do X, Y, Z, and respond with one of two things:
      1) A statement that they've never needed to do X, Y, Z; or
      2) A list of the apps they *currently* use, right out of the App Store, to do X, Y, Z.

      Which of the two responses you get will be largely dependent on the particular Apple fan, and the specific task(s) represented by 'X, Y, Z'.

    3. Re:Well... by Uberbah · · Score: 1

      Tell that to the average Apple fan who when you tell them that an iPhone lacks the ability to do X, Y, Z, they respond "just jailbrake it man".

      Does the average Fandroid have more or less self-awareness on this topic, after rooting his Android device to disable carrier locks and remove bloatware?

  13. Never understand jailbreaking an Apple iOS device by Aqualung812 · · Score: 4, Insightful

    I'm an Apple iOS user, and a former Palm/Windows CE/Blackberry/Windows Phone/Android user.

    I simply don't understand jailbreaking an iPhone. The whole point of me having an iPhone is to take advantage of the walled garden.

    If I want something with better hardware on a lower price that I can customize any way I want, I'd have an Android again.

    Since having a reliable and secure phone is more important to me than features, I have have decided to get an iPhone and not jailbreak it.

    Can those that do jailbreak explain why they don't go to Android?

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  14. Re:Here, mod this down too by mwvdlee · · Score: 1

    There are alternatives besides "IOS" and "jailbroken IOS", you know.

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  15. Re:Never understand jailbreaking an Apple iOS devi by brunes69 · · Score: 2

    If you had ever used a jailbroken iPhone and realized the capabilities it unlocks, you would change your mind.

    The idea that a jailbroken iPhone is more or less secure than an unjailbroken one is a fallacy. The people got this malware by downloading and installing pirated iOS applications that were infected with it - something that is ENABLED by jailbreaking. Just because a phone is jailbroken does not put it into some unsecure state, you have to do that yourself.

  16. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 0

    Because most Android hardware and software doesn't match iOS quality. I'd only switch for a stock Android device but if I were to switch now, I'd be giving up all my paid apps plus iOS app quality. I JB for f.lux and that's about it. Plus I have yet to see an android device last 3+ years with continued OS support and also not slow to a crawling POS.

  17. Re:Here, mod this down too by drinkypoo · · Score: 1

    There are alternatives besides "IOS" and "jailbroken IOS", you know.

    Apple has already brought some of the magic of the iOS ecosystem to OSX, and will only bring more. Also, how the fuck did Apple make OSX so slow? It's agony. NeXTStep was about as responsive on an '030 as OSX is on modern processors.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  18. What's the leading reason for jailbreaking at all? by swb · · Score: 1

    There's lots of possible reasons, like sideloading or pirating apps, exposing features or customization hidden in the stock settings or apps, curiosity/technical/tinkering, or ideological reaons/free software advocacy.

    Which is most common? I figure pirating might be kind of popular, but a lot of useful software is pretty inexpensive to begin with and how many people want a hacked candy crush that has free powerups?

    I could see where customization/hidden features could be a big reason. Apple are kind of design fascists (I say that having owned all iPhones since 3G and 3 iPads) and there are some irritating hardware and software limitations imposed that rankle.

    Like why can't you even pair a bluetooth mouse? Apple wouldn't even have to support it in the home screen or any of their applications or even UI as a touch source, just allow third party apps to utilize it. I could seriously see being able to do meaningful work via RDP with a HDMI display, BT keyboard and moue using just my iPhone as a computer and it would nearly replace a lot of my laptop use with my iPad.

    It's hard to see "because it was there" tinkerers being that huge of a group and I'd bet a significant number just kind of go oh well and go back to stock out of sheer convenience.

    I bet the philosophical/ideologicals don't add to too many, why would they buy an iPhone to begin with when they can get much further down the free road with Andoid.

  19. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 1

    In general, the iPhone hardware is nicer than the Android devices. Not every Android device is able to run the latest version of Android. And maybe personal preference for iOS over Android.

    A friend who jailbroke his iPad did so because there was an arcade game emulator. I don't think the emulator would ever be allowed on the App Store since it's a program that runs other programs.

    I'm certain there are such apps for iPhone that some people find compelling enough that they run untrusted, escalation-of-privilege code in the form of jailbreaks.

  20. Re:Never understand jailbreaking an Apple iOS devi by joh · · Score: 4, Informative

    Of course jailbreaking iOS puts it into some insecure state. Quite literally. Jailbreaking circumvents code signing for all code that runs on the device which means that every bit of code that makes its way onto the phone will happily run now. Also using the repositories means that you will install undocumented binary code from unknown people. Since you don't have the sources there is no way to check what this code does and since whoever wrote that code faces no risk when his code is discovered to be malware there's very little you can do after the fact.

    This is less secure than a device that is not jailbroken.

    I mean, do what you want to do by all means, but at least try to know what you're doing so you can correctly balance the risks and advantages you get by what you're doing.

  21. Re:Never understand jailbreaking an Apple iOS devi by Overzeetop · · Score: 2

    "android device last 3+ years with continued OS support and also not slow to a crawling POS"

    Well, that's difficult for iOS devices, too. iPhone 4 devices were sold until September 2013 and can't be updated to iOS 8, which was released in September 2014. One year to obsolescence. My daughter's iPod Touch stopped getting updates after about 2 years. Same with the iPad1 I have. (both were, admittedly, bough near the release of the next model).

    I actually gave up all my paid apps in iOS to move to Android. Compared to the cost of the phone, the apps really aren't that expensive. I'm running "last year's" version of the OS by choice - I just don't have time to mess with 5, and there are no clear advantages to me. As for hardware quality, I have not once thought "I like my G3, but it's just not built as well as the iPhone 5 it replaced". On the contrary - it's camera is wildly superior to my wife's 5s (she borrows my phone for taking pictures now), and it's got a plethora of other advantages.

    Now that I have a rooted Android phone, I can't imagine going back to even a jailbroken iOS device. I can just do more with it, and many apps in the official stores are written for those with root permissions so I don't have to go nosing around in Cydia to find apps that do things which Steve has forbidden.

    --
    Is it just my observation, or are there way too many stupid people in the world?
  22. Re:Perhaps if Apple devices weren't so locked down by Anonymous Coward · · Score: 0

    Er? I have an iPhone and I don't use Apple Services like iCloud or iTunes or iAnything. I've never spent even a cent in the App Store. All the apps I want to use are totally free with no in App purchases.
    I log into the AppStore to get updates and that's it.

    I'm not forced to use anything if I don't want it.

    I do know that what little data of mine that goes back to Apple won't be sold on to the likes of Google.

  23. Re:More Micro$oft FUD by Anonymous Coward · · Score: 0

    Get out of here Micro$oft shill.

  24. Re: Perhaps if Apple devices weren't so locked dow by fluffernutter · · Score: 2

    You talk as if there aren't an infinite amount of compromises in between. When I plug a device into USB I expect to be able to see and manipulate non privileged files. Why must an iPhone be rooted for that feature?

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  25. Re:Rotten apple ?!? by Stan92057 · · Score: 1

    Hacking news is a big part of /. so why wouldn't this be news AND why shouldn't they get notified the devices they hacked are in danger?

    --
    Jack of all trades,master of none
  26. Re: Never understand jailbreaking an Apple iOS dev by fluffernutter · · Score: 1

    How exactly does one take advantage of walls that only prevent you from enjoying more garden?

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  27. Re:Rotten apple ?!? by Noah+Haders · · Score: 5, Informative

    You buy an iPhone, you get your just desserts.

    I would say you jailbreak your iphone using software from unidentified hackers, then install software from unknown parties that can access root processes, you get your just deserts.

  28. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 2

    If you had ever used a jailbroken iPhone and realized the capabilities it unlocks, you would change your mind

    I'm aware of the capabilities it unlocks, but I'm just curious why I'd accept the lost stability, not just security, that happens when using an iPhone outside of the way it was designed.

    Apple is great at doing the things they intended you to do with the device. It is well known that if you try to use an Apple device in a way it wasn't designed for, it will be frustrating and difficult.

    You're swimming upstream on a jailbroken Apple iOS. Why not use an Android, which was designed with a totally different and open mentality?

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  29. Re:Here, mod this down too by Noah+Haders · · Score: 1

    its cuz they have clearly decided that computers are "fast enough", and are trading off benefits in speed for other characteristics for instance, they make the computer slimmer while keeping performance the same.

  30. Re: Never understand jailbreaking an Apple iOS dev by Aqualung812 · · Score: 1

    How exactly does one take advantage of walls that only prevent you from enjoying more garden?

    The walls that keep me in keep the pests and intruders out. Sure, there is garden I'm missing out on, but I have enough garden to meet my needs and I never find that my vegetables are stolen or burned when I go to my garden.

    More freedom has more risk, in pretty much any venue.

    I used to do some CRAZY shit with my non-Apple phones. Then came the day that the latest app I installed and modified kept me from making a business call while travelling away from a computer which was needed to regain control of my device.

    After that point, I decided I was OK with restricting my freedom ON MY PHONE in order for my phone to be more stable.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  31. Re: Never understand jailbreaking an Apple iOS de by fluffernutter · · Score: 1

    I'm not talking about pests and bugs. Providing regular user access to the filesystem does not introduce pests and bugs.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  32. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    I'd only switch for a stock Android device but if I were to switch now, I'd be giving up all my paid apps

    You should have thinked twice before vendor locking-in yourself like that.
    I personally don't buy applications that can only be executed on devices from a single vendor.

  33. Re: Perhaps if Apple devices weren't so locked dow by fluffernutter · · Score: 1

    Unless ios has really changed, it is super difficult to ssh transfer arbitrary file types from a server and later transfer to a computer. Case in point the other day I wanted to get an epub file from my house. I did not have mobile service but I found myself in a public hotspot. It seems to me that apple forces you to use all kinds of container apps to do that and then you glut up your device with apps and can't really interact with anything beyond what the app will let you do. It's not like I do that stuff all the time, but it has sure saved me.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  34. Re:Never understand jailbreaking an Apple iOS devi by Flavianoep · · Score: 1

    Now that I have a rooted Android phone, I can't imagine going back to even a jailbroken iOS device. I can just do more with it, and many apps in the official stores are written for those with root permissions so I don't have to go nosing around in Cydia to find apps that do things which Steve has forbidden.

    You gave the best argument for a rooted Android device instead of jailbroken iOS one. Even if Apple's products are better.

    --
    Linux is for people who don't mind RTFM.
  35. Re:Rotten apple ?!? by Anonymous Coward · · Score: 0

    Anyone can jailbreak devices is relevant.

    How do you know if your device has been jail broken through a font or PDF rendering bug? There could be much more infected devices out there, but nobody knows about them because you can't scan for it due to app store restrictions.

    Or do you think all privilege escalation vulnerabilities are features and not bugs?

  36. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    There is no advantage to the iPhone's walled garden.
    On Android, you can allow "unknown sources" if you want to. That option is disabled by default. You would be free not to check it on Android.

    I understand that some people prefer the iPhone and/or iOS, for various reasons, but the walled garden is really not something I even consider an argument.

  37. Re:Rotten apple ?!? by Anonymous Coward · · Score: 0

    It's relevant because the devices can be jailbroken by any 12 year-old in five minutes. Kind of shameful, actually, if you're Apple

  38. Re:Never understand jailbreaking an Apple iOS devi by flopsquad · · Score: 2

    There are quite a few nifty features and tweaks available to a JB device that aren't possible on stock iOS. As others have mentioned, finer grained OS controls like f.lux, the ability to actually interact with the filesystem (on the device or plugged in), disallowed apps like emulators, removing stock apps, etc. It drove me nuts that on my first iPhone, I could silence every singe sound and vibration--but every time I plugged it in, it buzzed at me. I had to jailbreak to get rid of that.

    As another poster stated, Apple are kind of design fascists. Phones, they decided for me, are just too small to support many of the multitouch gestures that the iPad uses. Jailbreak and you can have that (very useful, IMHO) functionality back. The quick access buttons are the ones they decide you need. Jailbreak and you can choose from a huge set of functions that, again, are really handy to be able to toggle quickly. I was turning certain device features (BT, hotspot, invert, etc) on and off frequently enough that creating buttons for them made a huge difference in user experience.

    Many of those features would be trivial for Apple to implement as advanced settings (hell, solitary coders are writing this stuff and giving it away for free), and not against the Apple ethos (unlike, say, emulators). But for now you have to expose yourself to security risks in order to do all this useful stuff with your expensive pocket computer.

    And Android is its own bag of cats. I've been in that bag with those cats and it's a longer story that I have time to write about here. Suffice it to say that not everything in the Adroidverse as universally open and moddable as it might appear from the iSide.

    --
    Nothing posted to /. has ever been legal advice, including this.
  39. Re:Never understand jailbreaking an Apple iOS devi by brunes69 · · Score: 1

    Nearly all Android phones come carrier bootloader locked so I would hardly say they have a "different and open mentality".

    Even Google's Nexus phones come with a locked bootloader that needs to be unlocked in order to root the phone and do the equivalent of what you do with a jailbroken iphone.

  40. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 0

    I'm not clear on why anyone would pay a premium for a device that intentionally limits what you can do with it. Take NFC, for example: wonderful technology with a kajillion uses beyond tap-to-pay (which is nothing new) but all you can use it for on an iPhone is tap-pay. You pay extra for this? Weird to me.

  41. Re:Rotten apple ?!? by Anonymous Coward · · Score: 1

    Are you really this dumb? This is no different than rooting an android device,e and actually if you're on the latest firmware it's not doable right now. That said, the exploit mentioned here is also not a worm, but something people installing pirated software got. Does it hurt to be so clueless?

  42. Re:Perhaps if Apple devices weren't so locked down by Anonymous Coward · · Score: 0

    LMFAO, you're an idiot if you think Google's selling your data. You have no idea how ad companies work, do you?

    Ad companies sell to other companies their ability to target certain demographics. If ad companies gave away or sold your information, companies would be able to cut them out.

    No, they're using the data themselves through their I ads platform to target you, just as Google is trying to target you with their ads. The best an ad provider will get is general demographic information.

    Enjoy having your location "sold"... you can keep your head in the sand and pretend it's not happening.

  43. Re: Never understand jailbreaking an Apple iOS de by Aqualung812 · · Score: 1

    Oh, I agree with you there. I really wish they would add that.

    I'm not an Apple Fanboi, I really disagree with how heavy-handed they are.

    Still, they fit my balance of risk/functionality right now.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  44. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    Many of those features would be trivial for Apple to implement as advanced settings (hell, solitary coders are writing this stuff and giving it away for free), and not against the Apple ethos (unlike, say, emulators). But for now you have to expose yourself to security risks in order to do all this useful stuff with your expensive pocket computer.

    I 100% agree with everything you're saying there. My Motorola RAZR had per-person MMS custom ringtones before the iPhone was even released, and it took them until iOS 5 or so until they allowed that. Stupid.

    Worst case, make it something that can only be enabled with a bit of work, like how you have to use their tool to install certificates and other higher-level stuff.

    While it annoys me that I can do many things that should be trivial and some UX god at Apple is preventing me from doing it, the main reason I'm on Apple is for the security and stability. I won't root it and lose that, because if I were going to do that, I'd get an Android again.

    Do I think iOS is perfect? Hell no. Is it the best? In some cases, yes, in many other cases, no. It just happens to be the best for me, right now.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  45. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    I personally don't buy applications that can only be executed on devices from a single vendor.

    Why not?

    I'm perfectly happy to buy some $1-$10 apps that I know full well may be vapor in a few years.

    I spent more than that on lunch yesterday, and flushed it today.

    It isn't like we're talking about $900 software.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  46. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 0

    Except malware has made it onto the app store... Remember that security research a couple years ago who created a remote command-and-control app disguised as a stupid flashlight app? or when another flashlight app allowed you to tether (yes, that's malware because it's not allowed... just because people want it doesn't change that it violated the security of the device)?

    Both apps had at least tens of thousand installs before the author came clean about it or the method of tethering got out to the general public. Imagine if the secret was kept...

  47. Re: Never understand jailbreaking an Apple iOS dev by Anonymous Coward · · Score: 0

    I've install hundreds of apps on my Android phone, some even have to do with the phone system.

    None of them have ever interfered with me being able to place a call.

    Nor do I need a computer to 99% of the issues that installing an app would cause - I could easily leave the factory image and revert my phone / sd card and restore my phone to a known working state in under 15 minutes without a computer.

  48. Re:Perhaps if Apple devices weren't so locked down by Anonymous Coward · · Score: 0

    I do know that what little data of mine that goes back to Apple won't be sold on to the likes of Google.

    Do you? Do you, really?

  49. Re: Perhaps if Apple devices weren't so locked dow by Anonymous Coward · · Score: 0

    And exaclty what percentage of all phone users want to do that?
    Not a lot is my guess
    My phone is primarily .... guess what a phone.

    But if that is an overriding feature that any mobile device you have must have then go with the Ubuntu phone.

  50. Re: Perhaps if Apple devices weren't so locked do by Anonymous Coward · · Score: 0

    Just email the epubs to yourself. Easy.

  51. J.A.I.L.B.R.O.K.E.N. by gumbright · · Score: 2

    "Jailbroken" needs to be in the title of this story and and in the first sentence. It is the critical factor to the story. Not having it there simply makes this a troll.

  52. Re:Never understand jailbreaking an Apple iOS devi by TrancePhreak · · Score: 1

    Since having a reliable and secure phone is more important to me than features, I have have decided to get an iPhone and not jailbreak it.

    You obviously didn't do any research then. The iPhone can be compromised via malicious websites with no user interaction. Apple is also really slow to fix such problems (fixes are often available via Cydia the same day, Apple can take months). How many malicious text message bugs does it take before people realize what Apple's focus is, making money, not security.

    --

    -]Phreak Out[-
  53. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    Do you have a single example of a in-the-wild vulnerability that will run on factory iOS devices?

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  54. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    It's a matter of principle. I don't want to support vendor lock-in.

  55. Re:Perhaps if Apple devices weren't so locked down by macs4all · · Score: 1

    Less people would feel the need to jailbreak them thus making them totally vulnerable. Let's keep in mind that most of the Apple walled garden is to force people to use Apple services and pay for Apple products and nothing to do with security.

    Even YOU don't really believe that; do you?

  56. Re:What's the leading reason for jailbreaking at a by macs4all · · Score: 1

    Which is most common? I figure pirating might be kind of popular, but a lot of useful software is pretty inexpensive to begin with and how many people want a hacked candy crush that has free powerups?

    Because a certain segment of the Chinese public seems to think that paying for ANY software is a sign of stupidity; and so they will go to almost any lengths to rip off even the most inexpensive of Apps.

    Sorry, but these people are getting EXACTLY what they deserve.

  57. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    It's a matter of principle. I don't want to support vendor lock-in.

    Interesting. Where does the line exist for this in your mind?

    Isn't watching a movie at a theater a type of vendor lock-in? You can only watch that movie while at the theater that one time, and you have no rights to watch it again.

    What about a buffet? You're unable to take the food that you've paid for out of the restaurant.

    A pay-per-view event? Movie rental?

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  58. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    A software is meant to be reusable. You can't compare that to an admission ticket. If I were renting a software for 2 hours I wouldn't care as much about vendor lock-in either. The same goes for food. It is meant to be eaten only once. Eating in one restaurant doesn't force me to eat there next week. If it did, I would consider another restaurant instead. I wouldn't buy a car which could only bring me to one restaurant, however.

  59. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    Also the problem isn't only that these apps may be vapor in a few years. They can be vapor *tomorrow* if your phone breaks.... that is, unless you buy another phone from the exact same vendor, which also implies that this vendor must still agree to sell you compatible phones. That's why you are vendor locked-in. You don't have the same freedom that I have to walk away and choose another vendor.

  60. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    A software is meant to be reusable

    It isn't software. It's an "app".
    I'm not being a smartass, I'm pointing out that smartphone apps are not comparable to PC software any more than a Big Mac is.
    It is meant to work only on the ecosystem it was purchased in, which is highly hardware dependent.

    It seems like you're cutting your nose off to spite your face.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  61. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    They can be vapor *tomorrow* if your phone breaks.... that is, unless you buy another phone from the exact same vendor

    Same is true if you buy a Windows application, but you're locked into the OS vendor, not the hardware vendor.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  62. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    Which is still better. Being vendor locked-in in both hardware and software is worse than being locked-in for software only. Of course the ideal is not to be locked at all.

  63. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    An app is a software. Yes you are being a smart ass, and yes, it is comparable to PC software.
    PC software too is "meant to work on the ecosystem it was purchased in". It can be highly hardware dependent or not, just like PC software.

    The vendor will always want you to be locked-in as much as possible. As a consumer, my goal is to be as free as possible.

  64. Re:Never understand jailbreaking an Apple iOS devi by Aqualung812 · · Score: 1

    As a consumer, my goal is to be as free as possible.

    As a consumer, my goal is to purchases items to meet as many of my requirements for as long as possible with the lowest price.

    Apps, that might be vapor one day, fit those requirements often. I can't imagine not buying one that will give me usefulness out of some sort of protest vote.

    But, bully for you. Keep fighting the good fight.

    --
    Grammer Nazis - I mod you "troll" unless you actually add something on-topic. Yes, I know I have mispellings in my sig.
  65. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    The short term price can be costly in the long run. That's why I sometimes accept to pay *more* for something. Even tough some cheaper alternative would satisfy my requirements, in the long run they could be more expensive to own/repair/replace. Being vendor locked-in increase long-term costs, or at least the expectation of these costs.

    So I avoid vendor lock-in as much as possible. And you know what, it's not even hard in this case. It's not as if I were missing some important software that would improve my life I can't even think of one of these "app" that I wish I could have.

  66. Re: Perhaps if Apple devices weren't so locked dow by jo_ham · · Score: 1

    There are no non-privileged files on the iPhone.

    The filesystem doesn't use the same model that a PC does, but you know that going into the purchase and would decide such a device is not for you and buy an Android device instead.

    You're criticising the iPhone for not doing things you think it should be able to do. If it doesn't work the way you want it to then there are other smartphones that do.

    Do you expect that Apple should make the iPhone work the way you want it to, just because?

    That's no different than expecting all Android phones working the same way as iPhones.

    Choices exist for a reason.

  67. Re:Never understand jailbreaking an Apple iOS devi by jo_ham · · Score: 1

    You mean like the jailbreak exploit that left an open SSH listen with a default root username and password?

    Mm. Super secure, just like before it was rooted.

  68. Re:Never understand jailbreaking an Apple iOS devi by jo_ham · · Score: 1

    So you don't own a car at all then, I take it?

    I mean, if contains vendor-locked software.

    Same with your TV I assume that you don't own.

  69. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    You are confusing vendor lock-in and proprietary software. Vendor lock-in always implies two purchases. A software by itself can't be "vendor-locked", whatever that means.

  70. Re:Here, mod this down too by BasilBrush · · Score: 1

    What are you running OSX on? It's certainly not slow here.

  71. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 0

    Because if people didn't jailbreak, apple wouldn't have a source of ideas for new features to add to the iPhone. Apple isn't anywhere near as innovative as people think they are.

  72. Apple account theft caused by malware .. by nickweller · · Score: 1

    "The theft is executed via variants of the KeyRaider iOS malware, which targets jailbroken iOS devices"

    How exactly does the KeyRaider malware get onto the device without the end user visiting a compromised repository and downloading and installing the malware?

  73. Re:Never understand jailbreaking an Apple iOS devi by Anonymous Coward · · Score: 0

    It doesn't work on current versions, but that's what http://www.jailbreakme.com/ was about.

  74. Re: Perhaps if Apple devices weren't so locked do by fluffernutter · · Score: 1

    Well it depends on whether Apple wants the iPhone to be a full computing device or a dumb appliance. Too bad they have trouble getting past dumb appliance when even the most basic mp3 player offers filesystem access.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  75. Re: Perhaps if Apple devices weren't so locked do by fluffernutter · · Score: 1

    Who cares what percentage of users want to do that? It's a lot of extra capibility they are excluding and they could implement it almost for free!

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  76. Re: Perhaps if Apple devices weren't so locked dow by fluffernutter · · Score: 1

    It's well known that apple designs the garden to keep people in their products.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
  77. Re:Rotten apple ?!? by thesupraman · · Score: 1

    Because apple, who make a huge amount of noise about wanting to protect their dear beloved users dont disable the storage of and access to the security tokens when their devices are jailbroken?

    THATS the story here, they could, however they do not. Hence they have left the apple IDs knowingly open to theft.

    Users, for better or worse, have convinced themselves that Apple keeps them magically out of any such trouble, however this is a clear
    case where they could, but they do not. Which is a pity.

    Come on Apple, the obvious fix is to make the secured data inaccessible once jailbroken.

  78. Re:Rotten apple ?!? by farble1670 · · Score: 1

    Affect only jail-broken devices. How is the even relevant news?

    the same way Android exploits that require the user to enable side loading, disable google's APK checking service, and go to some shady website and install an APK are news. also, the exploit is only theoretical.

  79. Re: Perhaps if Apple devices weren't so locked dow by macs4all · · Score: 1

    It's well known that apple designs the garden to keep people in their products.

    Well known by whom? Slashtards?

  80. Pro-Tip by Jahat · · Score: 1

    If it is free, you are the product.

    --
    Sola Scriptura Sola Fide Sola Gratia Sola Christus
  81. Because the post wasn't clear... by Anonymous Coward · · Score: 0

    The only people affected where people who had Weiphone’s Cydia repositories. That's why it affected mostly users from China..

  82. Re: Rotten apple ?!? by Anonymous Coward · · Score: 0

    If you even have to rely on shoddy third-party solutions to make the poxy thing work as it should, then something's wrong upstream.

  83. It's over 9000! by StikyPad · · Score: 1

    Or, put another way, "Nearly 0.00075% of Apple accounts compromised via iOS malware, mostly in China.*"

    * Based on 2013 estimates for number of active iPhones worldwide.

  84. Wrong (as usual)... apk by Anonymous Coward · · Score: 0

    See subject: Zontar the Mindless = a troll idiot. I'm neither. You fail.

    APK

    P.S.=> These dolts attempting to "outwit me" that always fail? What a waste of THEIR time - it can't ever be done by dimwitted "ne'er-do-wells" like them (since they waste their time trolling online, rather than bettering themselves - of course, you can't polish a piece of crap (which they are obviously, just look what they do), but they could @ least try)... apk

  85. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    The iPhone can be compromised via malicious websites with no user interaction.

    You mean five major software versions ago? By that logic, Windows 10 is a security nightmare because XP had so many holes.

  86. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    walled garden

    I wonder what the venn diagram looks like of the people who complain about Apple's "walled garden", yet have purchased a game console, car or media player without complaint.

  87. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    iPhone 4 devices were sold until September 2013 and can't be updated to iOS 8, which was released in September 2014.

    Which was four years after its release, if you're picking the cherries half full.

    both were, admittedly, bough near the release of the next model

    Products purchased at the end of their life cycle, when they are discounted to be free-with-contract, have a shorter period of support than the current model? Zounds.

  88. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    I simply don't understand jailbreaking an iPhone.

    Adding the option to turn on and off cellular data alone is worth the price of admission to battery misers. Speaking of batteries, you can install a tweak that will disable the alerts that start locking your screen at 20% until you click "ok".

    Other bennies: being able to scp files to your phone, use your phone for tethering without paying the carrier extortion fee, and mute camera noises.

  89. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    A game console is similar, however a car or media player is not something that you buy, and then if you buy software it will only run on that car/media player.

  90. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    however a car or media player is not something that you buy, and then if you buy software it will only run on that car/media player.

    Can you install any app you want on your Bluray player? Can you buy a car and swap out the navigation software for Waze? This "walled garden" canard only ever applies to Apple, like don't hold it wrong before it.

  91. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    If your blue-ray player only played discs from a single vendor, it would be vendor locking-in to.

  92. Re: Perhaps if Apple devices weren't so locked do by jo_ham · · Score: 1

    Ah, so your on;y criterion for a device being a "full computing device" is filesystem access.

    Thus, in your world, the Creative Rio mp3 player is more of a "full computing device" than an iPhone because the former gives you filesystem access.

    Interesting, but whatever works for you I guess. How do you check your email on that Rio? It must get annoying to read it 2 lines at a time, surely?

  93. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    Are you allowed to run apps or play media formats on your Bluray player not approved by the manufacturer?

    No. You're not. Which means it would be a "walled garden", but no one will actually use that term to describe Bluray players until Apple makes one.

  94. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    You don't run apps on a blue-ray player. Well, I suppose some "smart" ones do. And I never said it wasn't a walled garden. But it's nowhere near Apple-level of vendor lock-in without the possibility of paying for software/media that can only be used on their hardware.

    Also, you need to compare to the competition in the market. Apple's competition in the smartphone market is much more open. All blue-ray players are closed (although they all play blu-rays from every company just fine and no Samsung or LG-specific movie exists). And finally, switching to another brand of blu-ray player is much easier than switching out of Apple's ecosystem.

  95. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    But it's nowhere near Apple-level of vendor lock-in without the possibility of paying for software/media that can only be used on their hardware.

    Indeed, it's much tighter. You can't buy a commercially released Bluray disk that isn't DRM'ed up to the gills. Whereas with an iOS device you can listen to mp3's or read books purchased through Amazon or Google Play.

    Also, you need to compare to the competition in the market.

    Not if it's an actual principle as opposed to ad hoc reasoning. When Richard Stallman had his open-source epiphany, he didn't suddenly say "shucks, none of the competition in the printer industry is releasing the source code to their drivers, so I guess I'll go home".

    Going back to that venn diagram, I'd wager there's a total overlap between the people who complain about Apple's "walled garden", then sign out of Slashdot to pick up his Android phone (which he rooted to get around Google-supported carrier locks) and call his buddies to come over and play some Grand Theft Auto on his Playstation 4.

  96. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    Indeed, it's much tighter. You can't buy a commercially released Bluray disk that isn't DRM'ed up to the gills.

    No matter if this is true or not, how is this the fault of the maker of the bluray player? Are you saying the bluray player won't play a non DRM'ed movie?
    Apple control both ends. They both sell devices and control which application can be installed on it. And applications that can be installed on it can't be of any use on any other device.

    Going back to that venn diagram, I'd wager there's a total overlap between the people who complain about Apple's "walled garden", then sign out of Slashdot to pick up his Android phone (which he rooted to get around Google-supported carrier locks)

    Carrier (or SIM) lock has nothing to do with rooting.

    and call his buddies to come over and play some Grand Theft Auto on his Playstation 4.

    While it is true that a gaming console is as locked down as an iPhone, an Android phone isn't.

  97. Re:Never understand jailbreaking an Apple iOS devi by Uberbah · · Score: 1

    No matter if this is true or not, how is this the fault of the maker of the bluray player?

    How does that have any relevance to the content of Bluray being more locked-down than content for iOS devices? How many of the top Bluray manufacturers were not a part of the Bluray consortium to begin with? One of them, Sony, has a sizable movie studio of their own....and releases all their Bluray content laced with DRM.

    Apple control both ends. They both sell devices and control which application can be installed on it. And applications that can be installed on it can't be of any use on any other device.

    So do the manufacturers of Bluray players. And car software. And video game consoles. But no one calls them "walled gardens", because they aren't Apple.

    Carrier (or SIM) lock has nothing to do with rooting.

    Good thing I wasn't talking about SIMs, then.

    While it is true that a gaming console is as locked down as an iPhone, an Android phone isn't.

    That's okay, anyone who roots their Android to get around carrier software (not networks, software) but then whines about iPhones is still a wanker. Take the same (or less) effort to root an iOS device, and you can install anything you want with Cydia.

  98. Re:Never understand jailbreaking an Apple iOS devi by danbob999 · · Score: 1

    Bluray players can play any bluray not approved by the manufacturer. And that's what they are meant to do. A car can also go on any road.
    You don't have to root an Android to install any software not approved by Google. You just have to check an option.