Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


05:21 PM
George V. Hulme
George V. Hulme

iPhone Is Owned Again; Yawn

A little more than a week after Apple's shiny new iPhone 3G went on sale, a team of programmers say they've, once again, gained control over the highly coveted gadget.

A little more than a week after Apple's shiny new iPhone 3G went on sale, a team of programmers say they've, once again, gained control over the highly coveted gadget.A group known as the "iphone-dev team" announced yesterday that the iPhone 3G has been "jailbroken," as in "hacked," or, if you're really into the slang, "pwned."

In a post headlined "Thanks for waiting," the iphone-dev team made available Pwnage 2.0 for both the iPhone and iPod touch. This makes it possible to run applications not sanctioned by the application gatekeepers at 1 Infinite Loop, Cupertino.

Now, few would doubt that the iphone-dev team helped fuel the success of iPhone 1.0. Without their tool there was no way to run third-party software, which to a software junkie like me made the iPhone much less useful than my old Dell Axim pocket PC. I wanted any phone I carried to be able to run applications and manage my data. Plus, last year there were many areas of the globe where there were no carriers available for the phone.

Just to be clear, Pwnage 2.0 currently only jailbreaks the iPhone to make it possible circumvent Apple's software gates, it doesn't yet unlock the phone for use on unsanctioned cellular networks.

Today, it seems Apple is well on its way to having a very active, almost fanatical, development community with hundreds of applications already available. (I still haven't found a list management application as powerful as ListPro, but that's another topic.) And more applications are rolling down the pipeline.

Now, one could make a good argument against the walled-garden approach to application availability Apple is putting forth, but after years of suffering through many crappy Windows Mobile applications, a little quality control might not be a bad idea. Time will tell.

Additionally, the costs of unlocked iPhone 3Gs look to be just shy of $900. That almost makes the AT&T contract look cheap.

So this time around, I don't see much value in hacking open the iPhone, especially not with the risk of waking up one day to find it bricked.

So, have any InformationWeek.com readers given Pwnage 2.0 a whirl? If so, we'd like to hear about it.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Overcoming the Challenge of Shorter Certificate Lifespans
Mike Cooper, Founder & CEO of Revocent,  10/15/2020
7 Tips for Choosing Security Metrics That Matter
Ericka Chickowski, Contributing Writer,  10/19/2020
Register for Dark Reading Newsletters
White Papers
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2020-10-22
The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. Instead, for various actions, it would report the IP address of an internal Wikimedia Foundation server by omitting X-Forwarded-For data. This resulted in an inab...
PUBLISHED: 2020-10-22
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.
PUBLISHED: 2020-10-22
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
PUBLISHED: 2020-10-21
WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does not filter user inputs. By putting an XSS payload in place of a valid Owner Name, a modal b...
PUBLISHED: 2020-10-21
Adobe InDesign version 15.1.2 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .indd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.