4 ms·
Wasn't there a rick roll virus spreading between jailbroken phones just last week? I'm guessing the next one could be a lot more malicious and with enough phone
by allenp 17y ago
Wasn't there a rick roll virus spreading between jailbroken phones just last week? I'm guessing the next one could be a lot more malicious and with enough phones involved cause some service disruptions.
- conover 17y agoI believe that was because many people never bothered to change the default password for the OpenSSH app. It's seems like that kind of thing could be exploited regardless of venue.
- orangecat 17y agoExactly, it's very easy to enable SSH access on a Mac, and I'm sure more than one person has had their MacBook compromised over wifi because they had a weak password. Yet hardly anyone would accept that as a justification for locking down Macs, so why is it different with iPhones?
- wmf 17y agoApple doesn't allow daemons which should slow down worms quite a bit.
- ryanpetrich 17y agoExcept for MobileMail, MobileSafari, SpringBoard, locationd, mdnsresponderd, pasteboardd, mediaserverd, launchd, configd, fairplayd, dataaccessd, accessoryd, BTServer, CoreTelephony, apsd and MobilePhone
- wmf 17y agoWe're talking about security vulnerabilities introduced by third-party apps, so your list isn't relevant. An approved third-party iPhone app cannot include a daemon, therefore it's less likely that a bug in said app would allow worms to get into the phone.
- ryanpetrich 17y agoWorms don't require a user-installed daemon when the Apple-provided ones are also vulnerable (example: the SMS vulnerability in 3.0) I agree though, disallowing third-party daemons reduces the damage exploited apps can do.