5 ms·
I believe that was because many people never bothered to change the default password for the OpenSSH app. It's seems like that kind of thing could be exploited
by conover 17y ago
I believe that was because many people never bothered to change the default password for the OpenSSH app. It's seems like that kind of thing could be exploited regardless of venue.
- orangecat 17y agoExactly, it's very easy to enable SSH access on a Mac, and I'm sure more than one person has had their MacBook compromised over wifi because they had a weak password. Yet hardly anyone would accept that as a justification for locking down Macs, so why is it different with iPhones?
- wmf 17y agoApple doesn't allow daemons which should slow down worms quite a bit.
- ryanpetrich 17y agoExcept for MobileMail, MobileSafari, SpringBoard, locationd, mdnsresponderd, pasteboardd, mediaserverd, launchd, configd, fairplayd, dataaccessd, accessoryd, BTServer, CoreTelephony, apsd and MobilePhone
- wmf 17y agoWe're talking about security vulnerabilities introduced by third-party apps, so your list isn't relevant. An approved third-party iPhone app cannot include a daemon, therefore it's less likely that a bug in said app would allow worms to get into the phone.
- ryanpetrich 17y agoWorms don't require a user-installed daemon when the Apple-provided ones are also vulnerable (example: the SMS vulnerability in 3.0) I agree though, disallowing third-party daemons reduces the damage exploited apps can do.