Teenage hacker unlocks the iPhone
11241
A New Jersey teenager unlocks the iPhone, opening the way to Apple's hit mobile being used by non-US networks.
621170
InfoWorld - Hackers are&#160;working to unlock Apple&#39;s iPhone, but the job appears to be more difficult than initially expected.
251655
(InfoWorld) - Hackers may successfully unlock an iPhone in as soon as three to seven days, according to a representative of one effort that aims to unlockÂ Apple's new handset. "We believe it will be easy. We are privately aware many of the iPhone engineers came from other handset manufacturers, and we understand their design techniques fairly well," said gj, speaking in an interview conducted using IRC (Internet Relay Chat). He requested that his real name not be used. "Easy to us means inside one week," he said, offering an estimate of three to seven days. Unlocking the iPhone means users will be able to use the handset with other service providers, not just AT&T, which has an exclusive deal to sell the phone in the U.S. By Tuesday night, U.S. time, hackers succeeded in cracking the iPhone's activation process, a minor step towards unlocking the iPhone but a significant technical challenge. The activation process uses a software token that is sent from the phone via iTunes to Apple, which signs the token and returns it to the phone. When that process is completed, iTunes tells the phone to activate. Hackers developed tools for both Windows and MacOS that allow users to activate their phones without iTunes. But users will have to use a token from an activated iPhone, which can be used to activate multiple phones. The hackers are not providing a token with the tools. "If you don't have a known token (which does contain identifying information) you won't be able to use the tool," gj said. At least one other hacker found a way to activate the iPhone without using iTunes. Jon Lech Johansen -- better known as DVD Jon, a hacker who helped develop the DeCSS tool for decrypting DVDs -- released a tool that can activate the iPhone without iTunes on his blog. "The iPhone does not have phone capability, but the iPod and Wi-Fi work," Johansen wrote. Cracking the activation process brings hackers one step closer to their goal of unlocking the iPhone. The phone requires iTunes to activate functions such as its camera and music player. But the process also requires signing up for a two-year data plan with AT&T. "Activating the phone really just makes the device more 'usable' for those who want to use it as a Wi-Fi device, for instance," gj said. With the activation process cracked hackers turned their focus to unlocking the iPhone, a challenge that is expected to be easier than cracking the activation process. "Unlocking is a function of the radio and the radio's interaction with the SIM (Subscriber Identity Module) logic, and these are mostly standards based," gj said. A rumored software update for the iPhone, expected to be released on July 5, could undo some of the progress hackers made towards unlocking the phone. "If Apple releases an update on July 5th that includes 'fixes' for our efforts so far, it will be a setback," gj said. "I don't know if it will be a permanent one." Hackers working together to unlock the iPhone don't belong to a specific group, and don't plan to claim credit for their work, gj said. "We just want to see the hardware freed. We accept that others will exploit those works but hopefully it will be a lesson to Apple," he said. "They're such a great company, it's a real shame for them to lock everything down like this. The design is top notch," he said. "They would win far more business by setting an example for the industry."
88866
A 17-year-old hacker has broken the lock that ties Appleâs iPhone to AT&Tâs wireless network, freeing the most hyped cell phone ever for use on the networks of other carriers, including overseas ones.
126947
A new software-based unlocking scheme for your iPhone makes it easier for those of us without soldering skills to leave AT&T. But the good times probably won't last.
743975
InfoWorld - A hacker who figured out how to unlock the iPhone has traded an unlocked phone for a new car.
102996
A 17-year-old New Jersey resident has published instructions on how to unlock Appleâs iPhone so it will work on some competing cellular networks.
8204
Home detention for Sidekick data hack A hacker who broke into the systems of T-Mobile USA and lifted the personal details of around 400 people, including a US Secret Service agent, has escaped imprisonment.â¦
753756
Score one for the unlockers. After months of waiting, the newest iPhones are now unlockable thanks to the tireless work of one programmer.
179366
The teenage hacker who managed to unlock the iPhone so that it can be used with cellular networks other than AT&amp;T will be trading his reworked gadget for a new car.
352980
Apple&#8217;s iPhone is a tough target for hackers, but a security researcher warned Friday that there are ways the sleek device could potentially be compromised.
723599
A hacker group has released a free, open-source unlock for Apple Inc.'s iPhone, although it's not for the faint of heart.
320036
(InfoWorld) - Three security researchers claimed Sunday that they have found the first exploitable vulnerability in Apple's iPhone, a flaw that allows them to steal any data from the device or even to turn it into a remote surveillance tool. The trio -- Charles Miller, formerly with the National Security Agency; Jake Honoroff; and Joshua Mason of Baltimore-based Independent Security Evaluators (ISE) -- have notified Apple of the vulnerability and given the company less than two weeks to fix the bug before Miller presents more information at the Black Hat conference on Aug. 2. According to a paper posted by the three, they rooted out a vulnerability in the iPhone's version of Safari using "fuzzing" tools and wrote a proof-of-concept exploit that can be delivered from a malicious Web site or using "man in the middle" tactics to trick users into connecting to a malicious wireless access point. Once the exploit runs, it's essentially game over, the researchers said: The iPhone is owned. "In our proof of concept, this code reads the log of SMS messages, the address book, the call history, and the voicemail data," the researchers wrote on the ISE site. "It then transmits all this information to the attacker." But wait -- there's more! That, however, could be just the beginning. The researchers claimed that a second exploit actually operated the iPhone remotely once the device was hijacked. "When we viewed a second HTML page in our iPhone, it ran the second exploit payload which forced [the iPhone] to make a system sound and vibrate for a second," they said in the paper. "Alternately, by using other API functions we discovered, the exploit could have dialed phone numbers, sent text messages, or recorded audio (as a bugging device) and transmitted it over the network for later collection by a malicious party." The vulnerability was reported to Apple last Tuesday, July 17. "We proposed a fix Apple could include in a future iPhone update," the researchers said, "but we don't know if they plan to do so. They responded and are looking into it." In an e-mail late Sunday night, Apple spokeswoman Lynn Fox would only say: "Apple takes security very seriously and has a great track record of addressing potential vulnerabilities before they can affect users. We're looking into the report submitted by I.S.E. and always welcome feedback on how to improve our security." She declined to answer questions about the Aug. 2 deadline, whether Apple would issue a patch before then, or what the company thought of the way the trio disclosed the vulnerability. Miller will provide more information on the vulnerability and exploit at the upcoming Black Hat 2007 security conference, which opens next Saturday, July 28, in Las Vegas. But is this the ethical way? ISE's president, Avi Rubin, defended the decision to announce the existence of the vulnerability prior to a patch being made available by Apple. "Why are we doing that? Well, I believe that there is a social responsibility to report it when a device is vulnerable to attackers," said Rubin on his own blog Sunday. "People buy these things and use them in ways that put their identity and their online accounts at risk, and by exposing these vulnerabilities, we can make users better judges of how to use their high-tech devices." Rubin is familiar to many security observers from his research into problems with electronic voting systems. The paper by Miller, Honoroff, and Mason also spelled out a number of weaknesses in the iPhone's security architecture, although it didn't specifically pin the vulnerability on any of those flaws. One, however, most likely contributed to the reach of the exploit. "There are serious problems with the design and implementation of security on the iPhone," the paper said. "The most glaring is that all processes of interest run with administrative privileges. This implies that a compromise of any application gives an attacker full access to the device." Other deficiencies the trio cited in the iPhone's operating system included not using address randomization -- a technique applied by Windows Vista that's designed to make it tougher for hackers to write reliable attack code -- and allowing code in the heap to execute. Those last two shortcomings have been criticized in the desktop version of Mac OS X for some time. Three months ago, during the fallout after a hacking contest that jacked a MacBook Pro notebook, HD Moore -- the vulnerability researcher noted for the Metasploit hacking and attack testing software -- took on the claim that Mac OS X is safer than Windows. "The Mac OS X platform is years behind Linux, Windows, and OpenBSD in terms of operating-system security," said Moore then. "All of the above platforms support some form of address randomization (ASLR) and include features that make exploitation slightly more difficult." The ISE researchers have also posted a short video of their hack in action on YouTube.
16848
Writing for USA Today, Edward Baig finds iPhone âindeed worth lusting after.â Apple, he says, âhas delivered a prodigyâa slender fashion phone, a slick iPod, and an Internet experience unlike any before it on a mobile handset.â âThe most chic cellphone Iâve seen,â iPhone is âa breeze to set up and fun to use, evident from the moment you slide your finger across the screen to unlock it. Itâs a wonderful widescreen iPod and fabulous picture viewer.â And he tells us that âmaking calls was surprisingly simple. You can flick through your list of contacts or favorites â¦ and then tap on a name to make a call or send a text message. The keys of the virtual keypad are large enough so that dialing a number manually â or punching in a code to access voice mail remotely â is easy. I rarely made a mistake.â He awards iPhone 3.5 stars out of 4.
8577
(InfoWorld) - A hacker group released a free, open source unlock for Apple's iPhone late Tuesday, just a day after a commercial company started selling something similar for as much as $99 through a network of online resellers. The iPhone Dev Team, a dozen programmers who began their attempts to break the iPhone's reliance on AT&T in early July, have posted their hack on download servers. According to several sites, including Gizmodo and Engadget, the iPhone Dev Team unlock exploits the same iPhone bug as the for-money iPhoneSIMFree hack to do its magic. The two groups, however, came up with their solutions independently. But the process isn't for the faint of heart. "This unlock is not for everybody!" the iPhone Dev Team warned. The procedure involves several separate programs -- some of which must be obtained elsewhere on the Internet -- and requires that iPhone owners execute commands from a shell screen on the Mac or PC. Even so, reports have been posted to the team's site from users in more than 40 countries that the unlock hack works, and after a swap of the iPhone's included SIM card with one from another cellular service provider, that they've been able to access more than 90 different carriers. The iPhone's distinctive Visual Voicemail, which lets users select voice-mail messages rather than listen to them in the order they were received, is missing after an unlock; that feature relies on AT&T's back end. Some users have also reported that the iPhone's connection to YouTube no longer works after the hack is applied. The iPhone Dev Team is already working on a one-click tool sporting a graphical interface that will unlock an iPhone, but it had not been released as of this morning. "A new version of the GUI tool is almost complete," the group said on its site. It's likely, however, that any unlock will be undone by the next iPhone update, which Apple has said will be issued sometime this month to give the device new capabilities, such as Wi-Fi downloading from iTunes. The iPhoneSIMFree group, for example, has hammered the caveat into potential buyers' heads: "We cannot offer any guarantee should Apple Inc. choose to re-lock the phone after a future update," it stated in a FAQ. Resellers of the iPhoneSIMFree hack, who have priced the unlock as low as $45, have repeated the no-guarantee mantra. Apple has repeatedly refused to comment on the various iPhone unlock hacks -- paid versions or free ones.
572865
A video showing the founder of a Belfast, Northern Ireland company unlocking the iPhone hit the Web early Wednesday U.K. time as proof that software exists that can unlock Apple Inc.'s device for use with carriers other than AT&amp;T Inc.
664495
(InfoWorld) - A hacker who figured out how to unlock the iPhone has traded an unlocked phone for a new car. After facing problems trying to auction the phone on eBay, George Hotz received a call from CertiCell, a company that refurbishes mobile phones. "Terry Daidone, the founder of CertiCell, contacted me this morning, and offered to make a trade for the iPhone," Hotz wrote on his blog. "I traded it for a sweet Nissan 350Z and 3 8GB iPhones." Hotz shared the method he discovered for unlocking the phone on his blog, so the phone he traded doesn't hold any secrets. But he put the phone up for auction because he thought someone might want the phone, the second one that he unlocked, for its historical value. "If you are only bidding on this to get an unlocked iPhone, don't. There are much cheaper and easier ways to get one. This is a piece of cell phone history," he wrote on his blog. Hotz, who arrived at the Rochester Institute of Technology in New York for his first days of college on Sunday, closed the eBay auction after receiving too many fraudulent bids. He then invited legitimately interested buyers to contact him directly. He plans to give the three iPhones from CertiCell to people who helped him as he worked on unlocking the phone. Besides accepting the gifts, Hotz agreed to do some consulting work for CertiCell, according to a statement from the company. While the statement says that CertiCell doesn't plan to commercialize Hotz's unlocking method, it also says that part of Hotz's consulting work will include training CertiCell staff on the unlocking process. CertiCell also hopes that Hotz will help its engineers develop new methods for updating software and reflashing refurbished phones. Since the iPhone went on sale at the end of June,Â hackers have been working on ways to unlock it. The phones are built to work only on AT&T's wireless network. Unlocking the phone means that a customer can use it on another network and avoid signing a long contract with AT&T. The process is controversial, however. One company, Uniquephones, says that it has developed a way to unlock the phones, but hasÂ delayed the release because of concerns of legal action from AT&T.