1. Hacking The iPhone Group 17 Shelby Allen Richard Denney

2. Outline Introduction Lab goals Procedure Results Conclusions Defenses References

3. Introduction Proliferation of mobile devices Popularity of iPhone Soon-to-be released SDK

4. Lab Goals Show that the iPhone, and by extension all future mobile devices, are locked away computers and so they should be given the same security precautions as a computer.

5. Procedure Buffer overflow Copy and edit disk image Install SSH Copy files

6. Results Installer Community sources Easy install Easy update

7. Results MobileFinder Explore file system Fully functional

8. Results MobileFinder Explore file system Fully functional

9. Results Term-vt100 Terminal that won’t go away Partial functionality expandable

10. Results Sysinfo Task Manager equiv. Can kill processes All processes ran as root

11. Conclusions A computer in a mobile device’s body The default user is the only user – root Serious vulnerabilities Default user name and password All programs ran as root A vulnerability in any program compromises the entire system Buffer overflow

12. Defenses Change user name and password Download newest firmware Same practices as a computer Lobby for better security

13. Lab Structure Student will: Jailbreak iPod Touch Load custom applications Explore architecture Evaluate device security

14. References For more information on iPod/iPhone hacking, visit: Instruction guide to hacking iPod Touch http://forums.macrumors.com/showthread.php?p=4308881& nojs=1 http://forums.macrumors.com/showthread.php?p=4308881& nojs=1 Installer.app Homepage http://iphone.nullriver.com/beta/ Ipod Touch hacking wiki http://www.touchdev.net/wiki/Main_Page Iphone security evaluation by consulting firm http://www.securityevaluators.com/iphone/

15. Questions?