Why you should change your SSH password.

Hey guys

I've been reading all the tutorials about unlocking and whenever there's ssh involved they say to leave the login and password as alpine.

So I figured I would test this... I'm in an area with of free wi-fi and I see a guy using iPhone sitting in starbucks.. so I pop open my laptop and run a script in search of his phone in the network. Since I'm on the same network I run down the ip addresses and manage to ssh into his phone because he left his login (he probably didn't know and bought the iPhone unlocked since it's not for sale here in Brazil) as root and alpine. So I log onto his iPhone and transfer a text file just to test if it's all ok and it goes through , at this point I could do whatever I wanted.

So I'm not sure if you guys changed or not your password but I have used a different one since start and I thought everyone should know better and change theirs if they still haven't. Or you might have some random dude like me messing with your iPhone, reading your SMS and if they want.. fucking with your Phone :)

Have fun!

Or, even better:
uninstall SSH, how many are even using it, when finished with jailbreaking/activation/unlocking?

I keep SSH installed so that in the event that something screws up and Springboard doesn't load, I can connect up and remove the app.

I use Services to control SSH though. Its only enabled when I need to do something on my phone, otherwise its disabled.

SSH is useful.. what's not useful is the password alpine :)

Quote:

---

Originally Posted by deco

SSH is useful.. what's not useful is the password alpine :)

---

useful for some perhaps, but not for the majority.
when you got a working phone, what is the need for it anyway?

Quote:

---

Originally Posted by ridderdk

useful for some perhaps, but not for the majority.
when you got a working phone, what is the need for it anyway?

---

Well i think you,me,lots of other members are not the majority;)
Better solution imo is to keep ssh in case something goes wrong,so that u will be able to log in your iphone via wifi and install bossprefs to be able to disable ssh when not needed.

I don't walk around with my SSH enable, so my phone is pretty secure.

And how can we change our password?

Naujoks, I'm not completly sure since I havn't done it my self.
But since the iPhone runs osx and osx is built on unix I would belive that you can just type (without the >):
>chpasswd root
And then it will ask you for your current password (propably alpine). It won't show but just enter and hit enter.
Then you will have to enter the new password.
And then the new password once more to confirm.

That should be it.

Hope it works.

Quote:

---

Originally Posted by AstroMatt

I keep SSH installed so that in the event that something screws up and Springboard doesn't load, I can connect up and remove the app.

I use Services to control SSH though. Its only enabled when I need to do something on my phone, otherwise its disabled.

---

Yeah same here. Don't see what the problem is if it's disabled.