Another patch to fix the PDF vulnerability

As I wrote in my previous post, Apple has released iOS 4.0.2 that is meant to fix the PDF vulnerability (used by jailbreakme and by potential hackers).
The patch is also "breaking up" your jailbreak and unlock - so you need to redo all again
The patch is not fixing iPhone 2G or iPod first gen.

To the rescue came the Dev Team that have released their own patch that can be found on Cyida, and unlike Apple patch
- no need to update the iOS
- not "breaking" your jailbreak unlock
- it also patch the  iPhone 2G or iPod first gen that were left behind by Apple.

http://www.iphonedownloadblog.com/2010/08/12/pdf-patch-fixes-the-pdf-exploit-in-ios/

Haim Chibotero
iPhones in Israel & more

Apple had released iOS 4.0.2 for iPhone - Patches PDF Exploit

We all heard about the Safari's PDF viewer vulnerability that iOS 4 have that allows an exploit to be running on your iPhone. When you open an malicious PDF file the hacker can take full control of your iPhone -- this is the way that JailBreakme.com is working.

In order to solve this there was already a quick app that came out in Cydia that supplied a workaround and each time you wanted to open a PDF file you where asked  if you want to open it , stop the automatic opening of PDF files (allows you to better control opening PDF files)

Yesterday Apple have released a new iOS 4.0.2 that is dedicated to fix problem (no other features included).
The update also removes your JailBreak and unlock - so I suggest you NOT to install this update.

Btw, the update is almost 600MB

Haim Chibotero
iPhones in Israel & more

PDF Security flaw in iOS 3.1.2 and above

Following the new jailbreak that is utilizing an online jailbreak (via surfing to a web page and downloading automatically a pdf file that is exploiting a hole in the iOS, while the user is not doing any thing else) couple of security companies have published that the exploit is bigger then what is seems and that an attacker can send you a malicious PDF that can ultimately even take full control of your iPhone with out you knowing it.

Apple has already started looking into a way to close this exploit, for now it's important not to download PDF you don't know from where it's coming.
You can also use this app from Cydia named "PDF loading warner" that after installation will be asking you if you want to open PDF files (so they won't automatically open - as its done today)

More info about this you can find in this following article from Calcalist (In Hebrew)
http://www.calcalist.co.il/internet/articles/0,7340,L-3413631,00.html

Haim
iPhones in Israel & More