請注意iphone的病毒

[BRIANSU]

由於大家在使用SSH時的username跟password都是一樣的,所以這個消息我認為有一定的可信度,不放心的人可以使用提供的方法解決!
文章來源:
http://modmyiphone.com/forums/showthread.php?t=12181
Warning Iphone TROJAN HORSE!!!
Warning, my friend who is really good in computers developed this kinda like a trojan horse for your iphone. its really very simple. first thing it does is install ssh, if the iphone does not already have one, then it makes sure that the iphone has ssh enabled and then third it opens up a link to my friends website giving him your IP address.

This means he can easily hack in to your iphones and have full access to its root directory because all iphone share the same username and password for SSH connection.

He has already released a version under our noses on several of the apps available on major iphone website pretending to be real applications with real functions, but i dont know which one. He calls it the "Yhtomit".

He told me that he is currently working on yet another version where it does everything automatically from the iphone to his server, stealing all your iphones personal information. Beware of this TroJan he told me that it is possible to steal your itunes account information on the new 1.1.1 release and is now working for a way to automate all this.

He tested it on my iphone and i didnt even know i already had the trojan on my iphone. he wont tell me which application it is so i had to do a full restore to remove all of it.

until now i still feel like he sometimes reads my sms, that he still have access to my phone.

解決方法:
Here are two methods on how to change the ssh password.

On the phone:
- This requires that you have installed a terminal app (MobileTerminal.app, term-vt100, etc).
1) Launch the terminal. Continue to step 2 below.

On a computer (Mac/Windows):
- This requires you have installed a terminal/SSH client (Putty, etc).
1a) Find the local IP address of your phone.
1b) Launch the terminal
1c) Type ssh root@your_phones_ip_address
(用Putty進入iphone)
2) Type passwd <ENTER>. You should see "Changing password for root. New password:"鍵入"passwd"顯示"變更root的password,鍵入新密碼)
If you are asked for the original password, then it is dottie <ENTER> by default.如果你被要求要輸入預設密碼,預設密碼是dottie
3) Type the new password once, hit <ENTER>.輸入新密碼,按"ENTER"鍵
4) Retype the new password to confirm and <ENTER>.重新輸入新密碼,確認按"ENTER"

WARNING: As you are typing the passwords, you will not see anything appear on the screen. This is normal. Avoid using the delete/backspace key as it will insert a weird character into your password. You can use Ctrl+C to cancel at anytime and retry again starting at step 2.
警告:當你在輸入密碼時,螢幕上並不會顯現出任何的動作,這是正常的;避免使用"delete/backspace"兩個鍵,否則它會在密碼中加入奇怪的字元,不論何時,或是當你重複第二步驟時你,可以使用"Ctrl+C"的方式來取消錯誤的輸入

A secure password involving a combination of letters and numbers is optimal.
最理想的安全密碼是包含字元跟數字的混合

[chicken1008]

還好我有用MAC的電腦改過了........

這機率粉大........

[hao0958]

請問可以用winscp來改password嗎?

[maclaren]

我也是第一次存取時就改密碼了。

PC上的話應該要用PuTTY來改喔。

[iceman]

密碼很好改
登入後當"#"出現後 打入passwd
就會要求你輸入新密碼嘍

[bochin]

奇怪 我怎麼改都改不了

用term-vt100 鍵入alpine 後是顯示 command not found: alpine

用 putty 登入:root 密碼:alpine 後
在"#"出現後一樣是鍵入 alpine
一樣是command not found :alpine

有人知道我哪裡步驟錯了嗎?

[吉米丘]

是鍵入passwd，不是打alpine啦

沒有alpine這個指令喔

[bochin]

哈 謝謝吉米
原來是打passwd
看太快 一直以為是鍵入password 也就是 alpine ^^"

[hinskie]

想問一下....如果我在打密碼時改了用數字...
但是忘記了自己按了num lock...在confrim時都是...
現在無論打甚麼都不能登入....應該怎辦?

[reanux]

thx~~~~~~~~~~~~~~