Critter’s Code

Have you jailbroken your iphone? It’s easy to do, and quite a few people have done it. Have you changed the default password for your SSH access on your iphone? It’s easy to do, but not many people have done it.

If you do not change the default SSH password on your iphone, your phone is at risk and so is your data! When you stop to get your coffee, and your iphone connects to the network, I can login and take what I want. Worms can automatically spread from phone to phone.

First you will need to know what the IP for your iphone is, assuming it is connected to a network. You can easily get the IP from drilling down into into your network settings.

Now that we have the IP address, just open up a terminal window (or command prompt on windows, IIRC). You can see from the image that my IP is ‘192.168.1.104′. So to connect to my iphone I type:

ssh root@192.168.1.104

You will be prompted to enter a password. (note: you will not see your password as you type it)

alpine

Once you are logged into the phone, you will need to type:

passwd

You will then be prompted to enter your new password twice. That’s it. Your iphone is now safe from any worm or malicious attacks that will utilize the default password.

That’s it. Your jailbroken iphone is now protected from any worm or malicious attack that could use the default login/pass combination for SSH.

There’s an app you can purchase in Itunes App Store that will allow you to send push notifications to your Iphone. The iphone application is called “Prowl: Growl Client” You can download a plugin that integrates with Growl on the MAC (and I believe windows too) allowing you to receive copies of growl notices from your computer to your phone.

While this is all fine and dandy. Prowl also exposes an API, which allows for 1,000 notifications sent per hour per IP. The API allows for easy integration and access via ColdFusion. The possibilities of what this could be used for are endless.

I’ve created a CFC that will allow you to easily send notifications to your iphone via the Prowl servers. Actually… I’ve created two CFCs. One for ColdFusion v9.0 using (scripting FTW!1!) and a version of the CFC that uses tags.

Set your account variables and create your object:

1 2 3 4

apikey = "ei4irkfkddkdkdkdke3ie9r9r9"; providerkey = ""; callto = "<a class="linkification-ext" title="Linkification: https://prowl.weks.net/publicapi/" href="https://prowl.weks.net/publicapi/">https://prowl.weks.net/publicapi/</a>"; appname = "Critter's Code'";

// connect to the prowl cfc //
p = createObject(”component”,”ctzprowl”).init(_apikey=apikey, _callto=callto, _providerkey=providerkey, _appname=appname);

and our calls to the service:

1 2	// verify account (it does count against your 1,0000 requests per hour) x = p.verify();

if(x.complete and x.code eq 200)
{
// send notification to devices registered to our account. //
y = p.add(priority=’0′,event=’CF9′,description=”I’m in your phone via CF9′”);
}
// dump x (our verification call)
writedump(var=x,label=’Verification results’);

if(isDefined(”y”))
{
writeoutput(’
‘);
writedump(var=y,label=’Add Notification results’);
}

Below is a screen of the dumps:

and the notification on my phone:

Basically.. for $2.99 you can program your server to send you notifications based on whatever..

I just need to finish packing a few things up with it.. and I’ll throw it up on RiaForge.

UPDATE:

I’ve uploaded the code to http://ctzprowl.riaforge.org

Itunes Link
Prowl Website (signup and generate API key)