What's new
Apple iPad Forum 🍎

Welcome to the Apple iPad Forum, your one stop source for all things iPad. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Jailbreak without passcode?

f4780y

Super Moderator
Staff member
Joined
Sep 11, 2010
Messages
7,113
Reaction score
652
Location
Troon, Scotland
Just to confirm. Tested it out with strong password, TotalCommander+TPot.
Depressingly easy. Full access to the file system. No specialist skills at all :(

Thanks for the heads up offthegrid. Sometimes you get so bogged down in technical detail, you need to get taken back to kindergarten for a lesson! Cheers.

By the way YoungOne. You'll love that. Download TotalCommander and the TPot plugin. File management over USB, really simple. Google it, and don't forget to buy the shareware if you like it :)
 

f4780y

Super Moderator
Staff member
Joined
Sep 11, 2010
Messages
7,113
Reaction score
652
Location
Troon, Scotland
OK. Hold the bus!

A bit more testing. I followed through on your thoughts about the consultants laptop.

I connected my iPad to my desktop which it is not synced with. iTunes immediately told me the iPad was locked and I had to unlock it. I was not able to access the device at all via TotalCommander. Completely secure. It was not until I unlocked the device and iTunes recognised the device that access was granted to TotalCommander.

So, I am satisfied again! I think! :) It IS SECURE. The thief would need the passcode or also to steal the PC that the iPad was synced to...

Hoorah. Not quite as dumb as I feared I was there! Still, an excellent nights fun. Thanks guys!
 
OP
O

offthegrid

iPF Noob
Joined
Jun 2, 2011
Messages
4
Reaction score
0
Location
usa
OK. Hold the bus!

A bit more testing. I followed through on your thoughts about the consultants laptop.

I connected my iPad to my desktop which it is not synced with. iTunes immediately told me the iPad was locked and I had to unlock it. I was not able to access the device at all via TotalCommander. Completely secure. It was not until I unlocked the device and iTunes recognised the device that access was granted to TotalCommander.

So, I am satisfied again! I think! :) It IS SECURE. The thief would need the passcode or also to steal the PC that the iPad was synced to...

Hoorah. Not quite as dumb as I feared I was there! Still, an excellent nights fun. Thanks guys!

Thanks for checking on this. While our consultant demonstrated it to me, iTunes was not needed (he actually uninstalled it before the demo). He just used redsn0w to jailbreak and then used TotalCommander TPot to access file system. Did you try that way?
 
Last edited:

graywolf

iPF Noob
Joined
Aug 22, 2010
Messages
3,648
Reaction score
35
Location
Raleigh, NC USA
Ok... So. I tried the USB ssh thing and got it to work. I have my pc dual booting 7 and xp. Installed it onto my flash drive so USB access is portable. Installed with 7 and iTunes in on 7. iTunes isn't on xp though, and it worked on xp. So it isn't secure? And the redsnow install a package thing is still an idea.
 

f4780y

Super Moderator
Staff member
Joined
Sep 11, 2010
Messages
7,113
Reaction score
652
Location
Troon, Scotland
I'll check again. But YoungOne. Please confirm. You had a strong passcode lock on the iPad as well, yes? It must be protected by a strong passcode to be secure...
Without iTunes there are no drivers and without drivers there should be no access.
Again I will double check.
 

f4780y

Super Moderator
Staff member
Joined
Sep 11, 2010
Messages
7,113
Reaction score
652
Location
Troon, Scotland
Thanks for checking on this. While our consultant demonstrated it to me, iTunes was not needed (he actually uninstalled it before the demo). He just used redsn0w to jailbreak and then used TotalCommander TPot to access file system. Did you try that way?

OK. Hope you don't pay this consultant too much! Either that, or put me on your payroll. Anyhoo, bygones! Here's my latest results.

YoungOne, this is a good lesson on being diligent and very precise in your experiments when trying to help folks out. That's not a criticism! Just a bit of guidance :) Always try to compare "like for like".

So, here's what I tried.

I secured my iPad with a strong passcode (you can do this in settings, and it makes the passcode longer than 4 digits) - This is just good practice and makes the encryption of the file system more secure.

I started with a clean build PC - No iTunes.
Connected the iPad whilst it was still LOCKED. The device drivers loaded to allow Windows to see the Camera Roll. This is what you would expect on a PC without iTunes.
Result - I COULD NOT SEE ANY CONTENT ON THE CAMERA ROLL. The device is there, but you don't get access because the encryption is secure and in place. This is very good news.

Second, I installed latest iTunes, and just like my previous test, when I connected my locked iPad it said the iPad had to be UNLOCKED before it could proceed. I DID NOT do this.

I installed TotalCommander and the plugin and tried to access the iPad. I COULD NOT. The iPad IS secure as long as you DO NOT unlock it.

Now, I finally unlocked the iPad, and presto, iTunes, Windows, and TotalCommander can SEE the iPad. Only once the passcode is provided on the iPad is the encryption disabled.

Now, the interesting bit. I uninstalled iTunes and everything else I could think about (bonjour, apple device service, etc.). And what do you know?
I could STILL see the iPad pictures in the camera roll. and TotalCommander could STILL see the contents of the iPad. So, it looks like the encryption details are stored close to the device driver and therefore once unlocked it remains unlocked on the PC.

This confirms what you saw from the consultant offthegrid, but it is obviously a flawed hypothesis. Because the device was already unlocked on his laptop, just uninstalling iTunes did not remove the details. I am sure there will be a way to get rid of the key somehow, but just removing iTunes (and the other Apple components) DOES NOT DO IT.

Therefore, in a real world scenario, without access to the passcode, I think I stand by my position, that everything IS SECURE, provided the passcode to the device is not used. So a theif plugging a device into a new PC and jailbreaking, won't get access to the file system easily at all.

OK? If anyone else would like to test it out, I'd be happy to hear! You up for it again YoungOne? :D

Another couple of fun filled hours ;)
 
Last edited:

graywolf

iPF Noob
Joined
Aug 22, 2010
Messages
3,648
Reaction score
35
Location
Raleigh, NC USA
f4780y said:
I'll check again. But YoungOne. Please confirm. You had a strong passcode lock on the iPad as well, yes? It must be protected by a strong passcode to be secure...
Without iTunes there are no drivers and without drivers there should be no access.
Again I will double check.

Ok... So. My password is 5 units long, numbers, so more secure. In theory, you could create another user on the pc and give it a try because there shouldn't be drivers? I will try. I think I used to have iTunes on the xp partition on the pc.
 

Most reactions

Latest posts

Top