The jailbreak is performed via the browser, no laptop or downloads are required and is as simple as going to a website and selecting unlock, tutorial and more information here:
iClarified Linky

It seems the jailbreak makes use of an exploit in the PDF application to execute the exploit code:
f-secure Article

The more worrying fact is that a malicious user could craft a PDF to pull down malware onto your device and from there they could recover contacts,emails,pictures they could even pull down tcpdump and grab any plain text web traffic etc etc. As the iPhone loads PDFs by default there is absolutely no protection for the user as they visit websites, however if you have jail-broken you iPhone someone has released a patch which prompts the user before loading a PDF:

If you haven’t already jail-broken your device i would strongly recommend you do and install the patch, at least until apple address the issue. There are no reports of the exploit in the wild but it will only be a matter of time! It would be quite interesting to compromise a corporate iPhone to access the internal network/exchange servers…….if it hasn’t already happened!

Nino

It seems apple are pulling their finger out and the error is much more verbose allowing the user to see exactly what’s wrong.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

#! /usr/bin/python
import xml.dom.minidom
import urllib2
import urllib
import os
import time
import sys
 
def main():
        #write out the start of the xml shizzle
        fileHandle = open ( 'combined.nessus', 'a' )
        fileHandle.write ( '<?xml version="1.0" ?>\n<NessusClientData>\n<Report>\n<ReportName>Combined</ReportName>\n' )
 
        #list the  files
        fileList = []
        counter = 0
        for root, subFolders, files in os.walk(sys.argv[1]):
                for file in files:
                        fileList.append(os.path.join(root,file))
 
        #enumerate the files and pick out the .nessus files
        for fname in fileList:
                if ('nessus' in fname) and ('combined.nessus' not in fname) :
                        counter += 1
                        print "Parsing: " + fname
                        from xml.dom import minidom
                        xmldoc = minidom.parse(fname)
                        reflist = xmldoc.getElementsByTagName('ReportHost')
                        for x in range(0 , reflist.length):
                                fileHandle.write ( reflist[x].toxml() )
 
        #write the end of the xml
        fileHandle.write ( '</Report> \n </NessusClientData>')
        fileHandle.close()
        print 'Combined a total of ' + str(counter) + ' files.'
 
if __name__ == '__main__':
 
    main()

Give the script your top level directory as the first argument and it will recusively find the .nessus files and ouput a file called combined.nessus then you can import it into the nessus client / parse as you normally would, job done

update:pasted the wrong code snippet, the attachment was correct tho!

Update 2: found and issue where by if you had the script generate the output file in the same directory that the .nessus files are the script would eat its own head, added a quick check.

No problem to fix tho if your using Linux, literally 5 commands ( 4 if you don’t want to screen it ):

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

user@host:~$ apt-cache search mp3 | grep volume
normalize-audio - adjusts the volume of WAV, MP3 and OGG files to a standard volume level
user@host:~$ sudo apt-get install normalize-audio
[sudo] password for user:
Reading package lists... Done
Building dependency tree
Reading state information... Done
....snip....
ldconfig deferred processing now taking place
user@host:~$ normalize-audio --help
Usage: normalize-audio [OPTION]... [FILE]...
Normalize volume of multiple audio files
....snip....
Report bugs to chrisvaill@gmail.com.
user@host:~$ screen -S mp3_normal
user@host:~$ find /media/storage/music/ -iname \*.mp3  -exec  normalize-audio {} \;
Computing levels...
 Chocolate.mp3      99% done, ETA 00:00:00 (batch  99% done, ETA 00:00:00)
Applying adjustment of -4.82dB to /media/storage/music/Snow Patrol/Final Straw/Chocolate.mp3...
find: ânormalize-audioâ terminated by signal 11ch   0% done, ETA 00:00:00)
Computing levels...
 Tiny Little Fract  99% done, ETA 00:00:00 (batch  99% done, ETA 00:00:00)
Applying adjustment of -5.55dB to /media/storage/music/Snow Patrol/Final Straw/Tiny Little Fractures.mp3...
find: ânormalize-audioâ terminated by signal 11ch   0% done, ETA 00:00:00)
Computing levels...
 Gleaming Auction.  61% done, ETA 00:00:02 (batch  61% done, ETA 00:00:02)
[ctrl+a+d]
user@host:~$ echo $profit

Job done!

With Tim Burton directing and staring Johnny Depp, Helena Bonham Carter and a music score by Danny Elfman you already know your in for the usual Tim Burton movie experience, and don’t get me wrong its great but is it getting a bit old……

Alvin and The Chipmunks 2: The Squeakquel

The name says it all really, I wanted to pull my eye balls out, tho one of the girl chipmunks was kind of hot……

Green Zone

Billed as better than The Bourne Identity series I was expecting big things from this, sadly all i got was a Hurt Locker rip off with camera shots so shaky i was nearly re producing my popcorn and fanta.  Still good for a watch if your a jarhead.

Hurt Locker

Excellent movie but i don’t know what sets it aside from all the other war movies and why it did so well in the Oscars, definitely one to see and pretty gritty in places.

Edge of Darkness

I honestly forgot what the movie title was and i had to IMDB it, yes it was that bad i had removed it from my mind!

Percy Jackson and the Lightning Thief

Caught this just before it ended at the cinema and I’m glad we did!  Excellent movie quite a good cast and Steve Coogan is brilliant in it!

Im looking to sell the mazda around the end of Feb so if you know anyone after one give me a shout.

Some pictures of the Mazda here:

Linky

The car is 1.5 years old with 20K miles on the clock and 9 months tax with the following spec

Petrol 1.6 Ltr

Leather bound steering wheel and gear stick
6 CD Changer
Piano black interior
Parrot hands free kit
Rear parking sensors

Cheers

Nino

Moon

Didn’t even see this advertised in the cinema. Quite a good movie and well worth the watch, it was the directors first movie AFAIK and it is a little predictable in places but still a good movie.

Law Abiding Citizen

Very smart movie and not the killing fest I had originally thought it was going to be. Not to give too much away but Butler would kick Michael Scofield’s ass!!!

2012

yes another disaster movie, we’re all going to dieeeeeee. I went into this not expecting much, I was just surprised john cussack was still alive! Again worth a watch but after any other movies that are on your list. Woody Haralson played an excellent character which was one redeeming feature.

Michael Jackson- This is it

Shit, thank god that “this is it”!

Avatar 3D

Simply amazing, there were no slow/boring parts just constant blue fun!!  I don’t know if it was the 3D or the movie but id definitely want to see it again

Where the Wild Things Are

I don’t know, thought it was shit but maybe I didn’t get it?

The taking of Pelham 123

Run of the mill action/thriller nothing smart and no thinking required but good for a watch.

Aliens Vs Monsters

Typical kids animated movie, good fun for all!

I have little to no interest in the following areas:

what random animal has been on on a farm
what random crop somone is growing
what random item someone is looking for on Mafia wars
who someone is whacking on mafia wars
how close someone is coming to being a vampire
what someone’s score is on some random jewel bashing game
how someone has adopted some “super poke pet” and it’s giving me a poke ( I think this one borders on sexual harassment and genticially modified animals)
Please, please create a block all applications option!

Many thanks

Jailbreaking the device allows you to install 3rd party apps that do not go through the same testing and could have malicious code. This has always been a worry of mine (yes I need to get out more) to the point of turning off the GSM data of the phone forcing it to use wifi and analysing the traffic over a 24 hour period to ensure my email and contacts were not being uploaded to china/russia!!

The iPhone firewall app in the cydia app store hooks into all the apps and when a connection is made the user is prompted to allow or deny the connection like a standard firewall. At the minute it looks like it only blocks GUI apps and any commands executed on the BSD under system are free to do what they want which is a little off putting. Then again I did say that we can’t trust 3rd party apps……. the firewall app is a 3rd party app….. Perhaps it’s time for the tin foil hats?

Nino

Section "ServerFlags"
 Option      "blank time" "0"
 Option      "standby time" "0"
 Option      "suspend time" "0"
 Option      "off time" "0"
EndSection

via ubuntu forums