Jailbreak without passcode?

[f4780y]

Just to confirm. Tested it out with strong password, TotalCommander+TPot.
Depressingly easy. Full access to the file system. No specialist skills at all

Thanks for the heads up offthegrid. Sometimes you get so bogged down in technical detail, you need to get taken back to kindergarten for a lesson! Cheers.

By the way YoungOne. You'll love that. Download TotalCommander and the TPot plugin. File management over USB, really simple. Google it, and don't forget to buy the shareware if you like it

 

[f4780y]

OK. Hold the bus!

A bit more testing. I followed through on your thoughts about the consultants laptop.

I connected my iPad to my desktop which it is not synced with. iTunes immediately told me the iPad was locked and I had to unlock it. I was not able to access the device at all via TotalCommander. Completely secure. It was not until I unlocked the device and iTunes recognised the device that access was granted to TotalCommander.

So, I am satisfied again! I think! It IS SECURE. The thief would need the passcode or also to steal the PC that the iPad was synced to...

Hoorah. Not quite as dumb as I feared I was there! Still, an excellent nights fun. Thanks guys!

 

[graywolf]

OK. Hold the bus!

(slams on the brake)

 

[offthegrid]

OK. Hold the bus!

A bit more testing. I followed through on your thoughts about the consultants laptop.

I connected my iPad to my desktop which it is not synced with. iTunes immediately told me the iPad was locked and I had to unlock it. I was not able to access the device at all via TotalCommander. Completely secure. It was not until I unlocked the device and iTunes recognised the device that access was granted to TotalCommander.

So, I am satisfied again! I think! It IS SECURE. The thief would need the passcode or also to steal the PC that the iPad was synced to...

Hoorah. Not quite as dumb as I feared I was there! Still, an excellent nights fun. Thanks guys!

Thanks for checking on this. While our consultant demonstrated it to me, iTunes was not needed (he actually uninstalled it before the demo). He just used redsn0w to jailbreak and then used TotalCommander TPot to access file system. Did you try that way?

 

[graywolf]

Ok... So. I tried the USB ssh thing and got it to work. I have my pc dual booting 7 and xp. Installed it onto my flash drive so USB access is portable. Installed with 7 and iTunes in on 7. iTunes isn't on xp though, and it worked on xp. So it isn't secure? And the redsnow install a package thing is still an idea.

 

[f4780y]

I'll check again. But YoungOne. Please confirm. You had a strong passcode lock on the iPad as well, yes? It must be protected by a strong passcode to be secure...
Without iTunes there are no drivers and without drivers there should be no access.
Again I will double check.

 

[f4780y]

Thanks for checking on this. While our consultant demonstrated it to me, iTunes was not needed (he actually uninstalled it before the demo). He just used redsn0w to jailbreak and then used TotalCommander TPot to access file system. Did you try that way?

OK. Hope you don't pay this consultant too much! Either that, or put me on your payroll. Anyhoo, bygones! Here's my latest results.

YoungOne, this is a good lesson on being diligent and very precise in your experiments when trying to help folks out. That's not a criticism! Just a bit of guidance Always try to compare "like for like".

So, here's what I tried.

I secured my iPad with a strong passcode (you can do this in settings, and it makes the passcode longer than 4 digits) - This is just good practice and makes the encryption of the file system more secure.

I started with a clean build PC - No iTunes.
Connected the iPad whilst it was still LOCKED. The device drivers loaded to allow Windows to see the Camera Roll. This is what you would expect on a PC without iTunes.
Result - I COULD NOT SEE ANY CONTENT ON THE CAMERA ROLL. The device is there, but you don't get access because the encryption is secure and in place. This is very good news.

Second, I installed latest iTunes, and just like my previous test, when I connected my locked iPad it said the iPad had to be UNLOCKED before it could proceed. I DID NOT do this.

I installed TotalCommander and the plugin and tried to access the iPad. I COULD NOT. The iPad IS secure as long as you DO NOT unlock it.

Now, I finally unlocked the iPad, and presto, iTunes, Windows, and TotalCommander can SEE the iPad. Only once the passcode is provided on the iPad is the encryption disabled.

Now, the interesting bit. I uninstalled iTunes and everything else I could think about (bonjour, apple device service, etc.). And what do you know?
I could STILL see the iPad pictures in the camera roll. and TotalCommander could STILL see the contents of the iPad. So, it looks like the encryption details are stored close to the device driver and therefore once unlocked it remains unlocked on the PC.

This confirms what you saw from the consultant offthegrid, but it is obviously a flawed hypothesis. Because the device was already unlocked on his laptop, just uninstalling iTunes did not remove the details. I am sure there will be a way to get rid of the key somehow, but just removing iTunes (and the other Apple components) DOES NOT DO IT.

Therefore, in a real world scenario, without access to the passcode, I think I stand by my position, that everything IS SECURE, provided the passcode to the device is not used. So a theif plugging a device into a new PC and jailbreaking, won't get access to the file system easily at all.

OK? If anyone else would like to test it out, I'd be happy to hear! You up for it again YoungOne?

Another couple of fun filled hours

 

[graywolf]

I'll check again. But YoungOne. Please confirm. You had a strong passcode lock on the iPad as well, yes? It must be protected by a strong passcode to be secure...
Without iTunes there are no drivers and without drivers there should be no access.
Again I will double check.

Ok... So. My password is 5 units long, numbers, so more secure. In theory, you could create another user on the pc and give it a try because there shouldn't be drivers? I will try. I think I used to have iTunes on the xp partition on the pc.