Newsgroup: it.comp.macintosh
Titolo: User Agent dell'iPhone

Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML,
like Gecko) Version/3.0 Mobile/1A543a Safari/419.3
Wow.
-- 
Blessed are the meek, for they shall inherit the earth

 CPU like Mac OS X
figa, ma cos'è?
-- 
I've always been more concerned with users. )\._.,--....,'``.
Programmers do their work but once, while  /,   _.. \   _\  (`._._,
users are saddled with it ever thereafter. `_.-(,_..'--(,_..'`-.;.'

 figa, ma cos'è?
Serve ai coder dei siti web per capire se il sito è visto su un ifonino
oppure no.
-- 
 - ∞
-- 
http://infinite-labs.net


(...) Apple run ordinary user applications as SUID root - as effective
UID 0. This is a total no-no and has been known and understood to be
such for a long time. Cocoa programming guru Don Yacktman once
delineated the various associated dangers: the input managers, the
Services menu, and the relative ease with which the malfeasants can get
in. SUID root Cocoa apps are so dangerous it's not recommended to even
use the keyboard in them: an input manager can usurp control and do
anything and input managers always run in the context of the client
process - which in such case is root. Meaning anything is possible - any
amount propagation and destruction. Meaning anything can be hidden
anywhere - and left lurking to come back at a prescribed date.
And meaning you lose control of your own computer / smartphone and it's
no longer yours. So it can start spreading malware, hang out in botnets,
send out mail bombs with exploits - and even ready itself to
self-destruct on the birthday of Steve Jobs. (...)
------------------------------------------------------------------------
(...)
Apple's web applications on the iPhone are already crashing. This is
never popular but it becomes especially critical when the applications
are running as root.
qui uno dei dump:
Process:         MobileMail [67]
Path:            /Applications/MobileMail.app/MobileMail
Version:         N/A (N/A)
Code Type:       0000000C (Native)
Effective UID:   0
Parent Process:  SpringBoard [15]
Date/Time:       2007-06-29 20:42:06.479 -0400
OS Version:      OS X 1.0 (1A543a)
Report Version:  6
Exception Type:  00000020
Exception Codes: 0x8badf00d
Crashed Thread:  Unknown
Thread 0:
0   libSystem.B.dylib                   0x30017600 0x30000000 + 95744
1   libSystem.B.dylib                   0x300175ef 0x30000000 + 95727
2   libSystem.B.dylib                   0x30001a0b 0x30000000 + 6667
3   LayerKit                            0x30afbaf8 0x30ac7000 + 215800
4   UIKit                               0x323c3910 0x323ab000 + 100624
5   UIKit                               0x323c3b54 0x323ab000 + 101204
6   UIKit                               0x3245d448 0x323ab000 + 730184
7   UIKit                               0x323d9a6c 0x323ab000 + 191084
8   UIKit                               0x323e841c 0x323ab000 + 250908
9   AddressBookUI                       0x3259d800 0x32595000 + 34816
10  AddressBookUI                       0x3259d8cc 0x32595000 + 35020
11  Foundation                          0x308c5f13 0x3085e000 + 425747
12  CoreFoundation                      0x303fd8a1 0x303e7000 + 92321
13  CoreFoundation                      0x303fd5fb 0x303e7000 + 91643
14  GraphicsServices                    0x3098bb64 0x30988000 + 15204
15  UIKit                               0x323b9928 0x323ab000 + 59688
16  UIKit                               0x323b1f54 0x323ab000 + 28500
17  UIKit                               0x323b75dc 0x323ab000 + 50652
18  MobileMail                          0x000202e4 0x1000 + 127716
19  MobileMail                          0x00005a24 0x1000 + 18980
Thread 1:
0   libSystem.B.dylib                   0x300053f4 0x30000000 + 21492
1   libSystem.B.dylib                   0x30005373 0x30000000 + 21363
2   GraphicsServices                    0x3098e258 0x30988000 + 25176
3   libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Thread 2:
0   libSystem.B.dylib                   0x300053f4 0x30000000 + 21492
1   libSystem.B.dylib                   0x30005373 0x30000000 + 21363
2   CoreFoundation                      0x303fdaa7 0x303e7000 + 92839
3   CoreFoundation                      0x303fd5fb 0x303e7000 + 91643
4   WebCore                             0x315b198c 0x31351000 + 2492812
5   libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Thread 3:
0   libSystem.B.dylib                   0x30018fd8 0x30000000 + 102360
1   libSystem.B.dylib                   0x3009aa64 0x30000000 + 633444
2   libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Thread 4:
0   libSystem.B.dylib                   0x3008b224 0x30000000 + 569892
1   libSystem.B.dylib                   0x30046b78 0x30000000 + 289656
2   CoreFoundation                      0x3040b0e1 0x303e7000 + 147681
3   libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Thread 5:
0   libSystem.B.dylib                   0x300053f4 0x30000000 + 21492
1   libSystem.B.dylib                   0x30005373 0x30000000 + 21363
2   CoreFoundation                      0x303fdaa7 0x303e7000 + 92839
3   CoreFoundation                      0x303fd5fb 0x303e7000 + 91643
4   Foundation                          0x308e9d3f 0x3085e000 + 572735
5   Foundation                          0x308c5cd1 0x3085e000 + 425169
6   Foundation                          0x308c5bd7 0x3085e000 + 424919
7   libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Thread 6:
0   libSystem.B.dylib                   0x300053f4 0x30000000 + 21492
1   libSystem.B.dylib                   0x30005373 0x30000000 + 21363
2   CoreFoundation                      0x303fdaa7 0x303e7000 + 92839
3   CoreFoundation                      0x303fd5fb 0x303e7000 + 91643
4   Message                             0x30b960f7 0x30b43000 + 340215
5   Message                             0x30b95a83 0x30b43000 + 338563
6   Message                             0x30b7afa5 0x30b43000 + 229285
7   Message                             0x30b83557 0x30b43000 + 263511
8   Message                             0x30b77ec9 0x30b43000 + 216777
9   Message                             0x30b8b129 0x30b43000 + 295209
10  MessageUI                           0x3260dc00 0x325f6000 + 97280
11  Foundation                          0x308bb78d 0x3085e000 + 382861
12  Message                             0x30b969eb 0x30b43000 + 342507
13  Message                             0x30b96d71 0x30b43000 + 343409
14  Message                             0x30b9547b 0x30b43000 + 337019
15  Foundation                          0x308c5cd1 0x3085e000 + 425169
16  Foundation                          0x308c5bd7 0x3085e000 + 424919
17  libSystem.B.dylib                   0x300173db 0x30000000 + 95195
Unknown thread crashed with unknown flavor: 4, state_count: 1
Binary Images:
    0x1000 -    0x4cfff +MobileMail UUID
(8859A31CE4874DF1AE2A9A92B1B717A5)
/Applications/MobileMail.app/MobileMail
0x2fe00000 - 0x2fe39fff  dyld UUID (64B27A87A815459D953C3260809F811A)
/usr/lib/dyld
0x30000000 - 0x300fdfff  libSystem.B.dylib UUID
(DBF276FD7536468A8EC31DC5889AAEC7) /usr/lib/libSystem.B.dylib
0x3015d000 - 0x3019efff  libstdc++.6.dylib UUID
(CD0A5DCC6A164C86B91C79E15C552E9E) /usr/lib/libstdc++.6.dylib
0x301c7000 - 0x301d4fff  AddressBook UUID
(7D1B2DA0EC1D4A1382D5FE0B91851ACA)
/System/Library/Frameworks/AddressBook.framework/AddressBook
0x301de000 - 0x301e7fff  AppSupport UUID
(4D84C1C39C7C4DB9981FEBF8E48FF450)
/System/Library/Frameworks/AppSupport.framework/AppSupport
0x301ef000 - 0x30236fff  CFNetwork UUID
(9C95278D4B12440EB624E498C039538B)
/System/Library/Frameworks/CFNetwork.framework/CFNetwork
0x3026d000 - 0x3032cfff  Celestial UUID
(15045615F83249D49720253EBDF9132A)
/System/Library/Frameworks/Celestial.framework/Celestial
0x3036b000 - 0x303bcfff  CoreAudio UUID
(D2155600AF2A4EA2A22CB018E094AF48)
/System/Library/Frameworks/CoreAudio.framework/CoreAudio
0x303e7000 - 0x30460fff  CoreFoundation UUID
(DE3331E0CE4D43DFAFAD084E689DE12F)
/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation
0x30513000 - 0x307aafff  CoreGraphics UUID
(FDAFC52F5C724EB6BADC1176558E5304)
/System/Library/Frameworks/CoreGraphics.framework/CoreGraphics
0x3081a000 - 0x30835fff  CoreTelephony UUID
(7B909435DABA409098995CC24EE26587)
/System/Library/Frameworks/CoreTelephony.framework/CoreTelephony
0x3084b000 - 0x30855fff  CoreVideo UUID
(0CC5832A160D4508B4B678703F3FFD6C)
/System/Library/Frameworks/CoreVideo.framework/CoreVideo
0x3085e000 - 0x30909fff  Foundation UUID
(8360F6E9E0044FDBB24A233E6A43EB14)
/System/Library/Frameworks/Foundation.framework/Foundation
0x30988000 - 0x30990fff  GraphicsServices UUID
(1C4876C189F34562ACF6B7D44770FF97)
/System/Library/Frameworks/GraphicsServices.framework/GraphicsServices
0x30998000 - 0x30a20fff  IOKit UUID (03E5752F94E3424589F1C596ED08815D)
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x30a3c000 - 0x30a9bfff  JavaScriptCore UUID
(4479A3420C764FA395933A371D148D6D)
/System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore
0x30ac7000 - 0x30b17fff  LayerKit UUID
(B9468BD4F4F041C3ADA50B830305E7A2)
/System/Library/Frameworks/LayerKit.framework/LayerKit
0x30b37000 - 0x30b3ffff  MBX2D UUID (1583F2C2C78B4058BD8C1DF338738C05)
/System/Library/Frameworks/MBX2D.framework/MBX2D
0x30b43000 - 0x30be9fff  Message UUID (27857D95241E4AFCB70B016C3AA5C8C6)
/System/Library/Frameworks/Message.framework/Message
0x30ca8000 - 0x30d5efff  libcrypto.0.9.7.dylib UUID
(632A0B6896CD450582B63F63BC561999) /usr/lib/libcrypto.0.9.7.dylib
0x30d97000 - 0x30e7ffff  libiconv.2.dylib UUID
(BFF8FECDB7AF4996AA7E47BA4E9D7A97) /usr/lib/libiconv.2.dylib
0x30e8a000 - 0x30e99fff  libobjc.A.dylib UUID
(1DF02759041D49AF9938563D172FC491) /usr/lib/libobjc.A.dylib
0x30ea3000 - 0x30f76fff  libicucore.A.dylib UUID
(C7BEFA4022D2414DBD2EF88A0285AC8E) /usr/lib/libicucore.A.dylib
0x3101c000 - 0x31047fff  libsqlite3.0.dylib UUID
(2F122880FFAC48318A753E1D788E7409) /usr/lib/libsqlite3.0.dylib
0x31065000 - 0x3108bfff  libssl.0.9.7.dylib UUID
(57F8FB4B1D104F8083173EBE067B613E) /usr/lib/libssl.0.9.7.dylib
0x31097000 - 0x31127fff  libxml2.2.dylib UUID
(EB77B5D5553B41659DA3EABDFF5E990E) /usr/lib/libxml2.2.dylib
0x31206000 - 0x312d2fff  MeCCA UUID (5031D4A8F03B4605A6233D351EF790E0)
/System/Library/Frameworks/MeCCA.framework/MeCCA
0x3131a000 - 0x31341fff  Security UUID
(7596924807BF47BA9F50D5748042107A)
/System/Library/Frameworks/Security.framework/Security
0x31351000 - 0x31641fff  WebCore UUID (F352EB10A6EB4A53963DC586589CDEFD)
/System/Library/Frameworks/WebCore.framework/WebCore
0x31782000 - 0x317d6fff  WebKit UUID (1AF51C0F747D47709E1ABBB0A117FC91)
/System/Library/Frameworks/WebKit.framework/WebKit
0x31813000 - 0x3183cfff  SystemConfiguration UUID
(7FCD389840814C6EB34074C7787862D1)
/System/Library/Frameworks/SystemConfiguration.framework/SystemConfigura
tion
0x318d1000 - 0x318dffff  libz.1.dylib UUID
(019DB9B198DA46E98600C1417D98E6E9) /usr/lib/libz.1.dylib
0x3190e000 - 0x31910fff  CoreSurface UUID
(7280076DC074497CB145741A15FCE472)
/System/Library/Frameworks/CoreSurface.framework/CoreSurface
0x3196a000 - 0x31973fff  libIOAudio2User.dylib UUID
(BB1533CF70F645FBAF6BB767A6A531A7) /usr/lib/libIOAudio2User.dylib
0x3197a000 - 0x31ab7fff  AudioToolbox UUID
(3049B1E982804982B3AE837C9367769D)
/System/Library/Frameworks/AudioToolbox.framework/AudioToolbox
0x31baf000 - 0x31bb1fff  MBXConnect UUID
(B5E73A95A84E4706A922D56674D4809D)
/System/Library/Frameworks/MBXConnect.framework/MBXConnect
0x31bb4000 - 0x31be5fff  OpenGLES UUID
(3405A88B732E4DF3A127E182483D9E69)
/System/Library/Frameworks/OpenGLES.framework/OpenGLES
0x31bf8000 - 0x31bf9fff  IOMobileFramebuffer UUID
(AE80733EB6514BB88A6287971C7E09C9)
/System/Library/Frameworks/IOMobileFramebuffer.framework/IOMobileFramebu
ffer
0x31c38000 - 0x31c3ffff  libgcc_s_v6.1.dylib UUID
(C3CE0B41C9CA490EAEADA6D7EB997082) /usr/lib/libgcc_s_v6.1.dylib
0x31db9000 - 0x31dbcfff  liblockdown.dylib UUID
(30A0EB0C05724FA487617B860E360B88) /usr/lib/liblockdown.dylib
0x3225d000 - 0x32269fff  MobileBluetooth UUID
(5F13101DF17B442D8DE5CD0BDB50D7AB)
/System/Library/Frameworks/MobileBluetooth.framework/MobileBluetooth
0x3226f000 - 0x32273fff  BluetoothManager UUID
(E00ECB53D4B5426A818DA8D77CD1B09C)
/System/Library/Frameworks/BluetoothManager.framework/BluetoothManager
0x32363000 - 0x32366fff  ITSync UUID (B02A31E7730A46BCA6B336F097D542C4)
/System/Library/Frameworks/ITSync.framework/ITSync
0x3236b000 - 0x3236dfff  URLify UUID (54B6437BCD3A452F9CC7493CB9E010FF)
/System/Library/Frameworks/URLify.framework/URLify
0x323ab000 - 0x324f3fff  UIKit UUID (8A129F9979114365B637E144A3C67868)
/System/Library/Frameworks/UIKit.framework/UIKit
0x32595000 - 0x325d4fff  AddressBookUI UUID
(0E6FBEAA0D9C411FB1F0794F35D2CFBA)
/System/Library/Frameworks/AddressBookUI.framework/AddressBookUI
0x325f6000 - 0x3261dfff  MessageUI UUID
(ED6F6EA00B1346BEB98F00733C936922)
/System/Library/Frameworks/MessageUI.framework/MessageUI
0x326d8000 - 0x32702fff  Preferences UUID
(26FA104E4D88438285B988DDADDE39D6)
/System/Library/Frameworks/Preferences.framework/Preferences
------------------------------------------------------------------------
(...)
The iPhone comes with the root account enabled. It doesn't matter the
reason given for this blooper: enabling the root account is a Bad
Thing™. The only argument ever given for enabling it is for destroying
it and changing the sudo requirement to the root password and not that
of an admin. But in this case the root account on the over one half
million iPhones already sold (and presumably in use) is already
compromised.
[The root password is 'dottie'. The admin ('mobile') password is
'alpine'. Clever thinking.]
Put all the above together - the root account enabled (and now wide
open) together with Cocoa web apps running as root that also are
demonstrably crash prone and therefore exploitable - and you have the
makings of a telephony Armageddon.
(...)
Commento: in merito ci sono due correnti di pensiero in rete: alcuni
pensano che questa storia dell pw di root sia stata "programmata" da
apple per buttare fumo negli occhi degli aghers (ari appro anche DVDJohn
si sta lanciando nell'hack della procedura di attivazione dell'iPhone),
altri che pensano Apple abbia chiuso l'iphone per questo motivo e che lo
aprirà solo dopo aver attivato il trustzone del processore
tutti rumors comunque, sia chiaro


)


  È su qualche tuo sito? Avevi messo i campanelli d'allarme? ;-)
-- 
Nicola D'Agostino
<!-- 
http://www.nicoladagostino.net
 -->
<!-- 
http://www.storiediapple.it
 -->
<!-- 
http://www.nezmar.com
 -->

   È su qualche tuo sito? Avevi messo i campanelli d'allarme? ;-)
LOL! Gia'. Plin plin


 figa, ma cos'č?
Un AMR1176JZF da 600MHz circa.
-- 
"Imagination is more important than knowledge"
Albert Einstein 
1879-1955 

 Un AMR1176JZF da 600MHz circa.
vuoi dire ARM? :?
avevo letto non so dove che era un processore samcocks a 550...


 makings of a telephony Armageddon.
apple e' sempre talmente avanti che per infettare i suoi iPhone e'
necessario sviluppare non semplici virus, ma delle viral web apps.
Immagino che gli h4k0r saranno tutti intenti a escogitare qualcosa per
rubare i contatti della rubrica dei VIPs


 sviluppo
gran macchina quella, degna progenitrice nei rally della R5 Turbo giallo
bava





)
  Notevole, grazie. :)


 UID 0. 
  Interessante. Grazie. :)


 the powerful PXA320 from Marvel
mi sono immaginato il vespone dell'uomoragno


 at 800MHz.The mobile GPU from NVidia would be the GoForce 6100"
Hum.. credo che Engadget abbia tirato fuori quei dati grazie ai solii
pazzi che hanno fatto a apezzi l'ultimo arrivato.
MacBidouille solitamente è attendibile... ma che addirittura abbiano
messo una GeForce 6100 dentro quel coso mi sembra una cretinata (a meno
che questa scheda non sia una "comune" scheda grafica).








 mi sono immaginato il vespone dell'uomoragno
  ;-) Comunque se ricordo bene manca una "l" alla fine, no?


 che questa scheda non sia una "comune" scheda grafica).
  Di schede grafiche non me ne intendo ma quella dovrebbe essere una
scheda per dispositivi portatili e sono almeno due o tre anni che leggo
di notevoli passi in avanti in quel settore. Mi sono fatto l'impressione
che mentre sul versante desktop siamo allo stallo o quasi il "far west"
dello sviluppo schede video si sia spostato su
cellulari/pda/palmari/tablet.


 rubare i contatti della rubrica dei VIPs
  E infettare o "bucare" l'iPhone diventerā il loro nuovo Graal, ben pių
che fare altrettanto ai Macintosh.
