Monthly Archives: July 2008

[iPhone] Firmware 2.0 Unlocked

It is rumored that the iPhone Dev Team yet made it to jailbreak and unlock firmware 2.0. The firmware revision that has been found some hours ago on Apple’s download servers seems to be the real deal, although not being published via auto-update yet.

The Pwnage Tool is currently undergoing little modifications and testings to fully support firmware 2.0. Note that these information seem to apply to the iPhone 2G only, not the new iPhone 3G. Since the new iPhone is expected to use a new bootloader version.

Once the new Pwnage Tool has been released, we’re gonna provide a HowTo. Check back regularly. For now you find our “old” Pwnage HowTo for firmware 1.1.4 here.

Anyway this is good news: congrats to the iPhone Dev Team. Live long and prosper, guys!!!

Update 12.07.2008: see video of Pwnage Tool 2.0 here (sadly Pwnage Tool is not yet publicly released)… though)…

[iPhone] iPhone AppStore already accessable via iTunes

One day before the official launch of the iPhone 3G, over here in Germany the Appstore is already accessable. This comes in a moment where some sites and forums rumor that the new 2.0 firmware can also already be downloaded for offline update. We recommend to not download the 2.0 firmware yet. The Pwnage tool does not support firmware 2.0. Be warned if you brick your iPhone.

How to access AppStore (one day before offical launch)

  • start iTunes
  • open the iTunes Store
  • search for an App like Super Monkey in the iTunes Store
  • et voilà

Types of programs you can buy or download for free

The AppStore is a major step into the right lane. Apple did the right thing here. Prices vary depending on the application. The highest price we’ve seen yet is 25.99€ for “Universalis”. “Universalis” contains psalms, prayers and readings from the Catholic Liturgy. Believing in God seems to require the iPhone nowadays.

Even Erica Sadun (kudos!) got some titles into the AppStore, like her famous To Do List, that we all know from the AppTab Installer days.

Enuff said: get yourself an own impression and start your iTunes, now…

[iPhone] The final Countdown until 3G

Two days left and counting… On friday 11th of july, eventually the iPhone 3G / UMTS will be released worldwide. In advance to that event leading companies in Germany and Switzerland announced to switch from different smartphone platforms to the iPhone

The conservative german publishing house Axel Springer said to migrate to Apple’s eco system within the next five years (read here) – this explicitly includes the staff’s use of the iPhone 3G. Aswell as Axel Springer the leading german bank company Deutsche Bank AG announced to switch from BlackBerry to the iPhone.

In 2007 France banned BlackBerry use by officials, because of feared snooping of state secrets by U.S. agencies. Although BlackBerry is a canadian product by Research in Motion, it was rumored by security experts that BlackBerry routed its traffic thru servers located in the U.S. and the U.K. (read MSNBC news here).

[e-Biz] Axel Springer AG to migrate to Apple Workstations

The conservative Axel Springer AG announced to migrate PC workstations to Apple computers within the next five years. Axel Springer’s CEO Dr. Mathias Döpfner said:  “Apple is a synonym for creativity, innovation, aesthetics and competence and is therefore the ideal partner for Axel Springer”.

Apple will like this news, but are Apple user typically consumers of Axel Springer’s media?

[MultiPlatform] TrueCrypt 6.0 released

TrueCrypt is the leading open-source software to encrypt drive volumes. It supports Windows, MacOS X, and Linux. Version 5.1 has been released just 3.5 months ago in march. Now the Truecrypt team has released version 6.0 with the following features:

  • Parallelized encryption/decryption on multi-core/multi-cpu systems – thus demanding less time for the en- and decryption operations
  • Windows Vista, XP, 2003, 2008: run encrypted operating systems from hidden volumes (!)
  • Windows Vista, 2008: encrypt whole drives (incl. extended/logical partitions)
  • MacOS X: Create hidden volumes

Anyway: Permanent decryption has been removed from TrueCrypt’s bootloader, in order to support hidden operating system volumes. Permanent decryption now has to be done using the boot disk.

Enjoy a major step in to more privacy and download TrueCrypt 6.0 here.

[Anonymity] How To Protect Email Addresses against Spam

The Novel

Since the very beginning of the internet in its occurence as the world wide web (www) in the mid of the 1990s there were bad guys.Those bad guys rapidly realized how to make a quick buck out of the technological inexperience of the new inhabitants of the www. It was the days when people had their first contact with HTML. First projects were showing the people’s dogs and the family and looked kinda ugly – from nowadays view.

So people began to show parts of their privacy to the masses almost without fully realizing that their website from now on was visible all over the world. And they added a contact @ character, hoping that other cool people would send them emails and telling them how cool the website about their dog is. But the people didn’t anticipate the guys who knew how to make money from pulling a fast one on others.

One of the first things the bad guys noticed was the fact that the principle of bulk mails could be easily transferred to the internet. So the bad guys began to manually collect email addresses from the websites of the dogowners and all the others. But what to advertise via email? We nowadays know how this question was answered. Those bad guys began to setup porn websites. They often used illegally copied photos of naked women or sex scenes from magazines.

They sent the dogsowners and all the others invitations for porn- or erotics-sites and appealed to their sexual drives. Many of the early days’ porn site operators were email address collectors themselves. They knew porn would sell till the end of mankind.

It didn’t take long and someone improved the way of collecting email addresses. He coded a robot (spam spider) who was able to scan the websites and search for those two HTML tags:

  • <a href="http://www.linktonextsite.org">Link To Next Site</a>
  • <a href="mailto:mymailaddress@mywebsite.org">Send me a Mail</a>

I bet you can already smell how the story went on. The email addresses were written automatically into databases. And while the internet was growing and the amount of websites escalated virtually thru the roof the amount of people who understood to make a living from sending porn, erotic and viagra mails to the people also increased.

Although the novel above may not be 100% historical accurate, the problem of spam nowadays has become even worse.

Today it is estimated that 90% of the emails sent around the globe are spam.

What can we do about it?

Fight Spam Technically

As we’ve seen how the system works. Bad guys use automated robots to search the www for exploitable email addresses and write them back into their databases. So as a website operator the one and only question to take into consideration is: how to hide the email addresses?

Some time ago we’ve found a very nice way, that we are using for quite some years. We don’t know where we found it – otherwise we would credit the guy who wrote it.

Instead of using

  • <a href="mailto:mymailaddress@mywebsite.org">Send me a Mail</a>

we slightly obfuscate the email address by using Javascript. Every webbrowser nowadays perfectly understands Javascript, Ajax and even more. See here what we do:

  • <a href="#" onclick="mp='@';mp='mymailaddress'+mp;mp+='mywebsite.org';this.href=mp;">Send me a Mail</a>

So what’s happening here?

This integrated javascript reacts after you clicked on the “Send me a Mail” link. It then uses the temporary variable mp to reassemble your email address. By not putting the email address as a string into your HTML source of your website this scripts prevents (almost) any spam robot to recognize your email address. As a matter of course we recommend to use this technique from the first day a website is on the internet.

You can easily modify this javascript by changing the variable to another name or by changing the order.

We hope you had some fun in this lesson and appreciate your feedback.

[MacOS] HowTo Update to MacOS X 10.5.4

Abstract

Just four weeks ago Apple released update 10.5.3. It seems it didn’t hold too long, since 10.5.4 has been released two days ago. Features of 10.5.4 include Apple’s recent security updates, RAW image support for many cameras, Airport bugfixes, iCal bugfixes, Safari bugfixes, Spaces and Exposé bugfixes (read all details here). To sum things up: Apple recommends to apply this update as soon as possible.

So the most unanswered question for us white-box OS X users: how to update my Hackintosh? There are two different ways, depending which revision you’re running currently. If you are on 10.5.3 update is fairly easy. If you are on a revision below 10.5.3 you need to apply some more steps when using the combo update. Follow our short instructions and your are finished virtually before you even started ;-)

Update from 10.5.3

You can simply use the auto-updater from within MacOS X’ Software Update (see picture).

Apple Software Update


Update from 10.5.2, 10.5.1 or even earlier

Get yourself the comboupdate from here: Download,
then apply the instructions we already described here. Because the instructions for updating to 10.5.2, 10.5.3 or using the 10.5.4 combo update are the same.

Enjoy and tell us about your experiences.

[iPhone] Swisscom to Offer iPhone 3G as Prepaid Mobile Phone

For all the people around the world, who desperately wanna get that new gadget called iPhone 3G, this is good news. Swisscom – (attention pleonasm) the swiss carrier – announced to offer the iPhone 3G with a prepaid contract. Using a prepaid tariff, prices for the iPhone 3G will vary from 519 CHF (=510 US$, =325€) for the 8GB version to 619 CHF (=610US$, =385€) for the 16GB version.

Anyway it has been confirmed that Swisscom’s iPhone will definitely be SIM-locked to the Swisscom network. Since nobody actually knows how to circumvent the new bootloader (only a few people just got their hands on a new iPhone) – we recommend not to buy an iPhone 3G early after release.

[iPhone] Debitel to Sell 3G iPhone in Germany

The german resell provider Debitel will sell the new iPhone 3G. Contracts have been closed between T-Com and Debitel. Debitel is now allowed to distribute iPhone thru their own Dug stores and thru the Metro-Group’s electronic markets Media Markt and Saturn. Karstadt and Galeria-Kaufhof stores may follow soon. Though it is rumored that Debitel’s iPhones tariffs won’t differ from the original T-Mobile tariffs. Anyway we can now expect it to become a gadget really for everyone here in germany. Good buy then, snobbish avantgarde…