Code Genocide

With the latest iPhone firmware update (2.2), Apple fixed several “security holes”, one of which broke KillExchangeLocks version 2.0.

The fix that broke things was CVE-ID:  CVE-2008-4229

Impact: Restoring a device from backup may not re-enable the Passcode Lock

Description: The Passcode Lock feature is designed to prevent applications from being launched unless the correct passcode is entered. A race condition in the handling of device settings may cause the Passcode Lock to be removed when the device is restored from backup. This may allow a person with physical access to the device to launch applications without the passcode. This update addresses the issue by improving the system’s ability to recognize missing preferences. This issue does not affect systems prior to iPhone OS 2.0 or iPhone OS for iPod touch 2.0. Credit to Nolen Scaife for reporting this issue.

http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html

The key parts here is the resoultion, “This update addresses the issue by improving the system’s ability to recognize missing preferences”, and the person to blame is Nolen Scaife for reporting this issue.

KillExchangeLocks version 3 does not implement the ideal solution as Apple has done a pretty good job on their fix. Instead of removing the passcode automatically like before, instead you now force the settings app to alow you to remove the passcode, as if you had setup a passcode without using Exchange.

This still times out every 24 hours like before, as Apple is actively querying the Exchange server every 24 hours to update and/or validate the security settings.

The up side is you should only have to run this part once, and you will always be able to remove the passcode.

Version 3 gives you the option if you want to modify your Auto Lock timeout.

The problem here is that the iPhone will over write any change if you go into the Settings app and click on the General tab (which shows your timeout setting).

Therefore this could need to be reset often, if you go into Settings -> General a lot.

I added some extra Time out levels for your convience.

You can now choose between: Never, 1 min, 2 min, 3 min, 4 min, 5 min, 10 min, 15 min, 20 min, 25 min, 30 min, 35 min, 40 min, 45 min, 50 min, 55 min, and 1 hour time out levels.

As I said before, this is by no means the ideal fix, but it is the only way I have found so far, and I figure this is better then having nothing.

If you really want a better fix in place, I would ask you to think about donating to this project as that would make it easier for me to work on this project then other paying projects. It is in no way required, but welcomed. If you wish to donate you can do so using PayPal.

KillExchangeLocks is available in Cydia under Utilities.

iSteamy version 3.1 is the reason you shouldn’t release a new release right before you go out of town on a business trip.

Version 3.1 fixed a bug where some users could not register, but in the panic to get it released before leaving, ended up introducing a new bug of its own, which affected users when trying to save items or visit the Steam Room.

Version 3.2 has now been released on the repo’s which should fix both issues.

I apologize for the issues.

I have released iSteamy 3.1

This release fixes a bug in the registration and saving process where users were getting errors if a certain directory was missing on their device.

This update is highly recommended for all users.

I am happy to announce that iSteamy version 3.0 for iPhone firmware 2.x is now availble!

To download iSteamy using one of the following repositories.

Cydia

http://repo.codegenocide.com/cydia

Installer.app

http://repo.codegenocide.com

Visit http://www.isteamy.net for more information

If you develop iPhone SDK apps for the AppStore and the Jailbreak community you know the need bypass normal code signing in Xcode so you can do your own.

‘Provisioning Toggle’ quickly toggles you between requiring Provisioning in Xcode and not, and alerts you to the update using Growl.

‘Provisioning Toggle’ is a free download for Mac OS X.

http://codegenocide.com/files/provisioningToggle_1.0.zip

I have released iSteamy Version 3.0 Beta 2 for those of you who are beta testing.

Get this new version the same way you got the first version.

The big change in this version is the addition of a crash reporter, so if you get a crash it will be easier for me to get the data I need to fix the crash.

iSteamy version 3 is now completed and ready for beta testing.

I will be sending out beta details tomorrow (or I guess later today since its after midnight).

So if you want in on the beta please leave a comment or email.

Please only ask if you are serious about BETA testing and not just getting it early.

I need people who will file bugs.

Thank you all for waiting.

Update: The beta is now full. If you did not receive an invite we apologize.
Depending on how the beta goes we might open it up to more people, but hopefully we can just get the beta completed quickly and get it out to everyone.

Thank you for all your support

I thought I would let you all know that iSteamy for firmware 2.x is VERY VERY close to being done!

All that is left is Saving items, and the Password protecting ability.

I REALLY REALLY want to finish this up this weekend, but there is only one day left at I am already on 3am of that day. So we will see what happens.

If not this weekend it will be very soon after, but like I said, I am going to try for this weekend.

I am debating if I should do a full release when its ready or if I should do a limited beta first…

If you have a point-of-view, please leave it in the comments.

(If you vote for a beta, and you wish to be in that beta, also leave your email address or email me and let me know you would like to beta)

I will probably base my decision on your responses, so please let me know.

There has been some talk on twitter about how to create your own IPA file for your iPhone app, so I thought I would give the instructions that I have used to build an IPA before. Enjoy.

1. Create a folder on your desktop called “working”. Open that and create another folder inside of it called “Payload” (case-sensitive)
2. Move your iTunesArtwork file into the “working” folder and your .app into the Payload folder.
3. Open Terminal and run the following command: chmod -R 775 ~/Desktop/working/Payload
4. Go into your ProgName.app folder within Payload.
5. Double-click the Info.plist file. Make sure there is a item called: SignerIdentity with a value of: Apple iPhone OS Application Signing. If there is not, add it.
6. Zip it all up. Zip the iTunesArtwork and Payload folder. (So zip up what is inside of the working folder)
7. Rename the zip file to have the name you want, and the extension of ipa.
8. Double click to install with iTunes

I thought I would give everyone an update on iSteamy for iPhone firmware 2.x.

Yes it is coming.

When firmware 2.0 came out there were a lot of changes to the frameworks.

Unfortunately most of the things that were changed are things that iSteamy used.

I had it compiling on 2.0 and running, however a lot of things were not working. For example the photos would show but they were not clickable. Then once they were clickable about every other click and some tmies on first clicks the entire program would just crash. Not to mention I was very unhappy with the stability in version 2.0 and now it was WAY worse. It was just not anywhere near being ready for release.

If I had released it then everyone would hate it because it was basically unusable.

So I decided to take on the task of releasing something worth using.

I have therefore started porting iSteamy to the SDK.

No Apple is not likly to let it into the AppStore anytime soon (ok never), but that does not matter…

The changes to the frameworks in firmware 2.0 were to setup for the SDK, and really all SDK apps are at their base are normal 3rd party apps with DRM on them and then ALLOWED (if your lucky). This is aparent by the fact that it is possible to run AppStore apps on jailbraked devices. (Not that this is a good thing)

So once the conversion is over it will be released without the DRM and therefore without the need for the AppStore.

So bad news is its not ready yet, but the good news is once it is ready it should be the best release yet.

I have included some screenshots below.