Showing posts with label Hacked. Show all posts
Showing posts with label Hacked. Show all posts

Sunday, April 4, 2010

Apple iPad Jailbroken already



I had a feeling it would happen. But, wow this is sooner then expected.The first video has surfaced showing the iPad Jailbroken.

It was done by iPhone Dev Team member 'MuscleNerd' with a demo of it on YouTube showing the device jailbroken with root access and then him controlling the device from a command line. The details are unclear as to how the hack works but it all seems to point to an iPhone jailbreak called "Spirit". Spirit was written by a developer who goes by the name Comex.

Pretty interesting to see it working from a command line on another machine. I wonder now if someone will try to do something a bit more out there like installing Chrome OS, Android or any other flavor of Linux on the unit to see how it works. Then post a demo of it on YouTube to show it was done and it works.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
UPDATE: The word is coming out that the hack was done on the iPad with a 3.2 firmware that had some security holes which allowed the Team to break it using the iPhone 3.1.3 hack.

To jailbreak a phone using Spirit, one only has to surf on over to a particular Web site using the device's internal Safari browser. Grant the site permission to jailbreak the phone, and it'll take advantage of a bug found in the browser to gain root access to the device.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

PC Mag - First iPad Jailbreak Demoed...with Video!
Engadget - iPad 'Sprint' jailbreak demonstrated by MuscleNerd, now it really is magical (video)
CrunchGear - iPad jailbroken

Tuesday, January 20, 2009

Heartland Credit Card Processor System Hacked

(image found off iit users website)
Heartland Payment Systems credit card processor company's systems were hacked. It seems that last week they found evidence that pointed to their systems being compromised and intrusions by unauthorized guests. They notified the federal law enforcements about the breach immediately and also the major credit card vendors too. In a written statement the company told cardholders that they will not be responsible for unauthorized charges made on their credit cards.

"The company said it immediately took a number of steps to secure its systems. It also created a website -- www.2008breach.com -- to provide information about the incident.

Heartland delivers credit/debit/prepaid card processing, payroll, check management and payments solutions to more than 250,000 business locations across the United States."

if you are interested in the intrusion details here is what has been reported:

"Robert Baldwin, Jr., Heartland's president and CFO, said in a statement. "We understand that this incident may be the result of a widespread global cyber fraud operation, and we are cooperating closely with the United States Secret Service and Department of Justice."

"Baldwin told the New York Times that key information, such as card numbers, expiration dates, and cardholder names may have been exposed after malware intrusion attacks on its processing systems, where data had been left unencrypted.

Sniffer software was used to capture data that was exposed as Heartland sought authorization from the major payment companies and banks, Baldwin told the Times. Users of Visa, MasterCard, American Express and Discover Financial cards were vulnerable.

"We have industry-leading encryption, but the data has to be unencrypted to request the information," Baldwin said. "The sniffer was able to grab that authorization data at that point."

The personal data of 600 million or more cardholders was left vulnerable, but data had apparently been extracted from far fewer accounts."

It appears that Heartland has now jumped on the wagon to fix the damage that has been done by going out and notifying their customers of the Violation.

Credit card processor Heartland says system was breached (Reuters UK)

Payment Processor Heartland Reveals Massive Data Breach (CRN)

Hackers breach Heartland Payment credit card system (USA Today)

Heartland has No Heart for Violated Customers (PC World.com)