• Your favorite

    Apple

    ,

    iPhone

    ,

    iPad

    ,

    iOS

    ,
    Jailbreak
    , and
    Cydia
    site.
  • RockApp Update Brings SSH Security: Another Reason To Use RockApp


    I just noticed an update to the RockApp and after installing, and rebooting, I was prompted by RockApp with a note that told me my SSH Password was still at the default of 'alpine' and that I should change my password immediately. (I just restored recently and had not done this yet)

    After accepting the pop-up, I was able to enter in a new password. I was then informed that the password had been successfully changed.

    Most of you have probably already changed your passwords by now, but if you haven't, this is possibly the easiest way to do so without entering the terminal.

    Not only does this update bring an easy way to change your SSH Password, I believe this is another huge step forward for RockApp and another reason you should use both Cydia AND RockApp. I am starting to use RockApp more and more, and the stability just keeps getting better and better.

    2.15 UPDATES
    • (2.15.3 Update - Bug Fix for Apps with Space in Name)
    • Warning for SSH - mobile/root passwords as default 'alpine'
    • Force Removal option for "stuck" packages
    • RockID Manage View now shows lists of Purchase Apps
    • Added forgot password link
    • Ability to disable MobileSubstrate Extensions via Extension Manager
    • Fix: Removal of sources added via Package
    • Fix: Upgrade/Dependency Installs Fixed
    • Fix: For purchasing apps when can't find catalog
    • Fix: Adding user entered repos sometimes points to wrong repo url
    • Fix: Homepage Tag


    Related Posts:
    RockApp Store Projects $2Mil/Year
    RockApp Launches 2.0
    Rock Your Phone [ LAUNCH ] - iPhone Application Stores Abound
    This article was originally published in forum thread: RockApp Update Brings SSH Security: Another Reason To Use RockApp started by nickhesson View original post
    Comments 82 Comments
    1. Phoenix303's Avatar
      Phoenix303 -
      Quote Originally Posted by Fewzz View Post
      Sorry but Rock is a no go for me and my friends , it always ends up forcing us to restore after awhile , rock is dreadful in my eyes , why take the risk, well stick with cydia. Maybe its just us but cant see that till rock is 100% reliable and works alongside cydia without any problems well avoid it like the plague.
      I've had nothing but trouble with Rock... Always had to SSH in after deleting it to remove extra crap it's thrown in there or restore. I've tried it at dif stages and always with the same result. After install, laggy performance and flat out non responsive SB and key board. A shame really, but I will continue to rely on Cydia as I always have. May be slow to refresh but I'll take that one minute of inconvenience a day over having to restore and re jailbreak anyday.
    1. Trist@n's Avatar
      Trist@n -
      GRear idea and really thinking about user security, however, there is a major bug/problem. I DID change my password long ago and use that new password weekly and RYP still says I am using "alpine" and recommends that I change it.

      I will not do this and also recommend caution. One of two things is happening, either it is lagit and just has the bug stated above OR this is a hack attached to RYP in an attempt to get your password and gain access to your iPhone. I highly recommend caution and to SSH in and manually change your PW.

      If it recognizes that I already have changed my password then I will edit this post!

      CAUTION is advised!!!

      As PROMISED///UPDATE/// I have manually ssh'd in and changed my "Mobile" password as well and the pop up no longer appears. I still feel that the way this was released caused suspicion and maybe a message/warning should have been released informing users of the option that was going to be released. In a world of hackers and those that roll in the stink of stealing peoples identities and taking over their digital world, caution should always be observed and for developers releasing changes...notifications should be presented.

      I have nothing against RYP and use it right beside Cydia...as some have stated, it is NOT a competition but a choice for users to find many different apps that are not available through apple. Both Cydia and RYP are here to help turn a smart phone into a SUPER phone that is being denied to us by apple and its restrictions. Being able to alter icons and change backgrounds in no way affects apple yet they are controlling you. I support both of these gentleman in their endeavors as I believe all should. Whether you like the app or not is your choice, but to bash this app when it is an additional tool to expand the iPhone capabilities that ARE being RESTRICTED and CONTROLLED by Apple, is TOTALLY ASININE!!!

      Lets respect these guys for what they are doing to enhance your tools not start some petty child bickering over who is better or worse. BOTH are WELL DEVELOPED, WORK and ENHANCE...STOP THE BICKERING!!!
    1. skeels's Avatar
      skeels -
      Tris@n: Please read all the comments above and the original post image - it's your mobile password you haven't changed.
      Phoenix303: Slowing down your phone? That's like installing an mp3 on the iPhone causes it to slow down. I would think you knew more about software (Phoenix is the developer of a few apps in the Cydia store).

      All: Just for clarification (because it seems to be a common complaint that doesn't make sense) - Rock is only an application on the phone, as much as Cydia is. It doesn't run in the background or affect anything else on the phone at all. Of course, if you install apps, whether using Cydia or Rock, they can impact the performance of your phone (ie, installing backgrounder can cause you to allow a greater consumption of RAM slowing your phone down - use responsibly and you will be fine ).

      Enjoy!
    1. Vissionary's Avatar
      Vissionary -
      Quote Originally Posted by kwickone View Post
      All you "Rock Bashers" are killing me! Every single post about something most of us see as positive for Rock, you guys jump on there and bash away. Don't you have anythnig better (more constructive) to do?

      Here is how it 'should' go down.

      You don't like Rock. Fine. Don't use it. Period. (they have enough users that they will not notice you are missing).

      Quit your ******** and move on. Life is about choices. Life has free things and things that cost money. Deal with it.

      I am now making the 'choice' to stop posting on this thread.
      It's a public forum, get used to it
    1. damniatx's Avatar
      damniatx -
      I love using rock app, so faster than cydia. You should try it guys, nothing wrong with it.
    1. Trist@n's Avatar
      Trist@n -
      Quote Originally Posted by psuskeels View Post
      Tris@n: Please read all the comments above and the original post image - it's your mobile password you haven't changed.
      Phoenix303: Slowing down your phone? That's like installing an mp3 on the iPhone causes it to slow down. I would think you knew more about software (Phoenix is the developer of a few apps in the Cydia store).

      All: Just for clarification (because it seems to be a common complaint that doesn't make sense) - Rock is only an application on the phone, as much as Cydia is. It doesn't run in the background or affect anything else on the phone at all. Of course, if you install apps, whether using Cydia or Rock, they can impact the performance of your phone (ie, installing backgrounder can cause you to allow a greater consumption of RAM slowing your phone down - use responsibly and you will be fine ).

      Enjoy!
      Thanks for your response...I looked into it and it was as you have stated. Based on your response, I went in and changed MOBILE manually but do appreciate your efforts. I am just really cautious now as I have had my paypal account phished before so learned the hard way.

      Prior warning/notice to what you guys were doing should have been released to the user base, prior to starting it in my opinion.

      As promised, I updated my post above to reflect the change, however I did not remove my caution as I believe it is valid for any user.

      Thanks for all you do and what you have given us!!!
    1. confucious's Avatar
      confucious -
      Much as I don't like ROCK I am impressed with psuskeels responses.
    1. iPWN Repair's Avatar
      iPWN Repair -
      I am not sure about this. I changed my password and then tested it by trying to SSH my device and remote in via WiFi with default Alpine and it did not work. However after Rock app update it still gave me the message that I have the default Alpine and I should change my password. Has anyone else had this same experience?
    1. confucious's Avatar
      confucious -
      Did you change both passwords or just the one?
    1. Daddy3000's Avatar
      Daddy3000 -
      I can't undertand why rock would get flak (other than them being new). Their site is smoother and more user-friendly than Cydia. I like the service they provide especially with the root password prompt. This is great for the folks who don't realize their phone is vulnerable after a jailbreak.
    1. LGgeek's Avatar
      LGgeek -
      sorry not my cup of tea. If you are jailbreaking your phone and don't know enough to change the password you shouldn't be jailbreaking your phone. And the "oops I forgot" rates about the same as leaving the keys in the ignition of your car.
    1. Dajokeisonu's Avatar
      Dajokeisonu -
      This is great for all the noons that don't know how to change the root password in mobile terminal
    1. robogobo's Avatar
      robogobo -
      Hmm, Its a bit questionable how Rock goes about detecting your password. I guess that means it actually tries to login. I guess that's not so bad, but I'd still go about changing it from the command line. Otherwise you're telling someone who just tried to break in what your new password is. I don't trust anybody that much.
    1. confucious's Avatar
      confucious -
      I would guess that all it does is try the default. Even I don't think they would be harvesting your new p/word!
    1. metaserph's Avatar
      metaserph -
      It could be an algorithm that queries and compares against "alpine", then depending on the result it offers you a mobile terminal script to do the same. All in all, I too seriously doubt any wrong doing or intent. The fact that Saurik thought of adding this feature tells me these folks are on a similar page with similar vision. Just my thoughts.
    1. robogobo's Avatar
      robogobo -
      You're probably right. However, what many people have been saying here, that you shouldn't be enabling ssh if you don't know how to change the password (with or without instructions), is very true, and with things like this it's best to form good habits and not take shortcuts anyway. Still, I guess the intentions are good. I have no problems with Rock (aside from the dumb name, but that's typical these days).
    1. benjiuk's Avatar
      benjiuk -
      OMG what if an idiot like me changes the password and forgets it and cannot use winscp is there a way to reset to default or reinstall .....HELP I FUGGED UP !!
    1. Trist@n's Avatar
      Trist@n -
      Restore iphone & re-install program
    1. artjr's Avatar
      artjr -
      I forgot my SS
      H password as well. I changed it using rock. Anyway to recover my changed password? If its stored on rock there must be a way to recover?
    1. Nick Hesson's Avatar
      Nick Hesson -
      Quote Originally Posted by artjr View Post
      I forgot my SS
      H password as well. I changed it using rock. Anyway to recover my changed password? If its stored on rock there must be a way to recover?
      It's not stored on Rock by any means. Rock only prompted you to change it. It doesn't store your password.

      If you forgot your password your **** out of luck. You'll have to restore. sorry dude. its usually a good idea to use passwords you'll remember.