+ Reply
Results 1 to 19 of 19

Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.


Thread: 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines

is a discussion within the

iPhone News

forums, a part of the

General iPhone

section;
...
  1. #1
    MMi Staff Writer Anthony Bouchard's Avatar
    Join Date
    Sep 2011
    Location
    Florida
    Posts
    7,051
    Thanks
    212
    Thanked 1,038 Times in 760 Posts

    Default 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines


    On Sunday, well-known iOS developer Flippo Bigarella released a new free jailbreak tweak in Cydia called GlyphPatch, which has managed to perk some eyebrows. The tweak fixes a vulnerability in iOS having to do with character rendering engines that can be the root cause of a DoS (Denial of Service) attack, as the developer explains:

    Quote Originally Posted by Filippo
    GlyphPatch is a MobileSubstrate tweak which aims to patch a vulnerability affecting iOS / OS X characters rendering engines which can be exploited through a malicious sequence of characters in order to achieve a DoS attack.

    ...

    By installing this tweak you can protect yourself from this particular attack on iOS. Since the vulnerability has been fixed on iOS 7, I donít know if Apple will issue a 6.x update just to fix it before the next major release. So, if you donít want to loose your jailbreak and be immune against that attack, just install it from Cydia.
    Bigarella notes that the vulnerability was first disclosed on August 29th, 2013 and that this tweak can help protect you from the DoS attack without the need to update to a software update that Apple may (or may not) release in the future to patch this problem.

    The vulnerability can be effective against users through all kinds of application interfaces, including the Messages application, Safari application, Settings application, and more. Virtually anywhere in iOS where characters can be rendered, the user can be affected.

    This vulnerability is also available in Mac OS X; Bigarella explains that he is working on a fix for Mac OS X users too, but it is not yet available at this point in time. GlyphPatch is an open source jailbreak tweak, and its source code is available on Github at this link. Bigarella goes into more detail about how the vulnerability works on his blog at this link.

    After installing GlyphPatch, you will be protected from this vulnerability without having to take any further steps. If you want to grab it, refresh your sources and take a look in the Changes tab of Cydia.

    Name: GlyphPatch
    Price: FREE
    Version: 0.1-6
    Repo: BigBoss
    Developer: Filippo Bigarella

  2. The Following 3 Users Say Thank You to Anthony Bouchard For This Useful Post:

    gogi6 (09-02-2013), Jato_BZ (09-01-2013), LudaChris (09-03-2013)

  3. #2
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,022
    Thanks
    3,197
    Thanked 5,899 Times in 2,003 Posts

    *installed thanks for the heads up! 👍
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  4. The Following User Says Thank You to Jato_BZ For This Useful Post:

    King_O_Hill (09-01-2013)

  5. #3
    Green Apple
    Join Date
    Jul 2013
    Posts
    47
    Thanks
    1
    Thanked 9 Times in 9 Posts

    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.

  6. #4
    What's J*******k? Sage I's Avatar
    Join Date
    Feb 2012
    Location
    The Big I Land of Hawaii
    Posts
    325
    Thanks
    215
    Thanked 52 Times in 41 Posts

    Quote Originally Posted by LaddersRCool View Post
    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
    Huh? I understood your third and fourth line but the first two were confusing and unclear...

  7. #5
    iPhone? More like MyPhone DieselVexx's Avatar
    Join Date
    Jan 2012
    Location
    Saginaw, MI
    Posts
    123
    Thanks
    1
    Thanked 9 Times in 8 Posts

    Man, this may have caused a problem with my Youtube app but it seems every other tweak and app is running way smoother and opening super quick. Seems like my phone isn't crashing as much either! Will someone please tell me if I'm dreaming.

  8. #6
    Green Apple aorowe's Avatar
    Join Date
    Feb 2013
    Posts
    79
    Thanks
    7
    Thanked 4 Times in 4 Posts

    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?

  9. #7
    iPhone? More like MyPhone kosher1's Avatar
    Join Date
    Feb 2013
    Posts
    163
    Thanks
    28
    Thanked 23 Times in 20 Posts

    I can't find it. What gives?

  10. #8
    What's Jailbreak?
    Join Date
    Sep 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Seems like my phone isn't crashing as much either!

  11. #9
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,022
    Thanks
    3,197
    Thanked 5,899 Times in 2,003 Posts

    Quote Originally Posted by aorowe View Post
    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  12. #10
    Green Apple aorowe's Avatar
    Join Date
    Feb 2013
    Posts
    79
    Thanks
    7
    Thanked 4 Times in 4 Posts

    Quote Originally Posted by Jato_BZ View Post
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.

  13. #11
    iPhone? More like MyPhone kosher1's Avatar
    Join Date
    Feb 2013
    Posts
    163
    Thanks
    28
    Thanked 23 Times in 20 Posts

    Quote Originally Posted by aorowe View Post
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.
    Yup same here. Can't see it

  14. #12
    Green Apple Scheuerle's Avatar
    Join Date
    Oct 2011
    Location
    Canberra
    Posts
    40
    Thanks
    56
    Thanked 4 Times in 4 Posts

    I went to changes in Cydia, it was there. Finished refreshing then 'pop' it disappeared before my eyes.
    Humbug.

  15. #13
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,022
    Thanks
    3,197
    Thanked 5,899 Times in 2,003 Posts

    You're right it's not there. The version I have is 0.1-6. If you go to his Github page he's up to 0.2-1 so maybe he's pulled it for the time being. There looks like there was one conflict with WhatsApp but I don't have that and haven't had any issues with it so far.

    U can check his Github here as the 0.2-1.deb is up on his page.

    https://github.com/FilippoBiga/GlyphPatch/releases

    Or just wait till it shows on Cydia again perhaps?
    Last edited by Jato_BZ; 09-03-2013 at 01:35 AM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  16. The Following 3 Users Say Thank You to Jato_BZ For This Useful Post:

    aorowe (09-03-2013), LudaChris (09-03-2013), Scheuerle (09-03-2013)

  17. #14
    Green Apple aorowe's Avatar
    Join Date
    Feb 2013
    Posts
    79
    Thanks
    7
    Thanked 4 Times in 4 Posts

    Thanks very much for that. It worked for me

  18. The Following User Says Thank You to aorowe For This Useful Post:

    Jato_BZ (09-03-2013)

  19. #15
    What's Jailbreak?
    Join Date
    May 2012
    Posts
    21
    Thanks
    0
    Thanked 2 Times in 2 Posts

    Can't find it yet.

  20. #16
    Green Apple
    Join Date
    Oct 2011
    Location
    New Jersey, USA
    Posts
    72
    Thanks
    1
    Thanked 0 Times in 0 Posts

    I still can't find it either.

  21. #17
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,022
    Thanks
    3,197
    Thanked 5,899 Times in 2,003 Posts

    Ok, this story really needs updated but here's what I've managed to find.

    It will no longer be on Cydia.

    U can read in between the lines here on the Dev's twitter feed - @FilippoBiga

    https://twitter.com/filippobiga/stat...80675264221184

    Looks like some iOS politics going on hence why it was pulled.

    The Dev is still supplying it via his own Github here...

    https://github.com/FilippoBiga/Glyph...ases/tag/0.2-1

    Edit: just been speaking with the Dev & he is hoping GlyphPatch can be added to ModMyi Repo!

    Also if u have any other version other than 0.2-1 installed the Dev has suggested you update to 0.2-1

    Which is available from his Github page & can be installed easily via iFile.
    Last edited by Jato_BZ; 09-04-2013 at 02:53 PM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  22. #18
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,022
    Thanks
    3,197
    Thanked 5,899 Times in 2,003 Posts

    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  23. The Following 2 Users Say Thank You to Jato_BZ For This Useful Post:

    IrobertI (09-05-2013), Scheuerle (09-05-2013)

  24. #19
    Green Apple Scheuerle's Avatar
    Join Date
    Oct 2011
    Location
    Canberra
    Posts
    40
    Thanks
    56
    Thanked 4 Times in 4 Posts

    Quote Originally Posted by Jato_BZ View Post
    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Thanks man. Got it just now.😊

Posting Permissions
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts