Results 1 to 19 of 19

Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.


Thread: 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines

  1. #1
    Default 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines


    On Sunday, well-known iOS developer Flippo Bigarella released a new free jailbreak tweak in Cydia called GlyphPatch, which has managed to perk some eyebrows. The tweak fixes a vulnerability in iOS having to do with character rendering engines that can be the root cause of a DoS (Denial of Service) attack, as the developer explains:

    Quote Originally Posted by Filippo
    GlyphPatch is a MobileSubstrate tweak which aims to patch a vulnerability affecting iOS / OS X characters rendering engines which can be exploited through a malicious sequence of characters in order to achieve a DoS attack.

    ...

    By installing this tweak you can protect yourself from this particular attack on iOS. Since the vulnerability has been fixed on iOS 7, I donít know if Apple will issue a 6.x update just to fix it before the next major release. So, if you donít want to loose your jailbreak and be immune against that attack, just install it from Cydia.
    Bigarella notes that the vulnerability was first disclosed on August 29th, 2013 and that this tweak can help protect you from the DoS attack without the need to update to a software update that Apple may (or may not) release in the future to patch this problem.

    The vulnerability can be effective against users through all kinds of application interfaces, including the Messages application, Safari application, Settings application, and more. Virtually anywhere in iOS where characters can be rendered, the user can be affected.

    This vulnerability is also available in Mac OS X; Bigarella explains that he is working on a fix for Mac OS X users too, but it is not yet available at this point in time. GlyphPatch is an open source jailbreak tweak, and its source code is available on Github at this link. Bigarella goes into more detail about how the vulnerability works on his blog at this link.

    After installing GlyphPatch, you will be protected from this vulnerability without having to take any further steps. If you want to grab it, refresh your sources and take a look in the Changes tab of Cydia.

    Name: GlyphPatch
    Price: FREE
    Version: 0.1-6
    Repo: BigBoss
    Developer: Filippo Bigarella

  2. The Following 3 Users Say Thank You to Anthony Bouchard For This Useful Post:

    gogi6 (09-02-2013), Jato_BZ (09-01-2013), LudaChris (09-03-2013)

  3. #2
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,169
    Thanks
    3,315
    Thanked 6,514 Times in 2,146 Posts

    *installed thanks for the heads up! 👍
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  4. The Following User Says Thank You to Jato_BZ For This Useful Post:

    King_O_Hill (09-02-2013)

  5. #3
    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.

  6. #4
    What's J*******k? Sage I's Avatar
    Join Date
    Feb 2012
    Location
    Hawai'i Island
    Posts
    379
    Thanks
    373
    Thanked 64 Times in 51 Posts

    Quote Originally Posted by LaddersRCool View Post
    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
    Huh? I understood your third and fourth line but the first two were confusing and unclear...

  7. #5
    iPhone? More like MyPhone DieselVexx's Avatar
    Join Date
    Jan 2012
    Location
    Saginaw, MI
    Posts
    124
    Thanks
    1
    Thanked 9 Times in 8 Posts

    Man, this may have caused a problem with my Youtube app but it seems every other tweak and app is running way smoother and opening super quick. Seems like my phone isn't crashing as much either! Will someone please tell me if I'm dreaming.

  8. #6
    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?

  9. #7
    I can't find it. What gives?

  10. #8
    Seems like my phone isn't crashing as much either!

  11. #9
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,169
    Thanks
    3,315
    Thanked 6,514 Times in 2,146 Posts

    Quote Originally Posted by aorowe View Post
    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  12. #10
    Quote Originally Posted by Jato_BZ View Post
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.

  13. #11
    Quote Originally Posted by aorowe View Post
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.
    Yup same here. Can't see it

  14. #12
    I went to changes in Cydia, it was there. Finished refreshing then 'pop' it disappeared before my eyes.
    Humbug.

  15. #13
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,169
    Thanks
    3,315
    Thanked 6,514 Times in 2,146 Posts

    You're right it's not there. The version I have is 0.1-6. If you go to his Github page he's up to 0.2-1 so maybe he's pulled it for the time being. There looks like there was one conflict with WhatsApp but I don't have that and haven't had any issues with it so far.

    U can check his Github here as the 0.2-1.deb is up on his page.

    https://github.com/FilippoBiga/GlyphPatch/releases

    Or just wait till it shows on Cydia again perhaps?
    Last edited by Jato_BZ; 09-03-2013 at 02:35 AM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  16. The Following 3 Users Say Thank You to Jato_BZ For This Useful Post:

    aorowe (09-03-2013), LudaChris (09-03-2013), Scheuerle (09-03-2013)

  17. #14
    Thanks very much for that. It worked for me

  18. The Following User Says Thank You to aorowe For This Useful Post:

    Jato_BZ (09-03-2013)

  19. #15
    Can't find it yet.

  20. #16
    Green Apple
    Join Date
    Oct 2011
    Location
    New Jersey, USA
    Posts
    73
    Thanks
    1
    Thanked 0 Times in 0 Posts

    I still can't find it either.

  21. #17
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,169
    Thanks
    3,315
    Thanked 6,514 Times in 2,146 Posts

    Ok, this story really needs updated but here's what I've managed to find.

    It will no longer be on Cydia.

    U can read in between the lines here on the Dev's twitter feed - @FilippoBiga

    https://twitter.com/filippobiga/stat...80675264221184

    Looks like some iOS politics going on hence why it was pulled.

    The Dev is still supplying it via his own Github here...

    https://github.com/FilippoBiga/Glyph...ases/tag/0.2-1

    Edit: just been speaking with the Dev & he is hoping GlyphPatch can be added to ModMyi Repo!

    Also if u have any other version other than 0.2-1 installed the Dev has suggested you update to 0.2-1

    Which is available from his Github page & can be installed easily via iFile.
    Last edited by Jato_BZ; 09-04-2013 at 03:53 PM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  22. #18
    .artwork assassin Jato_BZ's Avatar
    Join Date
    Jan 2012
    Location
    New Zealand
    Posts
    3,169
    Thanks
    3,315
    Thanked 6,514 Times in 2,146 Posts

    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor

  23. The Following 2 Users Say Thank You to Jato_BZ For This Useful Post:

    IrobertI (09-05-2013), Scheuerle (09-05-2013)

  24. #19
    Quote Originally Posted by Jato_BZ View Post
    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Thanks man. Got it just now.😊

Posting Permissions
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •