Security Concerns with Jailbroken Phones and Corporate Email

iamnotpermanent · Feb 3, 2012

I tried to do a search on this but didn't come up with much.

I'm wondering if there are any security concerns with jailbroken phones and corporate e-mail being tied in.

Are jailbroken phones more susceptible to "being hacked"?

Very sorry if I insult anyone with my ignorance on this topic, but any relevant info is much appreciated.

Thanks

Jmills87 · Feb 3, 2012

No, actually in many cases they are less susceptible to being hacked because the iPhone hackers release security hole patches before Apple does. The only thing you need to be concerned about is changing your Terminal password from the default if you install OpenSSH.

thewitt · Feb 4, 2012

Yes, jail broken phones are susceptible to attack. If you allow them in your Enterprise, you need to double check their security.

The only known malware attacks on iOS devices were on jail broken devices.

The only way to install unapproved apps that can interact with other apps and the file system is on jail broken devices.

That doesn't mean you need to disallow them, only that you need to be aware of the risks and how to reduce or eliminate them.

Don't let the advocates convince you there is no risk, since there are clear risks with unknown configurations, potentially at risk devices, and unapproved applications.

Just be aware.

CliffyDontCare · Feb 4, 2012

thewitt said:
Yes, jail broken phones are susceptible to attack. If you allow them in your Enterprise, you need to double check their security.

The only known malware attacks on iOS devices were on jail broken devices.

The only way to install unapproved apps that can interact with other apps and the file system is on jail broken devices.

That doesn't mean you need to disallow them, only that you need to be aware of the risks and how to reduce or eliminate them.

Don't let the advocates convince you there is no risk, since there are clear risks with unknown configurations, potentially at risk devices, and unapproved applications.

Just be aware.

I agree, however the only cases were I hear people having their info attacked is when you install OpenSHH and share files. If you change your root password, your phone will be secure from attack

thewitt · Feb 4, 2012

Symantec has some very good info on their website that anyone concerned with mobile device security should read.

Jmills87 · Feb 4, 2012

Remember what happened last time someone tried to make the claim that jailbroken iPhones were susceptible to attack? They got destroyed. Is The iPhone Safer Than Google's Android? - Forbes

Don't listen to the people who get PAID to scare you into thinking you are at risk about the security of your device.

Like I said before, as long as you don't install OpenSSH or if you do install it, you change your root password, nothing is going to happen to your phone.