1. Anthony Bouchard's Avatar


    On Sunday, well-known iOS developer Flippo Bigarella released a new free jailbreak tweak in Cydia called GlyphPatch, which has managed to perk some eyebrows. The tweak fixes a vulnerability in iOS having to do with character rendering engines that can be the root cause of a DoS (Denial of Service) attack, as the developer explains:

    GlyphPatch is a MobileSubstrate tweak which aims to patch a vulnerability affecting iOS / OS X characters rendering engines which can be exploited through a malicious sequence of characters in order to achieve a DoS attack.

    ...

    By installing this tweak you can protect yourself from this particular attack on iOS. Since the vulnerability has been fixed on iOS 7, I don’t know if Apple will issue a 6.x update just to fix it before the next major release. So, if you don’t want to loose your jailbreak and be immune against that attack, just install it from Cydia.
    Bigarella notes that the vulnerability was first disclosed on August 29th, 2013 and that this tweak can help protect you from the DoS attack without the need to update to a software update that Apple may (or may not) release in the future to patch this problem.

    The vulnerability can be effective against users through all kinds of application interfaces, including the Messages application, Safari application, Settings application, and more. Virtually anywhere in iOS where characters can be rendered, the user can be affected.

    This vulnerability is also available in Mac OS X; Bigarella explains that he is working on a fix for Mac OS X users too, but it is not yet available at this point in time. GlyphPatch is an open source jailbreak tweak, and its source code is available on Github at this link. Bigarella goes into more detail about how the vulnerability works on his blog at this link.

    After installing GlyphPatch, you will be protected from this vulnerability without having to take any further steps. If you want to grab it, refresh your sources and take a look in the Changes tab of Cydia.

    Name: GlyphPatch
    Price: FREE
    Version: 0.1-6
    Repo: BigBoss
    Developer: Filippo Bigarella
    2013-09-02 04:41 AM
  2. Jato_BZ's Avatar
    *installed thanks for the heads up! 👍
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor
    2013-09-02 05:15 AM
  3. LaddersRCool's Avatar
    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
    2013-09-02 05:18 AM
  4. Sage I's Avatar
    Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
    Huh? I understood your third and fourth line but the first two were confusing and unclear...
    2013-09-02 07:28 AM
  5. DieselVexx's Avatar
    Man, this may have caused a problem with my Youtube app but it seems every other tweak and app is running way smoother and opening super quick. Seems like my phone isn't crashing as much either! Will someone please tell me if I'm dreaming.
    2013-09-02 08:23 PM
  6. aorowe's Avatar
    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
    2013-09-03 07:40 AM
  7. kosher1's Avatar
    I can't find it. What gives?
    2013-09-03 08:01 AM
  8. gorskiqne's Avatar
    Seems like my phone isn't crashing as much either!
    2013-09-03 08:03 AM
  9. Jato_BZ's Avatar
    So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor
    2013-09-03 08:14 AM
  10. aorowe's Avatar
    It's still there... GlyphPatch (no space) via BigBoss Repo
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.
    2013-09-03 08:21 AM
  11. kosher1's Avatar
    Still can't seem to find it, even searched within the repo directly under G.

    But it's good to know that I'm not the only one having this issue.
    Yup same here. Can't see it
    2013-09-03 08:22 AM
  12. Scheuerle's Avatar
    I went to changes in Cydia, it was there. Finished refreshing then 'pop' it disappeared before my eyes.
    Humbug.
    2013-09-03 08:48 AM
  13. Jato_BZ's Avatar
    You're right it's not there. The version I have is 0.1-6. If you go to his Github page he's up to 0.2-1 so maybe he's pulled it for the time being. There looks like there was one conflict with WhatsApp but I don't have that and haven't had any issues with it so far.

    U can check his Github here as the 0.2-1.deb is up on his page.

    https://github.com/FilippoBiga/GlyphPatch/releases

    Or just wait till it shows on Cydia again perhaps?
    Last edited by Jato_BZ; 2013-09-03 at 09:35 AM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor
    2013-09-03 08:52 AM
  14. aorowe's Avatar
    Thanks very much for that. It worked for me
    2013-09-03 08:56 AM
  15. izeta's Avatar
    Can't find it yet.
    2013-09-04 01:00 AM
  16. moveandstore's Avatar
    I still can't find it either.
    2013-09-04 04:18 PM
  17. Jato_BZ's Avatar
    Ok, this story really needs updated but here's what I've managed to find.

    It will no longer be on Cydia.

    U can read in between the lines here on the Dev's twitter feed - @FilippoBiga

    https://twitter.com/filippobiga/stat...80675264221184

    Looks like some iOS politics going on hence why it was pulled.

    The Dev is still supplying it via his own Github here...

    https://github.com/FilippoBiga/Glyph...ases/tag/0.2-1

    Edit: just been speaking with the Dev & he is hoping GlyphPatch can be added to ModMyi Repo!

    Also if u have any other version other than 0.2-1 installed the Dev has suggested you update to 0.2-1

    Which is available from his Github page & can be installed easily via iFile.
    Last edited by Jato_BZ; 2013-09-04 at 10:53 PM.
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor
    2013-09-04 10:33 PM
  18. Jato_BZ's Avatar
    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Twitter ID: @Jato_BZ
    .artwork Assassin / Emoji Extractor
    2013-09-05 12:52 PM
  19. Scheuerle's Avatar
    Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    Thanks man. Got it just now.😊
    2013-09-05 01:43 PM
LINK TO POST COPIED TO CLIPBOARD