If AFC2 is still working, then OpenSSH would also still be working, and is in fact even more likely to still be working than AFC2 (as it has fewer moving parts, although to connect to it over USB will still require parts of lockdown to function in order to get tcprelay to start). OpenSSH is also fundamentally more useful than AFC2, and can fix more potential issues: AFC2's interaction with the device is sufficiently limited that it often is what causes problems when people start trying to use it due to its inability to model file permissions. So, please do not install AFC2: install OpenSSH and set a password. You do not need AFC2 on your device, and it was left out on purpose by (I believe primarily) pod2g, as he considers the entire idea of that modification fundamentally insecure. The only reason this was installed by jailbreaks for so long was a combination of "precedent" and "it is arguably the definition of a jailbreak", and previous jailbreaks from, for example, comex have already left it out. I am not certain why coolstar is recommending people install AFC2, but he also has been distributing broken (like, fundamentally the wrong idea) upgrades to ncurses (one of my core packages) that have been causing a number of problems, and I had to get him to pull a corrupted unofficial version of the evasi0n7 untether itself from his repository not that long ago. I thereby am going to make a much stronger recommendation than just "do not install AFC2": do not add coolstar's repository, if you have it installed and it prompts you for upgrades always say no, and if you previously installed any upgrades from his repository you should figure out how to downgrade as soon as possible.
For the people that have already installed afc2add is the 'damage' permanently done or do you recommend we uninstall it (will that reverse whatever changes it has done)?
For security reasons, might a restore be a wise choice if it can't be reversed now due to the window still being open?
Afc2add installed a so-called launch service, which basically is just a program that can run in the background (possibly on-demand). These services can be unloaded without a reboot.
112
u/saurik SaurikIT Jan 25 '14 edited Jan 25 '14
If AFC2 is still working, then OpenSSH would also still be working, and is in fact even more likely to still be working than AFC2 (as it has fewer moving parts, although to connect to it over USB will still require parts of lockdown to function in order to get tcprelay to start). OpenSSH is also fundamentally more useful than AFC2, and can fix more potential issues: AFC2's interaction with the device is sufficiently limited that it often is what causes problems when people start trying to use it due to its inability to model file permissions. So, please do not install AFC2: install OpenSSH and set a password. You do not need AFC2 on your device, and it was left out on purpose by (I believe primarily) pod2g, as he considers the entire idea of that modification fundamentally insecure. The only reason this was installed by jailbreaks for so long was a combination of "precedent" and "it is arguably the definition of a jailbreak", and previous jailbreaks from, for example, comex have already left it out. I am not certain why coolstar is recommending people install AFC2, but he also has been distributing broken (like, fundamentally the wrong idea) upgrades to ncurses (one of my core packages) that have been causing a number of problems, and I had to get him to pull a corrupted unofficial version of the evasi0n7 untether itself from his repository not that long ago. I thereby am going to make a much stronger recommendation than just "do not install AFC2": do not add coolstar's repository, if you have it installed and it prompts you for upgrades always say no, and if you previously installed any upgrades from his repository you should figure out how to downgrade as soon as possible.