Bernd Marienfeldt and Jim Herbeck discovered the vulnerability, and said it can even access most of the users data. The vulnerability can even work on an iPhone 3GS running firmware 3.1.3, when you connect it to a computer running Ubuntu Lucid Lynx, even when the phone is in a locked state. This vulnerability can't be spread like the iPhone iRickRoll'd worm, which changed users backgrounds on their jailbroken iPhones, running SSH and who haven't changed their default password. This new vulnerability appears to only be when the phone is tethered to a computer running Ubuntu Lucid Lynx, so any person wanting your data will need to get a hold of your iPhone first.