Apple slow to patch iPhone security holes
Please support our Hardware and Software advertiser: Programming Forums
Jul 5th, 2008, 8:22 am
According to a report at The Register Apple is failing to keep iPhone software up to date with security patches. This despite the iPhone 1.1.4 software being nothing more than a "pared-down version of Mac OS 10.5" it says.
The Jesus Phone is said to be vulnerable to a number of exploits which have been patched pretty damn quickly in desktop software. The article refers specifically to the Apple WebKit vulnerability which uses a bug that was present in some versions of Safari to allow data theft from the iPhone. Miller successfully demonstrated this in March during the CanSec West security conference.
Successfully enough to win $10,000 in the Pwn to Own competition there at any rate.
Miller has a tool to exploit the vulnerability on the iPhone which, after having clicked on a malicious link of course, the user of the handset could find outgoing calls being made by he attacker as well as data being compromised.
Other security researchers are warning of more to come, including one uncovered by Aviv Raff which can allow phishing attacks using the iPhone. Raff is not publishing details as he waits for an Apple patch to emerge.
The Jesus Phone is said to be vulnerable to a number of exploits which have been patched pretty damn quickly in desktop software. The article refers specifically to the Apple WebKit vulnerability which uses a bug that was present in some versions of Safari to allow data theft from the iPhone. Miller successfully demonstrated this in March during the CanSec West security conference.
Successfully enough to win $10,000 in the Pwn to Own competition there at any rate.
Miller has a tool to exploit the vulnerability on the iPhone which, after having clicked on a malicious link of course, the user of the handset could find outgoing calls being made by he attacker as well as data being compromised.
Other security researchers are warning of more to come, including one uncovered by Aviv Raff which can allow phishing attacks using the iPhone. Raff is not publishing details as he waits for an Apple patch to emerge.
•
•
•
•
This blog entry was written by Davey Winder, staff writer aka happygeek. It has been filed under the Hardware and Software category. It has received 1,812 views, 1 comment(s), and 28 linkbacks. It was promoted to featured news status Jul 5th, 2008.
linux | Posting Shark | Jul 6th, 2008
•
•
•
•
The iPhone security will always be a target for hacks, as it is such a great breakthrough; people want more.
Check out Jailbreaking, Pwning, etc. your iPod touch and iPhone -- it won't stop with the 1.1.* era of Firmwares; 2.0*+ will also be hacked.
It's just how computing works. People have been finding exploits and hacks in hardware and software since when computers were first invented.
Check out Jailbreaking, Pwning, etc. your iPod touch and iPhone -- it won't stop with the 1.1.* era of Firmwares; 2.0*+ will also be hacked.
It's just how computing works. People have been finding exploits and hacks in hardware and software since when computers were first invented.
Related Blog Entries
- Yahoo Announces 'Green' Data Center Powered by Niagara Falls (1 Day Ago)
- Neverland is Your Virtual Linux Playground (1 Day Ago)
- Pink iPhone 3GS is hot stuff (1 Day Ago)
- Sarah Palin Hacked Off (2 Days Ago)
- Divorce Attorneys Using Social Media to Find Evidence (3 Days Ago)