According to a report at The Register Apple is failing to keep iPhone software up to date with security patches. This despite the iPhone 1.1.4 software being nothing more than a "pared-down version of Mac OS 10.5" it says.

The Jesus Phone is said to be vulnerable to a number of exploits which have been patched pretty damn quickly in desktop software. The article refers specifically to the Apple WebKit vulnerability which uses a bug that was present in some versions of Safari to allow data theft from the iPhone. Miller successfully demonstrated this in March during the CanSec West security conference.

Successfully enough to win $10,000 in the Pwn to Own competition there at any rate.

Miller has a tool to exploit the vulnerability on the iPhone which, after having clicked on a malicious link of course, the user of the handset could find outgoing calls being made by he attacker as well as data being compromised.

Other security researchers are warning of more to come, including one uncovered by Aviv Raff which can allow phishing attacks using the iPhone. Raff is not publishing details as he waits for an Apple patch to emerge.

58 Views
About the Author

A freelance technology journalist for 30 years, I have been a Contributing Editor at PC Pro (one of the best selling computer magazines in the UK) for most of them. As well as currently contributing to Forbes.com, The Times and Sunday Times via Raconteur Special Reports, SC Magazine UK, Digital Health, IT Pro and Infosecurity Magazine, I am also something of a prolific author. My last book, Being Virtual: Who You Really are Online, which was published in 2008 as part of the Science Museum TechKnow Series by John Wiley & Sons. I am also the only three times winner (2006, 2008, 2010) of the BT Information Security Journalist of the Year title, and was humbled to be presented with the ‘Enigma Award’ for a ‘lifetime contribution to information security journalism’ in 2011 despite my life being far from over...

The iPhone security will always be a target for hacks, as it is such a great breakthrough; people want more.

Check out Jailbreaking, Pwning, etc. your iPod touch and iPhone -- it won't stop with the 1.1.* era of Firmwares; 2.0*+ will also be hacked.

It's just how computing works. People have been finding exploits and hacks in hardware and software since when computers were first invented.