Esato

Forum > General discussions > General > Security team claims successful iPhone hack

Author Security team claims successful iPhone hack
Mr Miyagi
K850 Green
Joined: Mar 28, 2005
Posts: > 500
From: UK
PM
Posted: 2007-07-25 15:39
Reply with quoteEdit/Delete This PostPrint this post
A team of security experts in Baltimore, MD., said it has found a flaw in Apple’s iPhone handset that can be used by attackers to access private data stored on it.

Independent Security Evaluators (ISE) said on a Web site dedicated to explaining the flaw and its exploitation that an attacker could gain access to the iPhone through a wireless access point, or through a Web site controlled by the attacker.

Numerous hackers have been working to gain access to the iPhone in order to activate certain features or to allow it to be used on cellular networks other than AT&T’s. However, this is the first major exploitation of an iPhone security flaw.

Because the iPhone connects to wireless Internet access networks, such as Wi-Fi, by name, an attacker could create a network with the same name and encryption method as one the handset already uses. The attacker could then substitute a Web page with exploit code to gain access to the phone, ISE said on its Web site.

An attacker could also use a link planted on an unedited or unmoderated online forum, or a link sent by SMS or e-mail to use make use of the flaw and gain access to the handset, ISE said. The company said its researchers had required two weeks of part-time work to find the flaw and exploit it.

When the iPhone’s Safari browser opens a malicious Web page, malicious code can be run on the phone via the flaw, allowing the attacker to read the iPhone’s SMS log, address book, call history, and voicemail information, which are also then sent to the attacker, ISE said.

ISE said it would be presenting full details of the exploit and its procedure at the Black Hat 2007 conference in Las Vegas on August 2.

source: http://www.macworld.com/news/2007/07/23/iphonehack/index.php

umerhayat
W880 Black
Joined: Feb 27, 2005
Posts: 285
From: Pakistan
PM
Posted: 2007-07-25 16:02
Reply with quoteEdit/Delete This PostPrint this post
What a disaster for iphone and apple

This message was posted from a W810i
Mr Miyagi
K850 Green
Joined: Mar 28, 2005
Posts: > 500
From: UK
PM
Posted: 2007-07-25 16:08
Reply with quoteEdit/Delete This PostPrint this post
i know, i am surprised though. But nothing can beat apple on security on there computers
Jools
C510 Black
Joined: May 21, 2003
Posts: > 500
From: Evesham, UK
PM, WWW
Posted: 2007-07-25 16:39
Reply with quoteEdit/Delete This PostPrint this post
It's not a disaster at all. Name a single operating system on any device that doesn't have any flaws in it.

The flaw hasn't been publically disclosed, so no-one is at risk from it yet. And Apple can easily provide a firmware update to all users of iPhones automatically via iTunes as soon as a fix is ready.

Users won't even have to manually go and get the update, like they would if it was a Nokia or Sony Ericsson flaw. Next time they sync or charge their iPhone the update will be applied.
batesie
T66 black
Joined: Feb 13, 2004
Posts: > 500
From: London, UK
PM
Posted: 2007-07-25 17:08
Reply with quoteEdit/Delete This PostPrint this post
its a case of these days where the only way to beat hackers is to have the worlds best on your payroll. so as long as you pay enough, you'll be told the flaw before it get out on the open market. [addsig]
umerhayat
W880 Black
Joined: Feb 27, 2005
Posts: 285
From: Pakistan
PM
Posted: 2007-07-25 17:34
Reply with quoteEdit/Delete This PostPrint this post
@joolsG4. If it is so. Then i take my words back. Its a minor issue then

This message was posted from a W810i
Access the forum with a mobile phone via esato.mobi