08.01.07 - 05:43pm
Apple has updated iPhone’s security just as Black Hat was about to show the world how you can take over an iPhone.
The flaw was revealed by Black Hat last week who gave Apple until a Black Hat convention begins tomorrow to patch the bug.
At that convention, they the hackers, will showcase how the hack was achieved.
Apple patched it the flaw along with others fixing a separate cross-site scripting flaw in Safari, a memory corruption flaw in WebKit, an address spoofing bug in WebKit, and a cross-site scripting flaw in WebCore.
By the time hackers have tired of hacking the iPhone, it will be the most secure phone out there. After all other cell phones have just as many bugs, probably more, but they have no press and aren’t “cool” so nobody cares about hacking them! (Oh except the guy stealing Paris Hilton’s contacts in the 2005 incident or the guy stealing yours.)
Category: iPhone | Tags: black_hat, hackers, iPhone, paris_hilton, Security, stealing-contacts | Be the First to Comment »
07.17.07 - 11:26am
The iPhone web dialer was designed to give users a simple way to dial phone numbers listed on Web pages, but for the moment anyway a warning has been put out: Don’t use the iPhone web dialer.
The warning comes from SPI labs saying there is a bug in the feature that can let hackers redirect calls to 900 numbers. They
can also monitor any calls you place - so if you do use the web dialer keep your conversation light enough that it’s okay if the world knows. (keep your secrets to yourself).
The iPhone could also be set so it will no longer let you dial out, or set to dial endlessly (now wouldn’t that be fun to deal with.)
“Because this vulnerability can be launched from Web sites, everybody who has an iPhone has the potential to get exploited,” said Bill Hoffman, lead researcher with SPI labs.
Category: iPhone | Tags: apple, hackers, iPhone, target, vulnerability, web_dialer | Be the First to Comment »