Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Hackers open hole in iPhone security

The flaws start flowing.

Article comments

Security experts in the US claim to have found a flaw in Apple's iPhone handset that can be used by attackers to access private data stored on it.

Independent Security Evaluators (ISE) said on a website dedicated to explaining the flaw and its exploitation that an attacker could gain access to the iPhone through a wireless access point, or through a website controlled by the attacker.

Numerous hackers have been working to gain access to the iPhone in order to activate certain features or to allow it to be used on cellular networks other than AT&T's. However, this is the first major exploitation of an iPhone security flaw.

Because the iPhone connects to wireless Internet access networks, such as Wi-Fi, by name, an attacker could create a network with the same name and encryption method as one the handset already uses. The attacker could then substitute a web page with exploit code to gain access to the phone, ISE said on its website.

An attacker could also use a link planted on an unedited or unmoderated online forum, or a link sent by SMS or email to use make use of the flaw and gain access to the handset, ISE said. The company said its researchers had required two weeks of part-time work to find the flaw and exploit it.

When the iPhone's Safari browser opens a malicious web page, malicious code can be run on the phone via the flaw, allowing the attacker to read the iPhone's SMS log, address book, call history, and voicemail information, which are also then sent to the attacker, ISE said.

ISE said it would be presenting full details of the exploit and its procedure at the Black Hat 2007 conference in Las Vegas on August 2.



Share:

More from Techworld

More relevant IT news

Comments

CandyShopGirl said: Hi all What do you think about Apple Iogo gt



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *