Apple patching nasty iPhone SMS vulnerability

by Darren Murph posted Jul 2nd 2009 at 1:01PM

Given the hype surrounding Apple's iPhone, we're actually surprised that we haven't seen more holes to plug over the years. In fact, the last major iPhone exploit to take the world by storm happened right around this time two years ago, and now -- thanks to OS X security expert Charlie Miller -- we're seeing yet another come to light. Over at the SyScan conference in Singapore, Mr. Miller disclosed a hole that would let attackers "run software code on the phone that is sent by SMS over a mobile operator's network in order to monitor the location of the phone using GPS, turn on the phone's microphone to eavesdrop on conversations, or make the phone join a distributed denial of service attack or a botnet." Charlie's planning to detail the vulnerability in full at the upcoming Black Hat conference, but Apple's hoping to have it all patched up by the end of this month.

[Via HotHardware]

Filed under: Handsets, GSM, EDGE, HSDPA, Apple, iPhone OS

Tags: attack, black hat, BlackHat, hack, iphone, iphone 3g, iphone os, Iphone3g, IphoneOs, security, sms, syscan, text, text message, text messaging, texting, TextMessage, TextMessaging, vulnerability

Reader Comments (Page 1 of 1)

Neutral

Nimrod @ Jul 2nd 2009 1:19PM

Will this be included with the 3.1 software update? How do you know it will be by the end of this month?

Neutral

celz @ Jul 2nd 2009 2:06PM

i guess the fanboys are right windows just has too many security issues if they would just.. wait.. oh thats the omnipotent phone of phones that allows your movement and phone calls to be monitored with an sms or two.. how can this be does this mean apple is being ran by mortals and not angel like creatures with infinite wisdom and knowlege of gadgetry and producing commercials..

Highest Ranked

andonemorething @ Jul 2nd 2009 6:52PM

Ask Blaine. He knows everything.

Highly Ranked

miked @ Jul 2nd 2009 10:05PM

When will Microsoft patch IE?

Neutral

Ryan @ Jul 2nd 2009 2:38PM

This is just a ploy in order for Apple to MAKE you update do to all the Unlocking and Jailbreaking thanks to the Dev Team. If you update then you cannot Jailbreak and thus not being able to use Ultrasn0w. Dont listen to this bable crap.

Neutral

RAD Moose @ Jul 2nd 2009 10:28PM

But we want the exploit NOW!

oh wait.. patch, yeah, we want the patch now. uh huh. thats it.

Welcome back to Apple, Mr. Jobs.

Is this just with iPhone OS 3.0 or does if affect previous versions?

Low Ranked

Galen20K @ Jul 2nd 2009 11:09PM

Not Surprising, Apple is a gd Joke. This is what happens when you try to act like you're above everyone when in fact you absolutely aren't. It makes it even MORE apparent when they try to stress that their Programs/Software/Hardware are perfect and never make mistakes when in fact they make just as many and have just as many flaws as their Competition. They try to work hard to "cover up" their Mistakes so the Public wont see but our eyes are wide open, sorry.

I just find it all so Comical. *smile***

Highest Ranked

andonemorething @ Jul 3rd 2009 9:55AM

Not that Apple needs to be defended against your joke of a post, but your 'snicker' is all that is laughable. Only on the internet does your $.02 not require the return of your change.

Only kiddies whose careers do not require their own investment play on fringe OSs. Retire on Ubuntu, genius.

Apple is real. (And this from a non-Apple person)

Neutral

Jaheim @ Aug 1st 2009 4:22AM

Hacking violates our confidentiality.Well, we all knew it was bound to happen – there is an iPhone virus floating around, at least reportedly. (And no, we do not mean the iPhone itself or its marketing.) An iPhone virus has begun circulating through a text message that will instantly hack your accounts that you access through the phone, and the iPhone SMS hack is being fingered for some identity thefts, and victims using payday loans to cover damage. There will be future iPhone hacks (besides Apple) to be sure, and the procedure is that if you get the fraudulent message, turn off your phone immediately. You don't want to need cash advances to cover damage done by the iPhone virus.

Neutral

Janara @ Aug 1st 2009 4:25AM

This hacking problem should be fixed now. We dont want our informations from our phone get compemsated. Well, we all knew it was bound to happen – there is an iPhone virus floating around, at least reportedly. (And no, we do not mean the iPhone itself or its marketing.) An iPhone virus has begun circulating through a text message that will instantly hack your accounts that you access through the phone, and the iPhone SMS hack is being fingered for some identity thefts, and victims using payday loans to cover damage. There will be future iPhone hacks (besides Apple) to be sure, and the procedure is that if you get the fraudulent message, turn off your phone immediately. You don't want to need cash advances to cover damage done by the iPhone virus

http://personalmoneystore.com/moneyblog/2009/07/30/iphone-virus-wipe-bank-account/