| BEST 5 CELL PHONE REVIEW | c|net | About.Com | Computer Shopper | PC World |
Where to Get
|
Technical Specifications
|
Features
|
iPhone Discussion
|
A Guided Tour
|
IPHONE RELATED ARTICLES: Iphone Accessories Iphone Ringtones Iphone Software Iphone Games Iphone Clone Free Iphone Iphone Gps Apple Iphone Accessories Buy Iphone Iphone Accesories Iphone Unlocked Iphone Skins Iphone Forum 3g Iphone Unlocked Iphones Iphone 3g Iphone Themes How To Unlock Iphone Iphone Protectors Iphone Features Iphone For Sale Chinese Iphone Iphone Screen Iphone Icons |
iPhone vulnerability announced Researchers at Independent Security Evaluators have announced at least two exploits that take advantage of the way the Apple iPhone opens a specially crafted Web page in Safari. Exact details of the vulnerability exploited will have to wait until a presentation at the end of next week's Black Hat conference in Las Vegas. However, some general information has been offered here.. In a preliminary draft of the Black Hat presentation, ISE researchers Charlie Miller, Jake Honoroff, and Joshua Mason note that there are "serious problems with the design and implementation of security on the iPhone," and they single out the fact that most processes run with administrative privileges. Also the custom operating system within the iPhone does not use address randomization or non-executable heaps, making it easy for someone to create an exploit once a vulnerability is found. The researchers said they found such a vulnerability within the Safari browser through fuzzing. Although the researchers wrote two exploits on their own, public exploits for these specific vulnerabilities do not exist. Apple was notified on July 17, 2007, and has yet to respond. 'One of the exploits requires the Safari browser to surf to a maliciously coded Web site. Once there, personal data, SMS text files, contact information, call history, passwords, e-mail, browser history, and voice mail information could be obtained by a remote attacker. A second exploit developed by the researchers caused the iPhone to make a system sound and vibrate for a second after visiting a maliciously coded Web site. The same exploit could also dial a phone number, send a text message, or turn on the microphone to eavesdrop remotely on conversations within the room. The Bluetooth process and vulnerability When it's set to "discoverable" mode, your Bluetooth cell phone or PDA sends a signal indicating that it's available to "pair" with another Bluetooth gadget and transmit data back and forth. However, an attacker who detects this signal could also attempt to pair with your device and hack in to steal your personal identification number (PIN). You could remain unaware, while the attacker, with your PIN in hand, could be:
|
|
|
|
| Visit the web design guide. |