iPhone SMS security warning
- Fri, 3 Jul 2009
- Comment on this article
Security experts have warned of a security flaw that has been found in the iPhone.
The vulnerability was discovered by security expert Charlie Miller, who announced it to attendees at the SyScan conference in Singapore.
Miller is working with Apple to fix the flaw, which can be exploited via text message.
Some of the finer details of the flaw have not been announced in a bid to stop them falling into the wrong hands.
What is known is that an attacker could intercept data from the iPhone's GPS (global positioning system) chip so the phone could be tracked, or intercept signals from the microphone in order to eavesdrop on conversations.
What is particularly worrying is that all an attacker has to do is send a specially crafted SMS message to exploit the vulnerability.
"This is about as bad as it gets as the vulnerability seems to allow unsigned code to run which circumvents a core part of iPhone's security model," said F-Secure's Patrik Runald.
"It's usually only able to run signed code, such as Apps that have been approved by Apple. No user-interaction is required which is unlike current mobile malware," Runald continued.
Miller will reveal more details about the flaw at the BlackHat USA conference which begins on 25 July.
In the meantime, security experts advise that you should keep your iPhone's firmware up to date by regularly connecting to iTunes in order to download any updates.





Comments
Latest comments
No comments posted. Be the first by posting yours below...