Technology news and Jobs 
Information Technology News iPhone open to SMS attack
Information Technology News iPhone open to SMS attack | iPhone open to SMS attack |
|
| by Stephen Withers | |
| Friday, 03 July 2009 | |
|
Page 1 of 2   
Featured Whitepaper
5 Best Practices for Smartphone Support
Now he has revealed that it is possible to use maliciously formed SMSes to install and run code on an iPhone. While SMS messages are limited to 140 bytes, there is provision for longer messages to be split into the required number of SMSes and then reassembled by the receiving handset. Miller's technique allows an attacker to install and run code with root access on an iPhone. The problem - at least until Apple delivers a patch - is that there is apparently no way of stopping an iPhone from receiving SMSes apart from putting it into airplane mode, which disables the radio completely and makes the handset useless as a phone. Apart from is PWN2OWN success, Miller has also drawn attention with his "no more free bugs" stance, pointing out that since the identification of security flaws clearly has commercial value for the software companies concerned, otherwise they wouldn't employ people to work on such issues. (There's also an underground market for such information, as working exploits can be used to plant malware on computers and related devices, which are then used to make dirty money.) |
| < Next story in category | Previous story in the category > |
|---|
