iPhone Mail and Safari bug helps phishing attacks

Stephen Withers
Friday, 25 July 2008 02:51

Your IT - Mobility

Raff told iTWire "all I can say is that people who use this software are more exposed to get their email accounts being more spammed than usual."

Both issues have been reported to Apple by Raff, who does not intend to publish further details until the company has patched the applications.

He's not always that generous to vendors - earlier this year, he disclosed details of the 'print table of links' vulnerability in Internet Explorer.

"I've had bad past experience with Microsoft's response time," he noted at the time.

"The last time I used their 'responsible disclosure' policy, I had to wait 6 months for them to fix a one line of code in a non core component. As I've already showed, this 0day vulnerability also requires one line of code to be fixed, and I'm sure no one wants to wait 6 months for it to fix. Past experience also shows that Full Disclosure can help in getting a quicker fix."