iPhone gets iPwned by simple web-page hack

Miller, a former employee of the National Security Agency who has a doctorate in computer science, demonstrated the hack to a reporter by using his iPhone’s Web browser to visit a Web site of his own design.

Once he was there, the site injected a bit of code into the iPhone that then took over the phone. The phone promptly followed instructions to transmit a set of files to the attacking computer that included recent text messages — including one that had been sent to the reporter’s cellphone moments before — as well as telephone contacts and e-mail addresses.

“We can get any file we want,” he said. Potentially, he added, the attack could be used to program the phone to make calls, running up large bills or even turning it into a portable bugging device.

http://www.nytimes.com/2007/07/23/technology/23iphone.html?_r=2&oref=slogin&oref=slogin
entr0pysays...

Of course, there's a simple way to avoid this. Stop leeching other people's internet access! Similar things could happen on a PC if you go around trying to mate your laptop with every unprotected wifi hotspot.

therealblankmansays...

This is the reason operating systems need to have different levels of access employed. The iphone, like Windows 95 and 98, allows every single application to run at root. This is an incredible boon for hackers- if they can gain access, they will have complete control of the system. Unbelievable that Apple would make this fundamentally stupid mistake.

Send this Article to a Friend



Separate multiple emails with a comma (,); limit 5 recipients






Your email has been sent successfully!

Manage this Video in Your Playlists




notify when someone comments
X

This website uses cookies.

This website uses cookies to improve user experience. By using this website you consent to all cookies in accordance with our Privacy Policy.

I agree
  
Learn More