iPhone SMS Vulnerability Open To Hackers
http://erictric.com/?p=3142
Etictric.com, 29 Jul 2009
Countdown to iPhone SMS Vulnerability: Does Apple Even Care?
Apple doesn’t have too long to react to a potential public
embarrassment at the upcoming Black Hat securty conference on Thursday,
July 30 with a patch to correct an SMS vulnerability. Apparently, the bug would allow hackers to take over an iPhone by sending an SMS message.
Charlie Miller, the man who discovered the bug initially mentioned this
problem at the SyScan conference in Singapore earlier this month,
though at that time his finding only produced an iPhone crash. Miller
has since been working on the vulnerability, and claims to have finally
been able to take over Apple’s flagship mobile device with a few SMS
messages.
“SMS is an incredible attack
vector for mobile phones,” Miller said. He went on to boast that, “All
I need is your phone number. I don’t need you to click a link or
anything.”
Though Miller himself reported the bug to Apple six weeks ago, there
has yet to be a response from the computing giant. Miller is planning
to showcase his hack along with security researcher, Collin Mulliner on
Thursday.