Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple notified of problem a month ago. No word from them that they are working on a fix or when to expect that fix.

"Problem" gets on National tv (saw it with the headline... a problem that effects ALL iPhones..."

Few days later, Apple releases SMS Security Flaw fix...

Way to go for "bad press"! :rolleyes:

1. Why would Apple announce "we have a security flaw, and we haven't fixed it yet, but we're working on it!" That would be TERRIBLE security practice. These flaws are reported to vendors in secret for a good reason.

2. How could international attention NOT accelerate the release of the fix?

3. What did Microsoft do when they too were notified of the problem, which is not iPhone-specific but affects Windows Mobile too? Are they too getting "bad press?" (We'll have to see.)

4. From a public perspective, this will be perceived as a quick fix from Apple--GOOD press :)

The computer I use to sync with my phone is in repairs, so it'll be a while until I can update. :( Is there any way to disable SMS until I have the ability to update?

I think you can simply call your carrier and have them blocked. (I assume that would help, in the event that someone makes use of this vulnerability to craft a real-world spreading exploit that affects iPhones.)
 
The computer I use to sync with my phone is in repairs, so it'll be a while until I can update. :( Is there any way to disable SMS until I have the ability to update?

Now that the fix has come out, it is unlikely anyone will bother trying to do anything anymore.
 
Baseband is 04.26.08, same as 3.0; so unlock should still keep.

Build is 3.0.1 (7A400)

It kept my Tethering settings, and it still works (just tested it quickly), but I was never able to get MMS working via the hacks, so I can't comment on that.

I was not jailbroken, so I can't comment on that either, but ModMyI seems to have said that it breaks it, which isn't a surprise at all.

This is on my 32GB 3GS Black.

Thank you sir! Updating as I type this message...
 
Ha, same here. Maybe they will update it with mini golf course info.

I got it when it was $29, and from a frequent golfer, trust me, its worth $49. I can't believe it is on sale today for 99 cents. The app is money!
 
Clicking "update" to 3.0.1 in iTunes on my unlocked 2g in canada caused the phone to get locked again....just had to jailbreak back to 3.0, which appears to have worked just fine, am currently resyncing.
 
Apple needs to figure out how to implement a diff update for iPhone OS. I mean a 300MB for a simple bug? They could just release a 512kb update file just to fix the bug. I am curious why they aren't doing a binary diff update for minor software updates like this one.

They needed to make sure it wasn't another Microsoft plot to embrace & extend.
 
I'm very glad to see this got fixed before any sort of massive problem resulted. Can you imagine how severe the negative PR would have been for Apple if an attack really did take control of several million iPhones? Unlikely, I know... but still...
 
So, does this mean that Apple is the FIRST to fix this vulnerability, which ALSO affects Windows Mobile and Android?

If, so, I bet the headlines will still read "Panicked Apple rushes to fix shocking iPhone security disaster!!!" when they should read "Microsoft, Google and wireless carriers late to fix serious flaw in Windows Mobile and Android, while Apple patches iPhones promptly."

(I saw something vague about "Google has taken steps" but has the fix been distributed to both Android users? If so, then only Windows Mobile is left behind?)

And I should add: good catch! (To the researcher who found the problem.)

Ya, Android was fixed two days after they were notified. Apple waited 6 weeks, plus 1 day of bad press.

Yesterday, the guy who reported it was a bad guy, and now he is a good guy.. It all depends on how it makes Apple look.
 
Ya, Android was fixed two days after they were notified. Apple waited 6 weeks, plus 1 day of bad press.

Yesterday, the guy who reported it was a bad guy, and now he is a good guy.. It all depends on how it makes Apple look.

You're reading something I didn't say, I think :)

He's a good guy for catching the flaw, and a good guy for notifying the vendors secretly as he should have. My praise had nothing to do with how he "makes Apple look."

Also I don't know HOW he made the recent public presentation, and I have no opinion on that stage.

Kudos to Google as well. The correct headline, then, seems to be: "Microsoft and wireless carriers late to fix serious flaw in Windows Mobile, while Apple and Google patch promptly."

As for Apple releasing this one day after the announcement:

1. Did Apple ignore the issue and then suddenly fix AND test the fix last night? Or have they been working on it beforehand? The latter is far more likely.

2. How could the public announcement NOT prompt the release of the fix? Apple may have been planning to include it with some other fixes that aren't ready today. Instead, they released the fix alone. Seems sensible.
 
also, it broke 3g jb. (havent tried re-jb it though - no time before work.)

It hasn't broken the redsn0w jailbreak, just the purplera1n method. It has the same baseband too so it should be unlockable with ultrasn0w with new issues.
 
Well that was a boring update, no errors, activation problems...nothing. Very vanilla.
 
Apple could have at least had a little fun and added one of the 3.1 features into this update :D

They could have intentionally slipped MMS into the update, and then looked at AT&T and said "Oh! My Bad!" Hahaha. :D
 
Bad idea. Just read elsewhere it breaks the jailbreak...

Update 2: Looks like using a 3.0 firmware .ipsw with redsn0w to jailbreak 3.0.1 works. Purplera1n failed. This might be unlockable with ultrasn0w as well (we don't know if the baseband has been updated yet, all testing has been done on iPhone 3GSs with the 3.1 baseband).

:):)
 
I think Apple deserves a kudos for the faster turn around time. It's sad that it took them this long to fix it but at least they seem to be improving.
 
Can you imagine how severe the negative PR would have been for Apple if an attack really did take control of several million iPhones? Unlikely, I know... but still...

I wonder why so many people are downplaying this threat... it seems more likely that attacks have occurred and no one is aware of it. It's not like your phone would start flashing a red infected window if it actually happened.

It's quite possible you would never know until one day you realize your accounts are overdrawn and those intimate photos of your wife are suddenly on the internet.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.