iPhone Security Bug Lets Innocent-Looking Apps Go Bad

[Gavernty]

Interesting read, I wonder how long until this is patched

http://www.forbes.com/sites/andygreenberg/2011/11/07/iphone-security-bug-lets-innocent-looking-apps-go-bad/

 

[Gavernty]

well I thought it was important!

 

[alphaod]

I wouldn't be surprised if this one of the methods the jailbreaking community were planning to use in a future release.

 

[Gavernty]

I wouldn't be surprised if this one of the methods the jailbreaking community were planning to use in a future release.

I was actually thinking the exact same thing....

 

[farmermac]

Humm someone should get Charlie miller to work on a jb

Edit: beat to it

 

[parapup]

Miller was booted off the app store for telling Apple their software sucks. Sad but 100% real story, bro.

 

[AdeFowler]

Miller was booted off the app store for telling Apple their software sucks. Sad but 100% real story, bro.

It was a proof of concept app I believe, so had the potential to be harmful. At least we know that Apple are aware of the problem.

 

[RossMc]

Miller was booted off the app store for telling Apple their software sucks. Sad but 100% real story, bro.

Not really he was removed as a developer for exploiting a security flaw.

 

[wrinkster22]

Interesting read up. I am sure apple will deal with it. In the same page there was link about him hacking other devices- notably apple batteries that I found interesting. http://www.forbes.com/sites/andygre...e-to-hack-that-kills-or-corrupts-batteries/2/

 

[KPOM]

well I thought it was important!

It is, and it's starting to get some press. According to the article I read, Apple is aware of the issue and is quietly working on a fix, but isn't commenting on the specifics at the moment.

 

[thewitt]

Charlie is an attention whore.

He could have found this exploit and quietly told Apple about it, like many other developers do whenever they find a flaw in the OS. Apple would patch it and everyone would be happy.

Instead he decides to exploit it and then go live with the details, to what end? Certainly not to help Apple.

They were right to cancel his developer account and throw him off the bus.

He's a smart guy. Too bad he makes such stupid decisions.

 

[diamond.g]

It appears he is exploiting a flaw in the browser. It looks like Apple has allowed the browser to run at a lower level than normal to increase the speed. Hopefully Apple is able to patch this hole as it seems to be a pretty bad flaw.