[IP] Hacking The iPhone

[Dave Farber <dave@farber.net>]

-----Original Message-----
From: Monty Solomon [mailto:monty@roscom.com] 
Sent: Monday, August 06, 2007 1:44 PM
To: undisclosed-recipient:
Subject: Hacking The iPhone


The Black Hat Conference
Hacking The iPhone
Andy Greenberg, 08.04.07, 2:02 PM ET

LAS VEGAS -

Don't say you weren't warned, iPhone fans. Even when the prerelease 
fervor surrounding Mac's mobile messiah-phone was at its highest, 
security researchers were warning that it would be vulnerable to 
exploitations like data theft and hijacking.

Last Thursday, Charlie Miller proved them right. In a presentation at 
the Black Hat conference in Las Vegas, a gathering of cyber-security 
researchers, Miller detailed how he had hacked and hijacked the 
iPhone by exploiting a vulnerability in its Web browser.

For iPhone owners, the talk wasn't as foreboding as it might have 
been. Apple had released a patch for Miller's exploit just days 
before. But Miller, a researcher at Independent Security Evaluators, 
says Apple's patch was only possible because he had informed the 
company of the vulnerability weeks before he presented it to Black 
Hat's hacker audience. And, he says, it would only be a matter of 
time and effort to find an equally powerful backdoor into the phone.

Though there has yet to be any documented criminal hijacking of the 
iPhone outside of a lab, Miller says his research shows the relative 
ease of hacking smart phones, as well as Macs in general. He spoke 
with Forbes.com about the iPhone's vulnerabilities, Apple's 
short-lived patch and the company's undeserved reputation for 
building secure computers.

...

http://www.forbes.com/security/2007/08/04/iphone-apple-mac-tech-cx_ag_0804mi
ller.html



-------------------------------------------