Mac And iPhone Security Issues Mounting - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Government // Mobile & Wireless
01:10 PM
Jake Widman
Jake Widman

Mac And iPhone Security Issues Mounting

New ways to break the iPhone's security and reports of new Mac exploits should serve as a warning to Mac-based businesses not to become complacent.

New ways to break the iPhone's security and reports of new Mac exploits should serve as a warning to Mac-based businesses not to become complacent.The annual Black Hat technical security conference is going on in Las Vegas this week, and just like every year, some enterprising security experts have shown up with demonstrations of security flaws in Apple products. We should probably pay attention.

The demonstrations are usually proofs of concept that never seem to actually get exploited in the wild. It may seem that the experts are like the hackers who cried "wolf" -- but if you remember how that story ended, it wasn't a happy outcome for the sheep or the boy.

This year, security researcher Dai Zovi showed a way for hackers to take control of Safari and steal encrypted data. But more worrying is his prediction that as the Mac market share grows and hackers start targeting them, Macs will prove to be more vulnerable than we've come to expect. Reuters quoted Dai Zovi as saying, "There is no magic fairy dust protecting Macs."

His prediction is seconded by Charlie Miller, who wrote The Mac Hacker's Handbook. He said, "[Apple's security efforts] are advancing. Our concern is that they are just not advancing as fast as they are gaining market share."

Black Hat also saw the demo of a method of taking control of an iPhone by sending malicious SMS messages. The vulnerability was discovered by the same Charlie Miller, who said "SMS is an incredible attack vector for mobile phones. All I need is your phone number. I don't need you to click a link or anything."

And last week, two researchers posted a video on YouTube demonstrating how easy it can be to break the encryption and retrieve the passcode an on iPhone 3GS -- the same encryption that Apple describes as "highly secure."

The takeaway here isn't that Macs and iPhones are particularly vulnerable. It's that they aren't as invulnerable as we Mac users, who've never had to confront serious attacks on our machines, have come to expect. Don't assume your sheep, I mean your Macs, are safe just because the previous warnings didn't pan out.

Update: Apple has since released a free patch that supposedly fixes the SMS vulnerability. At the same time, there are new warnings out of Black Hat about, basically, SMS phishing.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
InformationWeek Is Getting an Upgrade!

Find out more about our plans to improve the look, functionality, and performance of the InformationWeek site in the coming months.

Becoming a Self-Taught Cybersecurity Pro
Jessica Davis, Senior Editor, Enterprise Apps,  6/9/2021
Ancestry's DevOps Strategy to Control Its CI/CD Pipeline
Joao-Pierre S. Ruth, Senior Writer,  6/4/2021
IT Leadership: 10 Ways to Unleash Enterprise Innovation
Lisa Morgan, Freelance Writer,  6/8/2021
White Papers
Register for InformationWeek Newsletters
Current Issue
Planning Your Digital Transformation Roadmap
Download this report to learn about the latest technologies and best practices or ensuring a successful transition from outdated business transformation tactics.
Flash Poll