Upcoming iPhone Software Update to Address Security Flaws - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Business/E-Business
Commentary
8/28/2008
08:19 PM
Commentary
Commentary
Commentary
50%
50%

Upcoming iPhone Software Update to Address Security Flaws

A locked iPhone isn't really locked -- not if you're running firmware 2.0.2 (the current version) or earlier. Apply promises to patch a newly discovered security flaw next month.

A locked iPhone isn't really locked -- not if you're running firmware 2.0.2 (the current version) or earlier. Apply promises to patch a newly discovered security flaw next month.A simple trick lets anyone bypass the lock to get access to your address book, Web browser (and your favorites and stored passwords), SMS, and more. The trick was revealed by the Gizmoto Web site yesterday, and it goes like this:

1. Pick up a locked iPhone, press the "Home" button to get to the unlock screen. 2. Tap "Emergency Call." 3. Press the round "Home" button twice.

And voila  you're in the Favorites menu. From there, you can make any phone call, get to Safari, send text messages and more. I tried it on my iPhone 3G, and yes, it's a flaw.

Whoops.

You can easily defeat this flaw, says Gizmoto, by going into Settings, clicking on General, clicking on Home Button, and select "Home." If you do that, double-pressing the "Home" button will just take users back to the unlock screen. (By default, the "Home" button takes you to the Phone Favorites menu, which is the root of the problem.)

Apple has already issued two firmware updates for the iPhone 3G since its launch, essentially replacing all the built-in software on the phone. Get ready for the next one in September, which Apple says will address this particular flaw.

An Apple spokesperson, Jennifer Bowcock, told Macworld, "The minor iPhone security issue which surfaced this week is fixed in a software update which will be released in September." It's up to you to decide if easy access to someone's stored data on a locked phone is a minor flaw or a major one. (I think it's a big deal.)

The previous update, to software 2.0.2, was released on Aug. 18, and was intended to solve widely reported problems with high-speed connections to 3G networks. However, according to the blogosphere, many users still have connectivity problems, and are experiencing other issues with the iPhone 3G and with applications downloaded from the iTunes App Store. Let's see if the next release  probably to be numbered 2.0.3  makes a difference.

Some folks, of course, aren't waiting. InformationWeek says that one customer, Jessica Smith, is suing Apple claiming that the iPhone 3G is much slower than advertised.

Meanwhile, the Advertising Standards Authority in the U.K. has ruled that Apple's ads mislead customers by claiming that the iPhone can surf "all parts of the Internet" without disclosing that it can't handle sites that use Flash or Java. Apple responded that its ads are technically accurate, because the iPhone's browser can indeed reach all those sites, even if it can't display their contents. The ASA wasn't impressed. It ordered Apple to stop running its current iPhone ads in the UK.

Once again: Whoops!

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
2020 State of DevOps Report
2020 State of DevOps Report
Download this report today to learn more about the key tools and technologies being utilized, and how organizations deal with the cultural and process changes that DevOps brings. The report also examines the barriers organizations face, as well as the rewards from DevOps including faster application delivery, higher quality products, and quicker recovery from errors in production.
News
How COVID is Changing Technology Futures
Jessica Davis, Senior Editor, Enterprise Apps,  7/23/2020
Slideshows
10 Ways AI Is Transforming Enterprise Software
Cynthia Harvey, Freelance Journalist, InformationWeek,  7/13/2020
Commentary
IT Career Paths You May Not Have Considered
Lisa Morgan, Freelance Writer,  6/30/2020
Register for InformationWeek Newsletters
Video
Current Issue
Special Report: Why Performance Testing is Crucial Today
This special report will help enterprises determine what they should expect from performance testing solutions and how to put them to work most efficiently. Get it today!
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll