New iPhone Security Flaw Could Present a Host of Problems
MobileCrunch reports that anonymous hackers have found a way to exploit a flaw that allows the iPhone's settings configuration files to be installed over-the-air through Safari.
Usually the installation has to be confirmed manually, with the iPhone telling the user who it’s from and whether or not it’s a trusted source. However, the hackers were not only able to make the configuration file report back as “Verified," but also indicate that it was from “Apple Computer” themselves.
Once installed, the file could allow hackers to redirect all traffic through a server of their choosing. The file could also disable the use of Safari, Mail, and a handful of other first-party iPhone apps. Moreover, it’s possible to set the configuration file so that the user can’t remove it without a full wipe.
You can find the full technical details here.
Kara Reeder
Kara joined the IT Business Edge editorial team in February 2007 after working for ProQuest Information and Technology. Kara covers all areas of technology news for ITBE.com.
Subscribe to Our Newsletter
Stay Connected to
Network Security Edge
Copyright © 2010 NarrowCast Group, LLC. All rights reserved.
Comments
Post new comment