Apple security expert finds security flaw in iPhones, iPads

[Guest blackknight]

Tuesday, Nov 08, 2011

A software flaw in Apple Inc's iPhones and iPads may allow hackers to build apps that secretly install programs to steal data, send text messages or destroy information, according to an expert on Apple device security.

Charlie Miller, a researcher with Accuvant Labs who identified the problem, built a prototype malicious program to test the flaw. He said Apple's App Store failed to identify the malicious program, which made it past the security vetting process.

There is as yet no evidence that hackers have exploited the vulnerability in Apple's iOS software. But Mr Miller said his test demonstrated that there could be real malware in the App Store.

RELATED STORIES

How Apple tracks your location without you knowing

'Until now you could just download everything from the App Store and not worry about it being malicious. Now you have no idea what an app might do,' Mr Miller said.

Mr Miller said he proved his theory by building a stock-market monitoring tool, InstaStock, that was programmed to connect to his server once downloaded, and to then download whatever program he wants.

(To see a YouTube video demonstration of the technique, go to http: www.youtube.com/watch?v=ynTtuwQYNmk) Apple did not respond to requests for comment.

Mr Miller, who in 2009 identified a bug in the iPhone text-messaging system that allowed attackers to gain remote control over the devices, said that he had contacted the company about the vulnerability.

'They are in the process of fixing it,' he said.

Mr Miller is scheduled to present his detailed research at the SyScan '11 security conference in Taiwan next week.

[Guest skid]

there is this app that can allow you to track others iPhones? wonder if this can be exploited for the wrong uses hmmmm? :scared::scared:

[Guest Jarebbsg]

Nothing is safe. Even in cloud environment.

[Guest hannson]

Jarebbsg wrote:

Nothing is safe. Even in cloud environment.

Nothing is safe. Especially in cloud environment.

[Guest Wes23]

This is scary! Means people might know where you live with your full name! Be careful sister 6987! You must quickly hire me to protect you Liao!

[Guest hkhamateur]

Wes23 wrote:

This is scary! Means people might know where you live with your full name! Be careful sister 6987! You must quickly hire me to protect you Liao!

Kekeke....:bounce: :bounce:

No need iphone or apple, I alr knw liao...! :becky:

Just booked 2 units. One below her n the other abv her. :hand:

Attack n kidnap fm both sides. Hehehe. :peep: :fencing:

Reason: I'm using Pear hp! :laugh: :laugh:

[Guest Wes23]

hkhamateur wrote:

Kekeke....:bounce: :bounce:

No need iphone or apple, I alr knw liao...! :becky:

Just booked 2 units. One below her n the other abv her. :hand:

Attack n kidnap fm both sides. Hehehe. :peep: :fencing:

Reason: I'm using Pear hp! :laugh: :laugh:

No!!! Dun make me lose my first job!!