Nasty JavaScript code can zap new iPhone, iPod Touch
19025
Kernel bogey Security researchers have discovered you can crash an iPhone through the medium of a cleverly crafted webpage.â¦
275415
Blog: The hack allows Wi-Fi and iPod features but won't allow you to make phone calls.
668206
(InfoWorld) - iPhone hackers have some new tools now, thanks to HD Moore, one of the developers of the Metasploit hacking software. On Tuesday, Moore announced that he was supporting the iPhone within his Metasploit framework and released software that would allow hackers to run "shellcode" command prompts on Apple's mobile device. By integrating the iPhone into Metasploit, it will now be a little easier for hackers to gain access to someone else's iPhone, but they will also need a few other tools to succeed. First, they will need to create working exploit code, which takes advantage of bugs in Apple's software, to trick the device into running the shellcode. They will also need to create more sophisticated "payload" applications that can do things like remotely connect with the hacker. "It's a first step," Moore said of his hack. With iPhone prices dropping and noticeable improvements in the quality of iPhone hacking tools, Apple's phone has become a more interesting target of late, Moore said. And the iPhone has obviously hit a nerve in the security community. Moore said that about a quarter of the attendees at the recent Black Hat conference in Las Vegas had the devices. "It's trendy," he said. "It kind of creeped me out when I saw how many people had iPhones when I went to Vegas." In fact, hackers have already developed a number of exploits that they claim could be used on the iPhone's Safari browser. And security researchers have even demonstrated how the iPhone can be compromised. In July, a Baltimore, Maryland, company called Independent Security Evaluators showed howÂ it could run unauthorized software on an iPhone by taking advantage of a Safari bug. Moore believes that the iPhone's browser and mail client will be the best sources of bugs and he said that because of the components and information stored on the phone, it may end up being a more attractive target than the PC. For example, the phone could be used to track someone's location based on information from cell phone towers. Throw in the iPhone's microphone, camera, and an Internet connection, and you suddenly have a device that could be used to secretly keep tabs on people, Moore said. "If you look at what you get by exploiting someone's iPhone, you actually get a lot more than you do from someone's PC a lot of the time," he said.
132571
A group of anonymous programmers has released new software that allows music to be swapped via Apple Computer&#39;s popular iTunes jukebox.
679761
Looks like the time has come when mobile users would have to seriously consider getting some protection for their devices. Mobile viruses are coming out pretty regularly now and trend seems to be pointing towards a frantic future.
77905
An Opera developer jumps the gun and tells a blogger the company is prepping a version of its browser for Apple's iPhone. Is it true? Opera says no, but the debacle underlines the anticipation surrounding the inevitable iPhone browser war to come.
403071
Here's a screen shot of the HTML source.  Looks like it's trying to serve some kind of ActiveX control. Happy to be using a Mac.  PS: Scoble just showed up and TM works on his cell phone so there's something weird going on.
573129
âThis week,â reports Katerine Boehret , âIâve been using an iPhone and iPod touch withâ the recent Apple updates installed, âand I must say that both devices are much more useful and fun with these improvements.â In particular, Boehret likes Web clip: they âgive these gadgets a new sense of instant gratification because they direct users to specific Web pages seconds after the device turns on.â And the iPod touch ânow has the same stellar Mail program that is found in the iPhone, a real plus,â she says.
315852
There's been a lot of media attention directed at the iPhone recently. Some of it has been positive, some negative, but none have come forth to acknowledge the obvious, sinister context of Apple's latest toy. This device is obviously designed to introduce our children to witchcraft and sorcery.
684110
(InfoWorld) - Security researchers at SPI Labs are warning iPhone users not to use a special feature that lets them dial telephone numbers over the Web using the iPhone's Safari browser. The feature was created to give iPhone users a simple way to dial phone numbers listed on Web pages, but according to SPI, the feature could be misused. [ Blog:Â Researchers point to iPhone security riskÂ ] Attackers could exploit a bug in this feature to trick a victim into making phone calls to expensive "900" numbers or even keep track of phone calls made by the victim over the Web, said Billy Hoffman, lead researcher with SPI Labs. The iPhone could even be stopped from dialing out, or set to dial out endlessly, he said. "Because this vulnerability can be launched from Web sites, everybody who has an iPhone has the potential to get exploited," Hoffman said In order for the attack to work, the bad guys would have to either trick iPhone users into visiting a malicious Web site or make a legitimate Web site send untrustworthy information to the iPhone using what's known as a cross-site scripting attack. "Any time someone could control the content that's getting sent to the iPhone [the possibility of an attack] exists," Hoffman said. SPI is not releasing detailed information on how the Web dialing feature could be exploited, but the company contacted Apple on July 6 and is working with the iPhone maker to prevent these types of attacks, Hoffman said. Apple could not be reached immediately for comment. Because Apple is encouraging software developers to write Web applications for the iPhone that use Safari, the browser has come under particular scrutiny from iPhone hackers. Researchers had previously noted that Safari could be used to misdial numbers, but Hoffman's post suggests that this could be done more easily than previously thought. Not everybody thought the SPI findings were groundbreaking, including Dave Aitel, CTO with Immunity Inc. "If you can make calls from the Web browser, you can make fake calls from the Web browser," he said. So should iPhone users stop using the Web to place calls? "Yes," said Aitel. "If they know a lot of hackers and are a special target."
440302
Apple has released an update to iTunes that blocks users from creating free custom ringtones and then syncing them to an iPhone. Despite Apple&#8217;s best efforts to thwart users, a workaround has already been found and posted to the Internet.
78443
Flaw in the way the Net phone software handles Web links could enable an attacker to launch arbitrary code on some Macs.
552613
When Apple Inc. introduced the latest version of its Safari browser two weeks ago, it took the hacking community just hours to start reporting bugs in the beta code. On Friday, the iPhone is likely to get even closer scrutiny from many of the same security researchers. Here's a list of the top items on the typical iPhone hacker's to-do list.
742168
Many iPhone hacks require opening up the case -- and that can lead to trouble, as one would-be hacker discovers, when a wayward screwdriver punctures the battery, causing it to explode.
457591
Hackers revealed exploit code for JavaScript vulnerability.
353081
Blog: Recently patched browser from Apple springs another leak.
161172
An iPhone owner has hacked his device so that it can record video.