Operators say 'told you so' on iPhone security
546380
Handset security report hits the streets Operator talking-shop the OMTP (Open Mobile Terminal Alliance) has published its white paper on handset security, saying something along the lines of Symbian Signed is a good idea, and that if Apple had listened to it the iPhone would never have been cracked.â¦
720006
Blog: After some false starts, unlocking an iPhone now seems to be a reality.
191968
No opening the handset case, no soldering -- a hacker group has announced that they've come up with a workaround allowing iPhone owners to make calls via networks other than AT&T.
208854
The problem that I have with some of the iPhone alarmism is that it leaves an impression that enterprise data is highly secure and that there aren't lots of other potentially much larger holes on which to focus.
693229
(InfoWorld) - A team of security experts in Baltimore said it has found a flaw inÂ Apple's iPhone handsetÂ that can be used by attackers to access private data stored on it. Independent Security Evaluators (ISE) said on a Web site dedicated to explaining the flaw and its exploitation that an attacker could gain access to the iPhone through a wireless access point, or through a Web site controlled by the attacker. Numerous hackers have beenÂ working to gain access to the iPhoneÂ in order to activate certain features or to allow it to be used on cellular networks other than AT&T's. However, this is the first major exploitation of an iPhone security flaw. Because the iPhone connects to wireless Internet access networks, such as Wi-Fi, by name, an attacker could create a network with the same name and encryption method as one the handset already uses. The attacker could then substitute a Web page with exploit code to gain access to the phone, ISE said on its Web site. An attacker could also use a link planted on an unedited or unmoderated online forum, or a link sent by SMS or e-mail to use make use of the flaw and gain access to the handset, ISE said. The company said its researchers had required two weeks of part-time work to find the flaw and exploit it. When the iPhone's Safari browser opens a malicious Web page, malicious code can be run on the phone via the flaw, allowing the attacker to read the iPhone's SMS log, address book, call history, and voice-mail information, which are also then sent to the attacker, ISE said. ISE said it would be presenting full details of the exploit and its procedure at the Black Hat 2007 conference in Las Vegas on August 2. Â
694942
SAN FRANCISCO - Apple Inc. said that almost one out of every six iPhones sold may have been unlocked to run on unauthorized wireless networks, surprising analysts who had estimated the problem wasn't as widespread.
631753
(InfoWorld) - A company that unlocks cell phones in Europe said it is close to having an application that will allow customers to unlock their Apple iPhones so they can use SIM cards from carriers other than AT&T to activate the phones. In an interview this week in New York, John McLaughlin, founder of Belfast, U.K.-based Uniquephones, said he has engineers working around the clock in several countries who are close to cracking the complex security system Apple has set up to ensure customers can only use iPhones with AT&T Wireless service. The race by hackers to unlock iPhones has been on since the phone was released last Friday. Currently, AT&T Wireless has an exclusive deal with Apple to provide service for iPhones, and customers must agree to a two-year service plan with the company. However, customers have complained that the carrier's wireless service is slow, and according to McLaughlin, there has been tremendous interest in the ability to unlock the phone. By Sunday night, he said, more than 150,000 inquires had come in through the Web site he set up to request IMEI (International Mobile Equipment Identity) numbers from customer iPhones. While not everyone would volunteer their IMEI numbers, they still expressed interest in learning how to unlock their iPhones, McLaughlin said. When the site was set up, he thought it would be an easy case of supplying unlock codes from AT&T to unlock iPhones. But sometime over the weekend after iPhones went on sale, unlock codes from AT&T for about 6,000 iPhones disappeared from the carrier's database, and McLaughlin's team also realized it would be a more complex matter than simply providing an unlock code to release iPhones from AT&T's grip. There is at least a two-step process to unlocking an iPhone, McLaughlin said. His team has been able to unlock the activation process to the AT&T SIM card specific to an iPhone so another AT&T SIM card can work with the phone and be activated through iTunes. However, any attempt to change the firmware of an iPhone so it can support another carrier's SIM card breaks the phone, he said. The key to unlocking the phone is breaking the encryption process that protects the token sent through the iTunes activation process to an iPhone's firmware, McLaughlin believes. Norwegian hacker Jon Lech Johansen, also known as "DVD John" because he cracked the DVD encryption scheme, claims he's been able to unlock the iPhone beyond the activation process that requires an AT&T account but said the device can't be used as a phone when that happens. Even after an iPhone were unlocked, it still could only work on carrier networks that support the GSM network, which is what AT&T's service is based on. In the U.S., T-Mobile is the only major carrier on a GSM network. And there is no guarantee Apple will not lock down the phones again in a future firmware update through the iPhone synchronization process or create a new way to unlock the next wave of iPhones they put on the market. That is, in fact, exactly what one analyst said will happen. "I assume that someone will succeed in unlocking the iPhone," said Avi Greengart, principal analyst, mobile devices at Current Analysis. "I also assume Apple will close whatever loophole is open the next time they synchronize [the software]." It's also likely there will be complications with special features of the phone that are designed to work only on AT&T's network, such as the visual voicemail feature, he said. Greengart said that he sympathizes with those that might want to use an iPhone with another carrier but "that's not the way the product was designed." "Exclusive agreements are not that unusual in this industry at all," he said. Aaron Santell, an iPhone user in New York, said that he would have preferred to use the service provider he has for his Blackberry device, Verizon Wireless, when he purchased an iPhone. But using AT&T's service is "a small price to pay" to use a device that provides such a rich user experience as the iPhone does, he said. As one might imagine, unlocking phones is a thorny issue with carriers, which certainly don't condone it. Carriers will give users unlock codes upon request for a fee, but they don't encourage the practice. In the U.K. and Europe, third parties have been unlocking handsets for several years, although there is no law that specifically protects them, McLaughlin said. However, in the U.S., it is legal to unlock mobile handsets under an amendment to the Digital Millennium Copyright Act that was passed in November 2006. McLaughlin said that even though it's legal in the U.S. to unlock phones, he anticipates that if his team is successful, Apple may take legal action against them based on their tinkering with the firmware. "They'll probably come after us for copyright infringement," he said. Apple did not reply to requests for comment Thursday. McLaughlin plans to charge customers about $49.99 for software to unlock iPhones. Even if Uniquephones is not the first to offer unlocking capability, it won't be hard for them to replicate what others have done once the encryption is cracked, he added.
264226
Really: we can unlock an iPhone Belfast company UniquePhone has reacted to accusations that it can't really unlock Apple's iPhone by posting a four minute video showing someone apparently doing just that.â¦
540909
Video shows it working? A utility claimed to be the world's first software tool for unlocking the Apple iPhone was launched yesterday, even as hardware hackers said they'd figured out how to get the same result by tweaking the gadget itself.â¦
612940
Analysts are telling companies that the iPhone isn't designed for business use and they'd be better off keeping it out of their workers' hands. Try telling that to the worker -- or the CEO -- who wants one.
761139
InfoWorld - Two claims of unlocking Apple&#39;s iPhone have surfaced in recent days, and a third is set to be announced Saturday.
320036
(InfoWorld) - Three security researchers claimed Sunday that they have found the first exploitable vulnerability in Apple's iPhone, a flaw that allows them to steal any data from the device or even to turn it into a remote surveillance tool. The trio -- Charles Miller, formerly with the National Security Agency; Jake Honoroff; and Joshua Mason of Baltimore-based Independent Security Evaluators (ISE) -- have notified Apple of the vulnerability and given the company less than two weeks to fix the bug before Miller presents more information at the Black Hat conference on Aug. 2. According to a paper posted by the three, they rooted out a vulnerability in the iPhone's version of Safari using "fuzzing" tools and wrote a proof-of-concept exploit that can be delivered from a malicious Web site or using "man in the middle" tactics to trick users into connecting to a malicious wireless access point. Once the exploit runs, it's essentially game over, the researchers said: The iPhone is owned. "In our proof of concept, this code reads the log of SMS messages, the address book, the call history, and the voicemail data," the researchers wrote on the ISE site. "It then transmits all this information to the attacker." But wait -- there's more! That, however, could be just the beginning. The researchers claimed that a second exploit actually operated the iPhone remotely once the device was hijacked. "When we viewed a second HTML page in our iPhone, it ran the second exploit payload which forced [the iPhone] to make a system sound and vibrate for a second," they said in the paper. "Alternately, by using other API functions we discovered, the exploit could have dialed phone numbers, sent text messages, or recorded audio (as a bugging device) and transmitted it over the network for later collection by a malicious party." The vulnerability was reported to Apple last Tuesday, July 17. "We proposed a fix Apple could include in a future iPhone update," the researchers said, "but we don't know if they plan to do so. They responded and are looking into it." In an e-mail late Sunday night, Apple spokeswoman Lynn Fox would only say: "Apple takes security very seriously and has a great track record of addressing potential vulnerabilities before they can affect users. We're looking into the report submitted by I.S.E. and always welcome feedback on how to improve our security." She declined to answer questions about the Aug. 2 deadline, whether Apple would issue a patch before then, or what the company thought of the way the trio disclosed the vulnerability. Miller will provide more information on the vulnerability and exploit at the upcoming Black Hat 2007 security conference, which opens next Saturday, July 28, in Las Vegas. But is this the ethical way? ISE's president, Avi Rubin, defended the decision to announce the existence of the vulnerability prior to a patch being made available by Apple. "Why are we doing that? Well, I believe that there is a social responsibility to report it when a device is vulnerable to attackers," said Rubin on his own blog Sunday. "People buy these things and use them in ways that put their identity and their online accounts at risk, and by exposing these vulnerabilities, we can make users better judges of how to use their high-tech devices." Rubin is familiar to many security observers from his research into problems with electronic voting systems. The paper by Miller, Honoroff, and Mason also spelled out a number of weaknesses in the iPhone's security architecture, although it didn't specifically pin the vulnerability on any of those flaws. One, however, most likely contributed to the reach of the exploit. "There are serious problems with the design and implementation of security on the iPhone," the paper said. "The most glaring is that all processes of interest run with administrative privileges. This implies that a compromise of any application gives an attacker full access to the device." Other deficiencies the trio cited in the iPhone's operating system included not using address randomization -- a technique applied by Windows Vista that's designed to make it tougher for hackers to write reliable attack code -- and allowing code in the heap to execute. Those last two shortcomings have been criticized in the desktop version of Mac OS X for some time. Three months ago, during the fallout after a hacking contest that jacked a MacBook Pro notebook, HD Moore -- the vulnerability researcher noted for the Metasploit hacking and attack testing software -- took on the claim that Mac OS X is safer than Windows. "The Mac OS X platform is years behind Linux, Windows, and OpenBSD in terms of operating-system security," said Moore then. "All of the above platforms support some form of address randomization (ASLR) and include features that make exploitation slightly more difficult." The ISE researchers have also posted a short video of their hack in action on YouTube.
220227
Blog: Apple details rules for iPhone purchasers.
753291
Hackers claimed significant progress Monday in the race to unlock the iPhone, but some say that some egos in the scene are getting in the way of getting the work done.
660720
Hackers could take control of an iPhone if its owner visits a doctored Web site or Internet hotspot, security researchers reported Monday.
533837
A hacker group has released what it says is a one-click way to install unauthorized third-party applications on an iPhone or iPod Touch. You still can't switch the iPhone to another wireless carrier.
221492
Science & environment: Mobile operator insists few customers are hacking their phones, despite evidence that unlocking is rife