Featured Articles

Nvidia officially launches the 8-inch Shield Tablet

Nvidia officially launches the 8-inch Shield Tablet

As expected and reported earlier, Nvidia has now officially announced its newest Shield device, the new 8-inch Shield Tablet. While the…

More...
Intel launches new mobile Haswell and Bay Trail parts

Intel launches new mobile Haswell and Bay Trail parts

Intel has introduced seven new Haswell mobile parts and four Bay Trail SoC chips, but most of them are merely clock…

More...
Aerocool Dead Silence reviewed

Aerocool Dead Silence reviewed

Aerocool is well known for its gamer cases with aggressive styling. However, the Dead Silence chassis offers consumers a new choice,…

More...
AMD SVP John Byrne named turnaround exec of the year

AMD SVP John Byrne named turnaround exec of the year

Director of AMD’s PR Chris Hook has tweeted and confirmed later in a conversation with Fudzilla that John Byrne, Senior Vice…

More...
AMD A8-7600 Kaveri APU reviewed

AMD A8-7600 Kaveri APU reviewed

Today we'll take a closer look at AMD's A8-7600 APU Kaveri APU, more specifically we'll examine the GPU performance you can…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Tuesday, 30 November 2010 10:46

Apple's faith based security takes another hit

Written by Nick Farell
apple

Flaw allows scammers into iPhone OS
A security flaw, er feature, in Apple's iPhone OS allows ID thieves to trick the iPhone into thinking it is looking at a legitimate site.

Insecurity researcher Nitesh Dhanjani has been showing off how criminals can easily hide the true URL of a site from users by building a malicious Web application. Dhanjani showed how legitimate Web applications such as Bank of America's mobile banking application hide Safari's address bar after rendering the page.

Developers have to use this technique often because of the limited screen real estate on mobile devices like the iPhone. But Identity thieves and scammers could apply the same practice to conceal the actual URL of a fake site they've created and then duped users into visiting.

Dhanjani has reported the problem to Apple but it had not given any indication that they would fix the problem. Apple needs to modify iOS to prevent Web applications from hiding the URL, he said.

Dhanjani uncovered an Apple Safari vulnerability in 2008 that could be exploited with "carpet bomb" attacks. Apple initially told Dhanjani that it didn't consider the problem a security issue, it later issued a patch after others, including Microsoft, warned users to stop running Safari.

Jobs' Mob continues to claim it does not have security problems and that viruses only happen on Windows machines.
Last modified on Tuesday, 30 November 2010 11:58
blog comments powered by Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments