Featured Articles

Snapdragon 400 is Qualcomm’s SoC for watches, wearables

Snapdragon 400 is Qualcomm’s SoC for watches, wearables

We wanted to learn a bit more about Qualcomm's plans for wearables and it turns out that the company believes its…

More...
Qualcomm sampling 20nm Snapdragon 810

Qualcomm sampling 20nm Snapdragon 810

We had a chance to talk to Michelle Leyden-Li, Senior Director of Marketing, QCT at Qualcomm and get an update on…

More...
EVGA GTX 970 SC ACX 2.0 reviewed

EVGA GTX 970 SC ACX 2.0 reviewed

Nvidia has released two new graphics cards based on its latest Maxwell GPU architecture. The Geforce GTX 970 and Geforce GTX…

More...
Nvidia GTX 980 reviewed

Nvidia GTX 980 reviewed

Nvidia has released two new graphics cards based on its latest Maxwell GPU architecture. The Geforce GTX 970 and Geforce GTX…

More...
PowerColor TurboDuo R9 285 reviewed

PowerColor TurboDuo R9 285 reviewed

Today we will take a look at the PowerColor TurboDuo Radeon R9 285. The card is based on AMD’s new…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Tuesday, 30 November 2010 10:46

Apple's faith based security takes another hit

Written by Nick Farell
apple

Flaw allows scammers into iPhone OS
A security flaw, er feature, in Apple's iPhone OS allows ID thieves to trick the iPhone into thinking it is looking at a legitimate site.

Insecurity researcher Nitesh Dhanjani has been showing off how criminals can easily hide the true URL of a site from users by building a malicious Web application. Dhanjani showed how legitimate Web applications such as Bank of America's mobile banking application hide Safari's address bar after rendering the page.

Developers have to use this technique often because of the limited screen real estate on mobile devices like the iPhone. But Identity thieves and scammers could apply the same practice to conceal the actual URL of a fake site they've created and then duped users into visiting.

Dhanjani has reported the problem to Apple but it had not given any indication that they would fix the problem. Apple needs to modify iOS to prevent Web applications from hiding the URL, he said.

Dhanjani uncovered an Apple Safari vulnerability in 2008 that could be exploited with "carpet bomb" attacks. Apple initially told Dhanjani that it didn't consider the problem a security issue, it later issued a patch after others, including Microsoft, warned users to stop running Safari.

Jobs' Mob continues to claim it does not have security problems and that viruses only happen on Windows machines.
Last modified on Tuesday, 30 November 2010 11:58
blog comments powered by Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments