Featured Articles

Nvidia Shield 2 shows up in AnTuTu

Nvidia Shield 2 shows up in AnTuTu

Nvidia’s original Shield console launched last summer to mixed reviews. It went on sale in the US and so far Nvidia…

More...
AMD CSO John Byrne talks ARM

AMD CSO John Byrne talks ARM

We had a chance to talk about AMD’s upcoming products with John Byrne, Chief Sales Officer, AMD. We covered a number…

More...
AMD Chief Sales Officer thinks GPU leadership is critical

AMD Chief Sales Officer thinks GPU leadership is critical

We had a chance to talk to John Byrne who spent the last two years as Senior Vice President and Chief…

More...
OpenPlus One $299 5.5-inch Full HD phone

OpenPlus One $299 5.5-inch Full HD phone

OnePlus is one of the few small companies that might disrupt the Android phone market, dominated by giant outfits like Samsung.…

More...
KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 gained a lot of overclocking experience with the GTX 780 Hall of Fame (HOF), which we had a chance to…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Thursday, 07 July 2011 11:40

Apple hardware wide open

Written by Nick Farell


Don't worry just believe
Apple fanboys will have to chant the mantra that Steve Jobs protects them from all security attacks with even more intensity over the next few months.

According to Sophos a website that has made it simple for iPhone and iPad users to jailbreak their devices is not just a nuisance for Apple, who want to discourage owners from jailbreaking their devices, but is also a portent for future malicious attacks.

Owners of Apple gadgets, including the recently launched iPad 2, are presented with an easy way to jailbreak them, opening up the possibility of installing apps that have not been approved by the official Apple AppStore. Normally, jailbreaking requires users to connect their device to a computer before they can start to tamper with the set-up of their iPhone or iPad and gain access to the Cydia underground app store.

The drive-by jailbreak is possible because the website exploits a vulnerability in the way that the mobile edition of Safari (the default browser used in the iOS operating system) handles PDF files. Because Apple has not yet patched this latest vulnerability, iPad and iPhone users could be at risk from hackers if they chose to exploit the same vulnerability to install malicious code.

Graham Cluley, senior technology consultant at Sophos said that cybercriminals would be able to create booby-trapped webpages that could- if visited by an unsuspecting iPhone, iPod Touch or iPad owner - run code on visiting devices without the user's permission. He added that Apple will be furious that this vulnerability has been made public in this way, and that they have not yet got a patch to protect their millions of users.

Sophos's experts have added detection of the exploit code as Exp/PdfEx-ER, but as Apple does not allow anti-virus software to be listed in the official iPhone AppStore there is no on-device protection available for users. Apple can't allow the listing of AV software because if it does it has to admit how vulnerable it is to a serious virus attack.  It would prefer people just think that only Microsoft suffers from malware.

However Cluely warns that praying to Jobs might not be enough soon. A website like JailBreakMe is making it easy to jailbreak your iPhone or iPad - but it could also be said to be giving a blueprint to malicious hackers on how to infect devices with malware.

"There are many cybercriminals who would love to infect iPhones and iPads, and eyes will now be turning towards Apple to see how quickly they can issue a patch for iOS to close this vulnerability," he said.

Nick Farell

E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
blog comments powered by Disqus

Comments  

 
+18 #1 nECrO 2011-07-07 19:41
First Macdefender, now this. Apple users will only tolerate so much before they vilify Jobs the way they did Bill Gates. They may be fan boys, but they WILL wake up eventually. Since Job's ego prevents him from removing his head from his ass, I see no other future.
 
 
+12 #2 lucas1024 2011-07-07 20:26
Ha-ha-ha-ha
 

To be able to post comments please log-in with Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments