ATTN: Iphone Users: Warning!!!

[Iwinyourmoney]

Researchers Charlie Miller and Collin Mulliner discovered how to completely hijack any iPhone via SMS. Tomorrow (Thursday) they plan on publicize and reveal the vulnerability at the Black Hat cyber security conference in Las Vegas. They will be demonstrating how to send a series of SMS burst to the iPhone which will allow them to take complete control of EVERYTHNIG on the device and then propagate the attack by sending more SMS messages via the hijacked . According to Miller

This is serious. The only thing you can do to prevent it is turn off your phone . . . Someone could pretty quickly take over every iPhone in the world with this.

Since has yet to address this iPhone vulnerability even though Miller and Mulliner notified Apple over a month ago. Miller suggests that if you receive a text message on any time after Thursday afternoon containing only a single square character you should turn the device off immediately.

This vulnerability should be heeded and patched by Apple asap (3.1 anyone?). Miller knows his stuff, he was the first one to remotely hjack the iPhone in 2007 via the former bug in iPhone Safari.



Here is something written on forbs.com about it: link = http://www.forbes.com/2009/07/28/hac...arklet-twitter

[jjgold]

Nice heads up, they should lock these guys up.

[Iwinyourmoney]

Is compaqdikk behind this? A month ago i was helping him unlock and jailbreak his phone, it's all adding up now

[pimike]

Is compaqdikk behind this? A month ago i was helping him unlock and jailbreak his phone, it's all adding up now

[Afrot69]

why only if its a square? I plan on turning my iphone off all day just incase

[Deuce]

Unfikkinreal. If they do this will AT&T know? Who do I break in half?

[flyingillini]

Thanks for the info, No Mames Guey to the hackers!

[AMBlai01]

This is again why Blackberry is superior and why anyone in any sort of business would never consider using the Iphone because its just not business friendly.

[SamsNCharge99]

I'll gamble and use it, Y2K never happened, every other sceme that people try to scare us w/ never happened either, so

FUKK IT, I'm still using mine

[flyingillini]

I love the Iphone. I can watch every single baseball game on it now. The MLB application is the best APP there is. You have to have the mlb.tv package though, but well worth it.

[jjgold]

This is again why Blackberry is superior and why anyone in any sort of business would never consider using the Iphone because its just not business friendly.

It is very internet and application friendly more than any other phone Amber.

[Deuce]

Best phone on planet. No question.

[pico]

good to know

[Iwinyourmoney]

This isn't "y2k" ect, they are going to show people how to do this tomorrow.....

[donjuan]

Presumably you wouldn't actually need to turn it off but rather put it on airplane mode.

[smitch124]

Thank God my 2 tins cans and string are unaffected

[TheLock]

Presumably you wouldn't actually need to turn it off but rather put it on airplane mode.

Good point.

Meh, I may just put mine on airplane mode tommorow and see what happens but this has a lot of ZOMG-the-sky-is-falling flavor to it.

[Deuce]

The article here states that it takes 512 text messages for the exploit to work with only one appearing on the phone with the square character. It seems to me that AT&T (or other iPhone companies around the world) could put a simple algorithm into their SMS system that captures these messages before they are delivered to the phone. It does not sound like much of a security issue to me. Apple is probably taking the lax attitude because this could never be deployed.

[Iwinyourmoney]

I guess we will see. God bless our iPhones tomorrow

[jjgold]

Looks like a few guys just looking for attention

No need to worry

[paco]

Nothing so far

[compaqDikk]

Nothing so far

standy paco, i'm about to cripple your iPhone

[jackpot269]

Luv my i phone only had it a few weeks very user friendly mine still working think goodness ive gotten used to being on line @ work like now!!!

[Iwinyourmoney]

Keep in mind it's being announced at a security conference in Vegas today in the afternoon

[jackpot269]

Thanks for the info iwin

[pavyracer]

If I don't own an iphone will I be safe from this attack? I have a Motorola. Let me know Iwin.

[paco]

Buy option in apple

[jackpot269]

What option?

[TBranch25]

blackberry ftw