iPhone security lapse allows for data read access

By on May 27, 2010 at 3:13 PM.

iPhone security lapse allows for data read access

iphone-security-lapse

A major security flaw has been uncovered in the Apple iPhone 3GS this week after two security experts discovered it was possible to bypass the device’s security and gain nearly full read access using Ubuntu Lucid Lynx. Perhaps even more frightening is the fact that the two believe they’re nearing the ability to write data as well. Said Bernd Marienfeldt, one of the two gentleman responsible for uncovering the flaw:

I uncovered a data protection vulnerability, which I could reproduce on 3 other non jail broken 3GS iPhones (MC 131B, MC132B) with different iPhone OS versions installed (3.1.3-7E18 modem firmware 05.12.01 and version 3.1.2 -7D11, modem 05.11.07), all PIN code protected which means the vulnerability bypasses authentication for various data where people most likely rely on data protection through encryption and do not expect that authentication is not in place. [...] This data protection flaw exposes music, photos, videos, podcasts, voice recordings, Google safe browsing database, game contents… by [sic] in my opinion the quickest compromising read/write access discovered so far, without leaving any track record by the attacker. It’s about to imagine how many enterprises (e.g. Fortune 100) actually do rely on the expectation that their iPhone 3GS’s whole content is protected by encryption with an PIN code based authentication in place to unlock it.

Marienfeldt and his partner Jim Herbeck notified Apple of the flaw, and according to then, “Apple could reproduce the described serious issue and believes to understand why this can happen but cannot provide timing or further details on the release of a fix.” Let’s hope the new data protection feature in iPhone OS 4.0 does the trick.

[Via Engadget] More →

37 Comments

Walmart cuts iPhone 3GS down to $97

By on May 24, 2010 at 8:41 PM.

Walmart cuts iPhone 3GS down to $97

iPhone_3GS

Effective as of Tuesday, Walmart has announced that it will be cutting the 2-year contract price of the Apple iPhone 3GS to $97. Walmart would have you believe that the drop in price is nothing more than it making good on its “commitment to always lead on price”, but it’s not as if we don’t know exactly what’s going on. To us the question still remains: Will the iPhone 3GS pick up where the soon-to-be-discontinued iPhone 3G is going to leave off, or does Steve Jobs have “one more thing” up the sleeve of his St. Croix mock turtleneck? More →

57 Comments

iPhone OS 4.0 beta 4 now available

By on May 18, 2010 at 8:25 PM.

iPhone OS 4.0 beta 4 now available

iphone-os-4.0

Whether you’re a genuine iPhone developer or someone who just paid $10 to have someone add your iPhone’s UDID to their developer account, you should be pleased to note that Apple has just released iPhone OS 4.0 beta 4. No changelog has been release, but just like the last time, we’ll be back if we spot any substantial changes. More →

24 Comments

Apple confirmed it signed a 5-year iPhone exclusivity deal with AT&T

By on May 11, 2010 at 1:17 AM.

Apple confirmed it signed a 5-year iPhone exclusivity deal with AT&T

iPhone_3GS

Three years. That’s how long it took for the world to get confirmation that the iPhone exclusivity deal Apple signed with AT&T back in 2007 was good for 5-years. Here’s how the info came about. Back in 2008, Apple’s legal team was in a courtroom in San Jose fending off a lawsuit which alleged that it was benefiting from an illegal monopoly over the iPhone, saying that AT&T’s 5-year exclusivity would really require iPhone owners to re-sign with AT&T for an additional 3-years after their initial 2-year contract had expired. This, in part, was Apple’s response:

[...] there was widespread disclosure of [AT&T's] five-year exclusivity and no suggestion by Apple or anyone else that iPhones would become unlocked after two years. In fact, the iPhone box itself disclosed to the prospective purchaser that a “[s]ervice plan with AT&T [would be] required for cellular network capabilities on expiration of initial new two-year agreement.” This at-purchase information was more than enough disclosure to put consumers on notice that they might never have a choice of cellular service for their iPhone, and to thus preclude a Kodak-type aftermarket.

Moreover, it is sheer speculation –- and illogical -– that failing to disclose the five-year exclusivity term would produce monopoly power, i.e., would allow Apple, a brand new entrant in cell phones, to “exert raw power in the aftermarket without regard for commercial consequences in the foremarket.”

The only question now is whether or not the contract is still valid. As Engadget’s Nilay Patel points out, “Contracts can be canceled, amended, and breached in many ways, and AT&T’s spotty recent service history plus the explosion of the iPhone and the mobile market in general have given Apple any number of reasons to revisit the deal. In addition, the two companies obviously hit the negotiating table again to hammer out the iPad’s pricing plans, and there’s no way of knowing whether that deal involves the iPhone as well. But it’s nice to finally know for certain that AT&T’s initial iPhone exclusivity period was booked until 2012 — now we just have to see if all this recent chatter means something’s changed.”
More →

114 Comments

iPhone OS 4.0 beta 3 released to devs (Updated)

By on May 4, 2010 at 2:45 PM.

iPhone OS 4.0 beta 3 released to devs (Updated)

iphone-os-4.0

The last iPhone OS 4.0 beta was a bit of a wash what with the Camera app constantly crashing, the ability to take screencaps mysteriously vanishing and the code overall being buggy as hell, but we’re really hoping out hope that the newly released beta 3 will be a heck of a lot better. We’re installing it on a few devices as we speak, but we’ll report back if we find any major changes. You’ll do the same, right?

UPDATE: Apple has removed beta 3 from the Dev Center. We’ll try and figure out why. More →

50 Comments

iPhone OS 4.0 beta 2 up for grabs

By on April 20, 2010 at 3:05 PM.

iPhone OS 4.0 beta 2 up for grabs

iphone-os40-beta-2

Alright, iPhone developers. Kick everyone out of the room, lock your door and grab a chilled can of Red Bull because Apple has just released iPhone OS 4.0 beta and the accompanying SDK. We haven’t had a chance to play around with it yet so we’re not sure what surprises await us, but we’ll be back if we find anything of interest.

More →

62 Comments

Geohot demos untethered jailbreak for iPhone

By on March 25, 2010 at 11:33 PM.

Geohot demos untethered jailbreak for iPhone

geohot-untethered-jailbreak

Stevesy (Jobs, not Zissou) is certainly not going to like this. iPhone hacker extraordinaire George Hotz aka geohot has just teased the iPhone community with a 68 second video showing off a new untethered jailbreak. Here’s his statement:

The jailbreak is all software based, and is as simple to use as blackra1n. It is completely untethered, works on all current tethered models [iPod touch G2, iPhone 3GS, iPod touch G3], and will probably work on iPad too.

Click on through to check out a video demo. More →

57 Comments

iPhone hacked and hijacked at Pwn2Own

By on March 25, 2010 at 6:28 AM.

iPhone hacked and hijacked at Pwn2Own

haxor

Smartphones might have proved to be a tough nut to crack at last year’s CanSecWest Pwn2Own, but the same cannot be said for 2010 as two European hackers were able to gain control of a stock iPhone’s SMS database. The hack, which takes 20 seconds to execute by having the iPhone visit an infected website, allows its SMS messages — including those which had been deleted — to be uploaded to a predetermined server. If that’s not enough to make paranoid iPhone users soil their pants, the same exploit is also said to be able to access to a user’s address book, emails, photos and music all without leaving the iPhone sandbox. Naturally these sort of hacking developments are a bit frightening, but the good news is the hackers will hand their findings to Apple and keep mum on specifics while the Cupertino company does a bit of spackling with its iPhone OS. More →

41 Comments

Bell launches Mobile TV for iPhone

By on February 24, 2010 at 6:12 AM.

Bell launches Mobile TV for iPhone

bell-mobile-tv-iphone

A few weeks removed from a strong quarter which saw its wireless division receive an 11.3% increase in new subscribers, Bell today continued its push against rivals Rogers and TELUS with Bell Mobile TV for iPhone. As with all things iPhone, there is a lot of give and take. The give is that there’s pretty good coverage including CBC News Network, CTV, MuchMusic, Rogers Sportsnet, Treehouse, The Weather Network, and live coverage of NHL games and the 2010 Winter Olympics. The take is that it only works over 3G (a sad by-product of SIM card verification and carrier exclusivity) and requires the typical $8 per month for mobile video services with the Olympic coverage commanding a one-time payment of $10. Nonetheless, if mobile TV is something that floats your boat and you’re not willing to spend a lot of cash up front to snag a Slingbox, then it might just be worth your while to test it out for a month. We’ve heard it’s actually pretty good.
More →

6 Comments

Opera to show off Mini for iPhone at MWC

By on February 10, 2010 at 10:18 AM.

Opera to show off Mini for iPhone at MWC

opera-mini-iphone

Listen: It took six months of the App Store’s existence for Apple to approve the first batch of third-party browsers for the iPhone and iPod touch. It was a pretty damn exciting event because it was the sort of app everyone was used to being rejected because it replicates native features of the iPhone OS. Well, since then Apple rejected some pretty prolific apps for the same asinine reason to the point that even the flippin’ government took notice and started asking questions. And now, today, we have a new potential app disaster on our hands because Opera, the third-party mobile browser powerhouse, announced it will be previewing Opera Mini for iPhone next week at Mobile World Congress. Opera seems to think its app will be able to slide through the approval processes without issue, but we’re not going to get our hopes up just yet.

Totally random thought we’re just going to throw out there: Anyone think AT&T might be keen on seeing Opera Mini approved? Just think of the Draino of a job Opera’s data compression technology might do to unclog the long, hippie hair stuck in AT&T’s data pipes. More →

42 Comments

Apple iPhone 4G to be taller than its predecessor, sport a larger display?

By on February 9, 2010 at 12:19 PM.

Apple iPhone 4G to be taller than its predecessor, sport a larger display?

iphone-iresq-4g-parts

Like Dorothy from the Wizard of Oz, some claimed fourth generation iPhone parts have emerged from the corn fields business district of Olathe, Kansas. The supposed parts arrived at iResQ, an iPhone repair shop, and include a front panel which iResQ notes is 1/4 inch taller than the iPhone 3GS. This small increase in size could potentially translate into an iPhone with a 3.7 inch display, a size which is fast becoming the industry standard. The front panel also has a small reflective surface right above the earpiece that, no, is not a vanity mirror but may be a spot for the proximity sensor, a location that differs from the previous iPhone models. Bad news for those that are hard on their phone and tend to break not just the glass but the LCD panels underneath, as the LCD is reportedly glued to the digitizer and must be replaced together as an all-in-one unit. We don’t need to remind you that this dual-pieced part may cost a small arm and leg to replace. Last but not least, make sure your Martini glass is lined with a bit of salt as you’ll need those extra white granules while reading the unconfirmed contents of this post.

[Via MacRumors] More →

112 Comments

8GB iPhone 3GS rumors resurface

By on December 30, 2009 at 9:12 AM.

8GB iPhone 3GS rumors resurface

8gb-iphone-3gs-rumor

Talk of an 8GB model of the iPhone 3GS is as old as, well, the iPhone 3GS itself, but a rumor out of Germany has brought talk of mythical device back to the forefront of our minds. When Apfeltalk user .david ordered himself a refurbished iPhone 3G, he was quite surprised to find he had been shipped the device inside a box for the iPhone 3GS complete with a product label clearly stating it is an 8GB model of the 3GS. Here’s what .david had to say:

Seems to be an iPhone 3G (back and no compass, FW) 3.0.1 on it. However, the packaging is clearly designed for an iPhone 3G [S] 8GB. Ordered was a refurbished 3G iPhone 8GB.

So what think you, dear mythbusters? Is this simply the case of an errant S, or a sign of things to come? Be sure to hit the jump to check out one more pic and then share your thoughts.

Bonus in the form of a tip: If you’re going to redact the IMEI and serial, you might want to seriously consider redacting the bar code as well.

[Via Gizmodo]

275x100 (Logo) More →

33 Comments