New exploit threatens iPhone
Information security researchers have found a way to run unconfirmed code on an unbroken iPhone. Charles Miller (principal analyst at Independent Security Evaluators) and Vincenzo Izozo (student at the University of Milan) found “more than one” way to download the application to the new iPhone as normal data and then turn it into a fully working program.
“Whatever you are going to do with the iPhone, you will need to launch your application there. Get personal data, listen to conversations, just turn on the microphone of the phone and keep a record - all this is possible only if you have already managed to run your code, ”commented the researchers.
Unlike conventional iPhone hacking, new methods do not require physical access to the phone. Of course, Apple’s special software protects against most exploits, but Miller and Yozzo found several ways to circumvent this protection.
')
The attacks will be showcased at the Black Hat Conference in Las Vegas next month. At the moment, phones running iPhone OS 2.0 are vulnerable. To test the performance of the exploit on OS 3.0, developers are waiting for its release tomorrow, June 17th.
“Whatever you are going to do with the iPhone, you will need to launch your application there. Get personal data, listen to conversations, just turn on the microphone of the phone and keep a record - all this is possible only if you have already managed to run your code, ”commented the researchers.
Unlike conventional iPhone hacking, new methods do not require physical access to the phone. Of course, Apple’s special software protects against most exploits, but Miller and Yozzo found several ways to circumvent this protection.
')
The attacks will be showcased at the Black Hat Conference in Las Vegas next month. At the moment, phones running iPhone OS 2.0 are vulnerable. To test the performance of the exploit on OS 3.0, developers are waiting for its release tomorrow, June 17th.
Source: https://habr.com/ru/post/62215/
All Articles