RSSApple looks to fix 'minor' iPhone security flaw
By Ed Oswald | Published August 29, 2008, 3:23 PM
The expected 2.1 software update for Apple's iPhone in September will include a fix that could allow for disclosure of personal information when the device is locked, Apple said.
"The minor iPhone security issue which surfaced this week is fixed in a software update which will be released in September," Apple spokesperson Jennifer Bowcock said in a statement.
Apple also admitted the flaw affects users of the iPod touch as well.
As first discovered by Apple enthusiast sites including MacRumors, even when an iPhone is password-protected, anyone can gain access to the Favorites page by pressing the emergency call button, followed by two presses of the home screen button.
Unlike the "Favorites" page in a Web browser, the iPhone's favorites page is like a "quick links" page that links to personal contacts and their phone numbers, e-mails, URLs, and text messages. They may not necessarily give away the ID of the iPhone's owner to a thief, unless some of that information is embedded in a text message to a friend. And tapping on one those favorites could launch the browser, e-mail, or SMS applications -- in which case, a thief could impersonate the iPhone's owner.
Officials say that anyone concerned with the possible security hole can set the 'double click' button to just take the user to the Home screen. This simply takes the device back to the unlock screen is password protection is turned on.
this is news?
OMFG... get a real news dept BetaNews
Score: 0
|Tourette's Syndrome boy is back!
Yay!
Perhaps you could enlighten us with more incoherent babble and a little random vulgarity thrown in to spice it up a bit?
Score: 0
|BFD
yawn
Score: 0
|Well at least the fix is on its way and for me its not a big deal since if someone else gain accessed to my phone I don't think they are returning it :). It's on my hip or in my pocket so if someone got my phone they are KEEPING IT.
Score: 0
|Have to love a minor flow that could disclose your personal info. If that is minor I would hate to see what a serious concern would be.
Score: 0
|LOL, Minor!!!
Everything is minor when it comes to Apple
Score: 0
|"This simply takes the device back to the unlock screen is password protection is turned on."
Huh??
Score: 0
|Not a security issue but a bug that has existed for a YEAR now with the itouch/iphone and its quite annoying
http://www.google.com/se...e+issue+with+ipod+touch
Score: 0
|You don't have the right to complain. You bought the product, deal with the result of your bad money management.
Score: 0
|Just because he bought a product does *not* mean he has to "just deal with" poor service or bad software.
As with any other product that is supported by a company, he has every right to expect that company to do just that and *support* it.
As an aside...
I cannot comprehend why you are still here with that username, but the ways of the mods are mysterious and often confusing to us mere mortals...
Score: 0
|Because Steve says it's minor...The sheeple will believe it's minor.
Score: 0
|damn right they will... just look at internetworld7
Score: 0
|hahaha... You can read internetworld7 like a book!
Well done cescam66 for pointing out.
Score: 0
|Lol I think internetworld7 has created a category above sheeple. It's more of the "hey look I'm an idiot" category. Most of the time I don't even bother replying to the crap he spews. There is not a person on this site whether it be a MS fan or an Apple fan that can't see what an idiot he is.
Score: 0
|And the MS fanboys, who know ALL TOO MUCH about fundamental security flaws, will worry about a platform they claim to care nothing about.
Now, if Apple could only come up with something as truly revolutionary as ActiveX...
So what's new fanboy?
Score: 0
|So what about the non-fanboys who use both?
Are they allowed to complain about both, or must they only worry about MSFT issues, because ActiveX is worse?
I know you like Apple, man. No big deal, but flaws are flaws. If you're blind to it because you like them so much, you're no better than the MSFT fanboys.
Score: 0
|"The expected 2.1 software update for Apple's iPhone in September will include a fix that could allow for disclosure of personal information when the device is locked, Apple said."
This implies that the "fix" could allow for disclosure of personal information. Obviously, it needs rewriting.
And I don't sure if I would call this issue "minor." I can think of all kinds of ways to exploit this, especially if the iPhone belongs to a celebrity.
Score: 0
|Ah gods....Harris Pilton's contact list is going to be plastered all over the intarwebz again....
Score: 0
|The minor iPhone security issue
when an iPhone is password-protected, anyone can gain access to the Favorites page by pressing the emergency call button, followed by two presses of the home screen button
a "quick links" page that links to personal contacts and their phone numbers, e-mails, URLs, and text messages.
Yeah... Sounds minor...
Score: 0
|Its minor because Apple says so, duh!
They would never do anything to hurt their customers and everything is 100% reliable and has more security then 20 fort knox combined!
Was that a good impression?
Score: 0
|"Its minor because Apple says so, duh!"
Unlike Microsoft, you can trust Apple. I would trust Apple with my life.
Score: 0
|well i hope you die soon son
Score: 0
|Now that I have my MacBook, I can see where you are coming from. You can't break an arm in a room with padded walls.
Score: 0
|LOL but thats because your a fool.
Score: 0
|I see making you info open to outside access is ok. You really are a clueless apple sheep. Keep drinking the koolaide. Then again maybe we'll get lucky.
Score: 0
|"I would trust Apple with my life."
Awesome! Guess that means we won't haft to put up with you much longer. :)
Score: 0
|I can easily see why you think Apple is a lightweight here.
If they were truly an IT giant, they would have to fix a truly insecure service like ActiveX that easily allows one to easily take over the entire machine just by claiming to be whomever you want to be.
You are quite right, Apple has a LONG ways to go to reach such lofty heights of fundamental design SNAFUs as such technologies as ActiveX.
LOL!
Score: 0
|