Register

To become a member of ITProPortal Register here.

Already a member? Login here

Please register below. All we need is a valid email address and a password.

Please use a real email address as we need to email you to confirm your account.
Must be at least 6 characters long.

Benefits of joining ITProPortal:

  • Unlimited Access to Special Reports and White Papers
  • Exclusive offers and discounts
  • Free entry to all competitions
  • Access to beta sections of ITProPortal.com

Login to your account



Forgot your password?


Security flaws open iPhone up to hacker incursions

Security flaws open iPhone up to hacker incursions
  • Digg del.icio.us reddit Facebook

The rapidly growing take-up of Apple's new iPhone has been paralleled by a number of white and dark hat hackers disassembling the code of the leading edge mobile handset.

The latest piece of news to hit the iPhone forums suggests that Independent Security Evaluators (ISE), an IT security group, have discovered a remote access flaw in the handset's browser.

Under certain circumstances, ISE claims that the flaw could allow hackers to take "complete control" of the mobile, stealing information ranging from emails and text messages to telephone numbers.'

Herman Zampariolo, CEO of Wabisabilabi (WSLabi), the online auction space for buyers and sellers of software vulnerabilities to conduct deals in a confidential manner, said that the number of reported security flaws is likely to increase as sales of the iPhone go international later this year.

"The fact that programmers are - quite literally - taking the iPhone's operating system apart is a potential headache for Apple, especially considering the strong similarities with the traditional MAC OSX operating system, but this is precisely the reason why we created WSLabi in the first place," he said.

"Instead of publishing their security flaw findings on open forums and receiving nothing for their efforts, we urge programmers to log into the WSLabi portal and offer details of the flaw to the IT security industry and, of course, Apple Computer itself," he added.

According to Zampariolo, as programmers start to discover the benefits of using the WSLabi information exchange on IT security, they will start to generate profits from their endeavours.

"The site also ensures that this privileged IT security data only goes to vetted and professional companies who will not misuse the information. This has to be better than simply posting details of the latest iPhone security flaw on forums where anyone - black hat hacker or worse - can use the information," he said.

Ben Chai

Posted by Ben Chai on 30 July 2007

Ben Chai is a freelance writer and technical consultant. He is the author of several Microsoft books and is the co-owner of incomingthought.com, a company that specialises in security white papers.

Tags: Vulnerabilities, iphone