Apple's iPhone in the News Again?
Techtree News Staff, Jul 18, 2007 2030 hrs IST
The iPhone's 'Web Dialer' feature allows users dial telephone numbers over the Web through the Safari browser.
Now that the euphoria surrounding the launch of Apple Computer's iPhone has died down, the gizmo's once again made it to the headlines... and how?
SPI Labs' security researchers have cautioned iPhone users not to use the 'Web Dialer' feature that allows them dial telephone numbers over the Web through iPhone's Safari browser.
Lead researcher with SPI Labs, Billy Hoffman, explained that hackers could exploit a bug in this feature, and trick victims into making phone calls to expensive '900' numbers. Else, hackers could misuse the feature to keep tabs on phone calls made by victims over the Web. Hoffman said in this way, either the iPhone could be stopped from dialing out altogether or made to dial endlessly.
The way the attack works, according to Hoffman, is when hackers either trick iPhone users into visiting a malicious Web site or get a trusted Web site to send dicey information to iPhones using what's called a cross-scripting attack.
Hoffman warned that every time content getting sent to the iPhone is controlled, the possibility of an attack exists. And that as the vulnerability can be launched primarily from Web sites, anyone with an iPhone is at risk of getting exploited.
SPI Labs said it has contacted Apple, and that the duo are working towards some sort of a solution for this problem.
Meanwhile, a couple of iPhones have reportedly rendered extensive sections of Duke University Campus' Wi-Fi network dead/useless. With network officials still trying to figure out the reason.
Duke University houses nearly 13,000 students during the course of the year. At last count, about 150 iPhones have been registered at the institution, which boasts dozens of Wi-Fi hotspots across it's three main campuses.
A harangued network staff did manage to track the problem back to ill-mannered iPhones that were flooding the routers with fake Internet address requests at the rate of nearly 18,000 per second, which is like devouring about 10Mbps of precious bandwidth.
Miller said though they cannot point out to a particular reason for the problem, the needle of suspicion does point to the very aggressive manner in which iPhones deal with dropped Wi-Fi signals.
Either that or the problem could be due to a design flaw, wherein iPhones use the Address Resolution Protocol (ARP) to request the MAC address of the destination node, for which they already have IP addresses. When the iPhone does not get an answer, it just keeps asking...
USER COMMENTS
apple has enjoyed a clean name thus far, this iphone is HUGE, everyone wants them. but, this huge popularity and the fact its like computer/cell phone will eventually make it a huge target, and to a company that has had very few attacks will most likely get that squeeky clean no virus smell a little dirty. can't even begin to imagine how big of a target this phone will become
by john doe, doe ville, on Jul 19, 2007 01:53 AM, Report abuse Reply
VIEW ALL LATEST
Gaming On The Move: Big Business
News > Gaming , November 20, 2008 1820 hrs IST
Set to breach 10-billion mark by 2013, says Juniper Research ...
Nintendo Adds 4 Games To Wii Shop Channel
News > Gaming , November 20, 2008 1816 hrs IST
Two each for the WiiWare and the Virtual console ...
Stream Multimedia Content On iPhone In Real-Time
News > Software , November 20, 2008 1737 hrs IST
Watch live TV, read an e-book on the go ...
Nokia Readies TD-SCDMA Smartphone For China
News > Internet , November 20, 2008 1718 hrs IST
China Mobile to launch the 3G handset by 2009-end ...
LG Prada II Gets A Companion - Prada Link
News > Consumer Electronics , November 20, 2008 1706 hrs IST
Read text messages on a watch ...
MOST REQUESTED REVIEWS
Apple NEWS
|
iPhone: Number 1 Handset in the WorldSays Admob |
|
New MacBooks Have Copy Protection FeatureNews | Consumer Electronics | 19 Nov 2008 Prevents the playing and copying of DRM-ed iTunes songs and movies |
|
Safari: Anti-Phishing Powered By Google'Suspected Phishing' box displays two links that direct to Google |
Apple REVIEWS
|
iPod ClassicReviews | Entertainment | Portable Audio/Video | 08 Oct 2008 The Classic is for those who want the video playing capabilities of the iPod... |
|
Apple iPod Nano 4GReviews | Entertainment | Portable Audio/Video | 06 Oct 2008 It's ridiculously slim and blessed with some new bells and whistles. We take a... |
|
iPhone 3G ReviewedReviews | Mobile Computing | Mobile Phones | 21 Aug 2008 We review the 16GB version of the iPhone 3G. It is finally here, but has it... |
Apple USER REVIEWS
|
Mobile Phones iPhoneApple | Mobile Phones | Thu, 04 Sep 2008 A must have for anyone who wishes to show off, and loves to listen to music and... |
|
MP3 Players iPod Shuffle 1GBApple | MP3 Players | Mon, 21 Jul 2008 |
|
MP3 Players iPod (30GB)Apple | MP3 Players | Wed, 03 Oct 2007 good value for money..the search feature which has been introduced recently... |
MOST POPULAR NEWS
|
Could A DVR Save Your Marriage?News | Consumer Electronics | 04 Sep 2008 ...Or should you stick to your shrink? |
|
Firefox Counters Chrome's Speed TestAccording to Mozilla's SunSpider test, Firefox 3.1 is 28% faster than Chrome on ... |
|
Nokia N96 for Rs. 40,000?False alarm everyone... We have learnt from Nokia that the N96 will be priced be... |
MOST POPULAR REVIEWS
MOST POPULAR GAMES
MOST POPULAR DOWNLOADS
|
Forbidden.exe |
|
md5deepDownloads | System Tools | 04 Sep 2008 |
|
RivaTunerDownloads | System Tools | 03 Sep 2008 |
It is just a speculation... there is no Proof-of-concept or similarly working procedure, to back this report from SPI Labs. Read carefully, they say "hackers could exploit a bug in this feature"... but doesn't explain what exact BUG, or even mention it. Looks like SPI labs was either looking for cheap publicity stunt or was paid by competitors to publish aforementioned report.
by Alien, Z-13c, on Jul 19, 2007 02:40 PM, Report abuse Reply