Sunday, July 29, 2007

iPhone Hack: Safari Exploit - Hackers Attack!

Hackers want your iPhone!Using a script embedded in an HTML file could allow for remote access to well, almost every peice of information on your phone. Email, passwords, sms messages, etc.

Independent Security Evaluators (ISE) claims they were able to remotely access an iPhone through a script they developed. This essentially gives an attacker an all access pass to your information. Once the script is activated through the Sarafi web browser the iPhone willingly ends your information over the connection. This only works on Wi-Fi connections and again is, as far I have read only something this company is claiming.

This isn't something someone can just do... I heard about this through the rumor mill and my friend was like "OMG, you have the iPhone, now hackers can control your life!". Simply not the case. You still have to be the one visiting the site in the first place. You could be tricked into going, you could get an email that had a link that took you there... you could but it's not likely you will.

By now a lot of us are used to the usual list of what not to do:

1. Don't open emails from people you don't know
2. Don't click on links you are unsure about from emails or websites
3. Don't visit shady websites. You know what I'm talking about... the ones with all the pop-ups and questionable material!
4. If you must look at questionable material, visit KNOWN reliable sites
5. Change your important passwords often
6. Only use Wi-Fi networks you trust

The last one is harder - I've been getting used to trolling NYC hopping on all sorts of unprotected wireless networks. There are just so many to choose from!

I personally feel that this is a bit of media hype meant to bring attention to the company releasing the video below and the hack in the first place. Since the iPhone's release it's been a "Who can hack it first" race. These guys will enjoy their 15 mins off this and that will be that... an update will be released and we'll move on to the next vulnerability.

Also take comfort in the fact that there are hundreds of iPhones most of which probably have nothing really that useful on them. I mean what is a hacker gonna do with my yahoo account? Email my mom?

0 comments: