AIM Messages Sent to Unlocked iPhones Routed to Unintended Recipients
CrunchGear reports that developer Till Schadde has discovered a security flaw that allows AIM instant messages sent to certain unlocked and jailbroken iPhones to be misrouted to unintended recipients.
Till tested the service by sending an AIM from the OS X desktop using iChat to his iPhone. He then received a reply back from a random recipient. It is clear that this is a Push problem in the message addressing - each iPhone is assigned its own identifier and receives messages from a central server operated by Apple - although this may change.
Schadde reports that AOL is investigating the issue, although he suggests that AOL says that the issue is not the result of anything happening in their systems. Initial indications are that the bug appears to be related to a hack being developed to skirt Apple's blocking of Push Notifications to unlocked iPhones, with the hack possibly somehow causing device identifiers to be mis-assigned through Apple's servers. It is not yet clear how widespread the problem is and to how many devices misrouted messages are being sent.
Popular Stories
Apple is launching five new products on Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models.
The following new products will be available from today:
iPad mini with OLED display and A20 Pro chip
iMac with M6 chip
14-inch MacBook Pro with M6 chip
14-inch MacBook Pro with OLED touchscreen
16-inch MacBook Pro with OLED...
Apple is sending email surveys to some iPhone Duo buyers to get feedback on display size, crease, under-display camera, and other features.
The first question asks why the buyer chose the iPhone Duo now, with answers like "I wanted to try Apple's first foldable," "It was an impulse purchase," and "I expect smartphone prices to increase."
Other questions ask about the size of the iPhone...
Apple plans to merge the iPhone's Action button with the Camera Control starting next year, according to the leaker known as "Instant Digital."
In a new post on Weibo, the leaker claimed that a single press of the combined button would open the camera, while a long press would trigger the function assigned to the Action button. They explicitly clarified that the dedicated Action button would ...
