Got a tip for us? Share it...

iPhone SMS Security Vulnerability to Be Disclosed Today

Forbes reports that cybersecurity researchers plan to publicize today at the Black Hat conference in Las Vegas a security vulnerability in the iPhone SMS messaging system that reportedly would allow hackers to in theory "take over every iPhone in the world".

Using a flaw they've found in the iPhone's handling of text messages, the researchers say they'll demonstrate how to send a series of mostly invisible SMS bursts that can give a hacker complete power over any of the smart phone's functions. That includes dialing the phone, visiting Web sites, turning on the device's camera and microphone and, most importantly, sending more text messages to further propagate a mass-gadget hijacking.

According to the report, researchers Charlie Miller and Collin Mulliner notified Apple of the vulnerability over a month ago, but the company has yet to issue a patch for it.

Miller was the lead researcher behind an effort that discovered a vulnerability in the original iPhone soon after its 2007 launch, a flaw that Apple addressed with the release of iPhone OS 1.0.1 just two days before Miller was set to publicize his findings at that year's Black Hat conference.

Top Rated Comments

(View all)

33 months ago
They better fix this.... fast.
Rating: 0 Positives / 0 Negatives
33 months ago
...why would they publish this information? I'm not absolving apple of blame here, but come on. Just because you have freedom of speech doesn't mean it's not reckless to use it in a case like this.
Rating: 0 Positives / 0 Negatives
33 months ago

...why would they publish this information? I'm not absolving apple of blame here, but come on. Just because you have freedom of speech doesn't mean it's not reckless to use it in a case like this.


To force Apple into sorting this out.
Rating: 0 Positives / 0 Negatives
33 months ago

...why would they publish this information? I'm not absolving apple of blame here, but come on. Just because you have freedom of speech doesn't mean it's not reckless to use it in a case like this.

It happens all the time. Security people find holes, report it to the vendor, and they're given ample time to fix it. Apple are being slack, it's up to them to fix it, and quickly.
Rating: 0 Positives / 0 Negatives
33 months ago
Good, keep finding the holes and keep fixing them. The only way to make it safer.
Rating: 0 Positives / 0 Negatives
33 months ago

Just because you have freedom of speech doesn't mean it's not reckless to use it in a case like this.


Put a fire under Apple's feet for resolution, maybe?


Just because you have freedom of speech doesn't mean it's not reckless to use it in a case like this.


Yeah, President Bush had that same problem with the New York Times publishing reports that the Administration believed would harm national security. Didn't stop the Times...
Rating: 0 Positives / 0 Negatives
33 months ago
It looks like apple would have preferred to just roll the fix into 3.1, and now this will force their hand (or they'll ignore it too...)
Rating: 0 Positives / 0 Negatives
33 months ago
Am I the only one who isn't concerned?
Rating: 0 Positives / 0 Negatives
33 months ago
Could this be the birth of SMS worms? ;)
Rating: 0 Positives / 0 Negatives
33 months ago
"What are we going to do today Pinky?"

"Same thing we do every day Brain, try to take over every iPhone in the world!"

Overheard at the Black Hat conference.
Rating: 0 Positives / 0 Negatives

[ Read All Comments ]