The Broadband Guide
SG
search advanced

iPhone flaw lets Linux users in without PIN

2010-05-28 10:06 by
Tags: ,

 

A data protection vulnerability has been found in the latest version of the iPhone OS which bypasses the device's PIN protection.

A apir of researchers found that simply hooking a non-jailbroken iPhone 3Gs running the latest version of the firmware up to a PC running Ubuntu Lucid 10.04 will automount some of the device's folders.

Apparently, an attacker will have unfettered read/write access to your pictures, music, videos, voice recordings and Google browsing database... all without having to supply a PIN.

One of teh researchers Bernd Marienfeldt, writes: "This data protection flaw exposes music, photos, videos, podcasts, voice recordings, Google safe browsing database, game contents… by in my opinion the quickest compromising read/write access discovered so far, without leaving any track record by the attacker. It’s about to imagine how many enterprises (e.g. Fortune 100) actually do rely on the expectation that their iPhone 3GS’s whole content is protected by encryption with a passcode based authentication in place to unlock it."

Read more -here-

 

  Post your review/comments
    rate:
   avg:
News Glossary of Terms FAQs Polls Cool Links SpeedGuide Teams SG Premium Services SG Gear Store
Registry Tweaks Broadband Tools Downloads/Patches Broadband Hardware SG Ports Database Security Default Passwords User Stories
Broadband Routers Wireless Firewalls / VPNs Software Hardware User Reviews
Broadband Security Editorials General User Articles Quick Reference
Broadband Forums General Discussions
Advertising Awards Link to us Server Statistics Helping SG About