iPhone Vulnerability Discovered

This article was written on July 23, 2007 by CyberNet.

While Apple spent a lot of time and money making sure that the iPhone was safe and secure, there was really no way for them to come out with a product that was 100% hacker-proof.

After the iPhone was released, a group of people at Independent Security Evaluators, a security firm, tried to find a way to make an iPhone vulnerable to hackers.  According to a website that they set up for the exploit (www.exploitingiphone.com), it only took two weeks of part time work to discover a vulnerability.

The video below demonstrates how arbitrary code was executed as root. In the video, you’ll notice that sensitive information like SMS messages, the address book, call history, and voicemail data is made available to the hacker.

ISE has contacted Apple about the problem and proposed a patch which they say Apple is looking into. Charles Miller, principal security analyst for ISE says, “Once you did manage to find a hole, you were in complete control.”

I’m sure you don’t want anybody in control of your precious iPhone except you, so what precautions should you take? It’s actually pretty simple, only visit trusted sites and only use WiFi networks that you trust.

Source: New York Times

Copyright © 2010 CyberNet | CyberNet Forum | Learn Firefox

Related Posts:


Official iPhone WebApps Directory Not iPhone Friendly

This article was written on October 12, 2007 by CyberNet.

iPhone and iPod Touch users have been patiently waiting for Apple to launch the WebApps directory so that they could easily browse through the available options and determine which apps they want.  Seeing as the apps included in this directory are specifically for the iPhone and iPod Touch, you’d think that Apple would have made an iPhone version of the directory so that it would be easy for people to use while on their devices, but they didn’t. That’s right, Apple’s WebApps directory is not iPhone friendly – a big whoops on the part of Apple, I’d say!

iPhone users over at TUAW couldn’t believe that Apple did this, and some were questioning what on earth was going on in Cupertino that Apple didn’t think to format the site for the devices it services. Here’s a sample of the comments:

  • “So, Apple launched a part of their website that is specifically made for being viewed on an iPod touch or iPhone, and they chose NOT to design it specifically for being viewed on an iPod touch or an iPhone? What’s the point?” says Andrew Harrison
  • “Ironically, Apple’s Web Apps website isn’t a web app. A missed opportunity if you ask me” says NutMac
  • “So, no iPhone version of this site to launch web apps from? What is Apple smoking?” says bmoney
  • “I can’t believe it’s not formatted to fit the iPhone screen! says hallohallohola

webapps directory

Aside from the disappointment that Apple didn’t think this clearly through, lets take a look at the directory itself. The complete directory can be found here, and you’ll notice that they divide all of the apps into categories like entertainment, games, news, sports, travel, and more.  Another great feature is that you can view the list of the most popular apps, view “Staff Picks”, or just view all of the different applications in alphabetical order. Here’s a quick look at the top 10 most popular apps for the iPhone right now:

  1. Bejeweled – the classic game!
  2. iPhonus Sudoku – free Sudoku on your iPhone
  3. Hahlo -Keep up with Twitter using Hahlo on your iPhone
  4. Scenario Poker – Texas Hold ‘em
  5. 101 Cookbooks – Recipes formatted for the iPhone
  6. Digg iPhone App – browse social news site Digg from your phone
  7. Tipr – need help to calculate a tip while you’re at a restaurant?
  8. SmugMug – the popular photo sharing site
  9. Ultralingua Mobile – dictionaries in multiple languages like French, Spanish, and German, formatted for the iPhone
  10. ESPN PodCenter – keep up with ESPN podcasts on your iPhone or iPod Touch

I’d assume that Apple has been made aware of the fact that the site isn’t friendly for iPhone or iPod Touch users, and that they’ll go about correcting this issue soon.

Copyright © 2010 CyberNet | CyberNet Forum | Learn Firefox

Related Posts:


Pleco Chinese Dictionary iPhone app now handling real-time image translations

Talk about timely. We’ve been waiting for months (with bated breath, might we add) for Pleco 2.2 to finally hit Apple’s App Store, and after dealing with a few launch day bugs last week, we can finally say it’s out and ready to dominate any Chinese homework you’ve been hastily procrastinating on. The Pleco Chinese Dictionary is now available in the app store at version 2.2.1, supporting both fullscreen handwriting input and live camera-based character recognition. Have a peek at the video past the break if you’re still curious as to what this app can do for you, and feel free to toss your experiences with it down in comments below. Here’s hoping this is only the first of many languages Pleco decides to tackle — not that we’re much on tossing out subtle hints.

Continue reading Pleco Chinese Dictionary iPhone app now handling real-time image translations

Pleco Chinese Dictionary iPhone app now handling real-time image translations originally appeared on Engadget on Wed, 24 Nov 2010 20:55:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceiTunes  | Email this | Comments

Rumors: iOS 4.3 Will Offer App Subscriptions as Early as December

iPad owners have had less than a week with iOS 4, but a software update offering news and magazine subscriptions targeted at them could arrive in less than a month.

Daring Fireball’s John Gruber reports that Apple’s Steve Jobs will join News Corp.’s Rupert Murdoch onstage at a December 9 event to announce Murdoch’s new forthcoming tablet newspaper, The Daily.

According to Gruber’s sources, The Daily will be an app in the App Store, but make use of new recurring subscription billing on users’ iTunes accounts, and “developers at News Corp. building the app already have preliminary documentation on the new subscription billing APIs from Apple.”

Macstories’ Federico Viticci reports further that recurring subscriptions are part of a new version of iOS — iOS 4.3 — with a scheduled release date of December 13.

According to Viticci’s sources, iOS 4.3 wasn’t intended to be released so quickly after 4.2.1, which was originally internally slated for an early November release. It’s possible that 4.2.1’s later official release might also push back the release of 4.3. But with Apple playing such a large role in The Daily, both companies may stick with mid-December announcement and releases, after all.

Subscription-based recurring billing would likely increase the number of paid magazine, newspaper, TV, video and other media applications on iTunes. Really, any application that depends on continuous content or service delivery could introduce a subscription model: online gaming, data backup, GPS, office applications and more. Many subscription-based services already have iOS apps, but have to establish accounts and recurring billing separately from iTunes.

Another technical challenge posed by subscriptions that could require an OS update is automatic background content delivery. If you’re being billed every week for a newspaper or magazine, you shouldn’t have to go through a long, complicated routine just to download a new issue.

A final open question: How much customer information will Apple and app/content makers share with each other about their subscribers? This data has value, too — as does customers’ privacy.

Image by Apple.

See Also:


iPhone gets UberTwitter client, BlackBerrys have one less reason to exist

If the name UberTwitter sounds familiar, that’ll be because it’s one of the more popular mobile Twitter clients, accounting for 10 million tweets each day from BlackBerry users around the globe. And now it’s also available on the iPhone. Citing the “growing dominance” of Apple’s one-device-to-rule-them-all mobile platform, the UberTwitter crew has decided to expand its offering with a new open beta, which is available to download now. The major distinguishing feature being touted is something called UberView, which allows access to links within tweets without exiting the app or opening up a new window within it. Looks a pretty slick idea, but there are still some early issues to be ironed out — as with all beta iterations — and a final v1.0 should be ready to do battle with Twitter’s official app by the middle of December.

Continue reading iPhone gets UberTwitter client, BlackBerrys have one less reason to exist

iPhone gets UberTwitter client, BlackBerrys have one less reason to exist originally appeared on Engadget on Wed, 24 Nov 2010 03:47:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceUberTwitter  | Email this | Comments

This iPhone Dock Has No Wires

If you’re the type who has wood paneling in their car, a bamboo iPhone case, and a solid-wood desk, the Koostik iPhone Dock will fit perfectly with your motif: it’s an iPhone dock that’s made entirely of wood, with no wires or speakers at all. The dock is designed to amplify the sound from the iPhone’s built-in speaker using the natural acoustics carved into the wood, and the folks behind it say it can make your iPhone’s speakerphone up to four times louder than it already is. 
The Koostik will set you back $90 retail (with free shipping,) mostly because each one is hand-carved by the master woodworker who invented it. You can order them in a variety of colors and wood varieties, including combinations of Maple, Walnut, and Cherry faces and bodies. 
It’s not built to be a replacement for an electronic dock or amplifier, and it won’t charge your iPhone because it doesn’t require electricity. Still, if you like a touch of elegance on your desk or just love all things wood, the Koostik is for you. 

Amazon’s Price Check Might Be Perfect Smartphone Shopping App

If you’re headed to the mall this weekend, Amazon’s new iPhone app might be an ideal companion for comparison-shopping and price checking.

As a bonus — for Amazon — the company has figured out a way to advertise its own products is everyone else’s stores, using a clever application that leverages the key features of smartphones — in particular, Apple’s latest iPhones.

Price Check for iPhone initially doesn’t seem very different from Amazon’s well-established, multiplatform “shopping cart” frontend, which has always allowed users to check prices and buy products on the go. The difference is the variety and speed of inputs you can use to find items in the store, which make the app particularly well-suited for using it while you’re standing in the aisle of a store, gazing at something you’re thinking of buying.

Here are the main ways you can use the Amazon app:

  • Say It brings up a picture of a microphone with an “I’m listening” message. Speak a product’s name into the smartphone mic, and Amazon will try to find it. The speech recognition is a little iffy, and obviously homophones give it some trouble (my search for “Kinect” brought up “Connect Four”), but it’s generally pretty good.
  • Snap It opens up your iPhone’s camera, along with a textual reminder that the service “works best in good light with a book, DVD, CD, or video game” — in short, media objects with well-established cover art that Amazon can try to match in its database (and Amazon says it’s steadily increasing the size and variety of this database). “Snap It” worked extraordinarily well with every book I tried in the decidedly poor light of my office.
  • Scan It is particularly powerful, since it can use a product’s barcode to find a unique copy: it won’t confuse hardbacks with paperbacks, or widescreen and fullscreen copies of a DVD. But it requires an autofocusing camera to get high-quality resolution on the barcode — which means iPhone 4 or 3GS. My iPhone 3G has the “Scan It” button grayed out; if I click it, I get a short, apologetic notice that my non-autofocusing camera can’t scan a barcode, at least up to the standards of Amazon’s new app.
  • Finally, you can also type in a product’s name in the “Type It” box at the top. Once you’ve found an item, you can browse specs and reviews, or share the price over email, Facebook or Twitter, or narrow the stores between Amazon and its partners (the “Prime” compatible button is quite nice.)

There’s also a handy list of “Recent Price Checks,” so you can keep track of products you’ve scanned, and a shopping cart, so you can buy products from Amazon directly. You can’t access your own wish list, which skews the app towards impulse buys or holiday shopping for other people.

When the app was first announced, I was confused; why was Amazon launching yet another shopping application for iOS? There’s the old standby Amazon.com, the Windowshop App for iPad and now PriceCheck? Did customers really need a whole page (or in iOS 4, a folder) devoted just to apps for Amazon?

Now I think I understand the strategy much better. Each Amazon application capitalizes on the unique hardware and anthropology of the device. Windowshop is a browsing catalog, suited to the full-sized screen and laid-back posture of the iPad. Even the name suggests voyeurism and fantasy. Price Check is mobile, pulling in camera, voice and autofocus to make something you can whip out of your pocket to make a snap decision while the Black Friday hordes crowd in around you.

Different devices, different scenarios, different shopping experiences — but all of them funneling you to just one store, up in the cloud. Smart. Now I wonder when and if other platforms (Android, Blackberry, etc.) will get their chance to play with similar new toys.

See Also:


New Potato reveals TuneLink Auto Bluetooth-to-FM transmitter for iPhone, iPod touch and iPad

We’ve never been on the volunteer cheerleading squad for FM transmitters; in our experience, they’re downright useless in cities or other areas that actually have a large amount of radio stations nearby. But we’ll hand it to New Potato Technologies — this may be the slickest implementation yet. The newly announced TuneLink Auto looks like a typical cigarette adapter charger at first glance, but within, there’s technology that accepts audio over Bluetooth and then sends it out over FM. This prevents users from having to connect a dongle of any kind to their iPad, iPod touch or iPhone, but the built-in USB port is actually capable of charging all three should you choose. There’s even a 3.5mm output jack for channeling the tunes to a 3.5mm input on your head unit, and the (necessary) accompanying iDevice app should hit the App Store soon for absolutely nothing. The hardware itself is available now from New Potato for $99.99, and it’ll hit “select retail locations” in a fortnight or so for the same amount.

Continue reading New Potato reveals TuneLink Auto Bluetooth-to-FM transmitter for iPhone, iPod touch and iPad

New Potato reveals TuneLink Auto Bluetooth-to-FM transmitter for iPhone, iPod touch and iPad originally appeared on Engadget on Tue, 23 Nov 2010 09:00:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceNew Potato Technologies  | Email this | Comments

GPS AutoBot Dongle Tracks Your Car From Your Cellphone

I’m not sure what’s my favorite part of this GPS-dongle for cars. Maybe its that it makes it impossible to misplace your car, or perhaps it is that fact that it’s called the AutoBot, clearly the most Transformer-tastic name for a car accessory ever.

Hooking into the car’s on-board diagnostic brain via an OBD-II-port, the AutoBot works with a partner-app in your Android phone or iPhone. From here you can get walking directions to the car, or tap into the diagnostics for in-depth info on what’s happening under the hood.

Even better, the dongle will also let you track a stolen car (or sound an alarm when your kids drive to the local make-out spot instead of going to music lessons), and will send your location to both family members and 911 should your airbags deploy. The AutoBot will be in stores early next year for “less than $300″.

There is one catch. The monthly service comes in exchange for spam. If you don’t pay to opt-out, you’ll get “offers” based on what it going on with your car. Ominously, “AutoBot knows when you need an oil change, tires rotated, and how many miles you’ve driven,” and will “share this information with our partners.” No thanks.

AutoBot product page [Mavizon Tech via The Giz]

See Also:


iOS 4.2.1 Jailbreak hits with updated redsn0w

The Dev-Team Blog was just updated with a new redsn0w version 0.9.6b4 jailbreak (based on Geohot’s Limera1n bootrom exploit) for iOS 4.2.1. Unfortunately, iOS device owners won’t find jailbreaking as easy as navigating to a website. And the 4.2.1 jailbreak is currently “tethered” so owners of the iPhone 4, iPad, and newer iPhone 3GS and iPod touch models will have to reattach to a PC or Mac to boot into a jailbroken state each time your device loses power or needs a reboot. Those of you who rely on the ultrasn0w unlock should hold off for now — good advice for anyone not comfortable with terms like “SHSH blobs” or “Cydia.” Everyone else can hit up the link below with a detailed how-to provided by Redmond Pie.

iOS 4.2.1 Jailbreak hits with updated redsn0w originally appeared on Engadget on Tue, 23 Nov 2010 05:55:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceDev-Team Blog  | Email this | Comments