Join Our 3 MILLION+ Members Today! Register Here | Login
Go Back   BlackBerry Forums at CrackBerry.com > Other Smartphone and Tablet Platforms > Apple iPhone/iPad

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
    Thread Author   #1  
Old 11-08-2011, 02:30 PM
CrackBerry Abuser
Device(s): Bold9900...PlayBook...MacAir...iMac
Carrier: Bell
 
Location: Toronto Canada
Join Date: May 2009
Posts: 407
Likes Received: 46
Thanked 14 Times in 10 Posts
Default iPhone App Security Threat!

Researcher Charlie Miller Discovers iPhone App Security Bug.

Hopefully the holes are plugged soon as I do banking on my other iOS devices.
Reply With Quote Tip this Post
  #2  
Old 11-08-2011, 02:41 PM
CrackBerry Genius
Device(s): 9550 Storm 2 and iPad 2, for now
Carrier: Verizon
 
Location: Left coast/Right coast
Join Date: Aug 2009
Posts: 2,682
Likes Received: 56
Thanked 77 Times in 65 Posts
Default

This is one reason the BB security is better, you can control at a very granular level the types of access an application has access to.
__________________
They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.

A fanatic is one who won't change his mind...or the subject.
Reply With Quote Tip this Post
  #3  
Old 11-08-2011, 02:48 PM
O.G.
Device(s): Galaxy Nexus
Carrier: Verizon
 
Location: New York
Join Date: Jun 2008
Posts: 10,284
Likes Received: 602
Thanked 485 Times in 355 Posts
Default

Hopefully this gets fixed fast. Thankfully I have all the apps I already "need" anyways.
Reply With Quote Tip this Post
    Thread Author   #4  
Old 11-08-2011, 02:54 PM
CrackBerry Abuser
Device(s): Bold9900...PlayBook...MacAir...iMac
Carrier: Bell
 
Location: Toronto Canada
Join Date: May 2009
Posts: 407
Likes Received: 46
Thanked 14 Times in 10 Posts
Default

Wow!!

Apple boots security guru who exposed iPhone exploit | Apple Talk - CNET News

Hopefully the reason for the boot is not because the guy exposed the flaw to the media.

Last edited by RetroAndreas; 11-08-2011 at 02:57 PM.
Reply With Quote Tip this Post
  #5  
Old 11-08-2011, 03:01 PM
O.G.
Device(s): Galaxy Nexus
Carrier: Verizon
 
Location: New York
Join Date: Jun 2008
Posts: 10,284
Likes Received: 602
Thanked 485 Times in 355 Posts
Default

Wow that's messed up. But while he did find a threat, he did break his agreement, lol. Damn ToS.
Reply With Quote Tip this Post
  #6  
Old 11-08-2011, 03:24 PM
Slayer of Misinformation
Device(s): MD276LL/BB9930
Carrier: Verizon
Pin: Smartphones are for Smart People
 
Location: Indiana
Join Date: Apr 2008
Posts: 5,265
Likes Received: 236
Thanked 176 Times in 135 Posts
Default

This wil be fixed in the upcoming 5.0.1 update due out within a week or so.
__________________
"Do you want to sell sugar water or do you want to change the world?"

Steve Jobs to John Sculley the then CEO of Pepsi.

Reply With Quote Tip this Post
  #7  
Old 11-08-2011, 03:26 PM
Slayer of Misinformation
Device(s): MD276LL/BB9930
Carrier: Verizon
Pin: Smartphones are for Smart People
 
Location: Indiana
Join Date: Apr 2008
Posts: 5,265
Likes Received: 236
Thanked 176 Times in 135 Posts
Default

Quote:
Originally Posted by avt123 View Post
Wow that's messed up. But while he did find a threat, he did break his agreement, lol. Damn ToS.
And why he did not contact Apple directly is beyond me. Why release the app and not contact Apple. Then he wonders why he gets booted.

To test the feature, Miller released a generic stock-checking app called InstaStock that could tap into his own server and grab bits of code to show that it worked. As noted in our original coverage, such behavior is grounds for dismissal from Apple's developer program, as spelled out in Apple's App Store guidelines.
__________________
"Do you want to sell sugar water or do you want to change the world?"

Steve Jobs to John Sculley the then CEO of Pepsi.

Reply With Quote Tip this Post
  #8  
Old 11-08-2011, 03:29 PM
O.G.
Device(s): Galaxy Nexus
Carrier: Verizon
 
Location: New York
Join Date: Jun 2008
Posts: 10,284
Likes Received: 602
Thanked 485 Times in 355 Posts
Default

Exactly. He is very stupid for not even letting Apple know. He should of at least warned them or told them first before he outed this to the media.

When you agree to something make sure you know what you are agreeing to.
Reply With Quote Tip this Post
  #9  
Old 11-08-2011, 03:34 PM
Slayer of Misinformation
Device(s): MD276LL/BB9930
Carrier: Verizon
Pin: Smartphones are for Smart People
 
Location: Indiana
Join Date: Apr 2008
Posts: 5,265
Likes Received: 236
Thanked 176 Times in 135 Posts
Default

No doubt he should have told Apple they probably would have hired him. Muscle Nerd got the grand tour and people thought he was leaving the JB community. The JB dev that made the notifications JB app is an Apple employee, guess what he does????? Yep make the notifications stuff.....LOL
__________________
"Do you want to sell sugar water or do you want to change the world?"

Steve Jobs to John Sculley the then CEO of Pepsi.

Reply With Quote Tip this Post
  #10  
Old 11-08-2011, 03:48 PM
CrackBerry Genius of Geniuses
Device(s): Bold 9900
Carrier: Vodafone
Pin: 2851F7AB
 
Location: Lisburn, Northern Ireland
Join Date: Aug 2009
Posts: 6,407
Likes Received: 592
Thanked 320 Times in 258 Posts
Default

Quote:
Originally Posted by Accidental Post View Post
This wil be fixed in the upcoming 5.0.1 update due out within a week or so.
And you know this how? Or is it just an assumption?

Posted from my CrackBerry at wapforums.crackberry.com
Reply With Quote Tip this Post
  #11  
Old 11-08-2011, 04:32 PM
CrackBerry Abuser
Device(s): 10 years on a bunch of different BB's->now iPhone 4S
Carrier: Verizon
 
Join Date: Jul 2008
Posts: 190
Likes Received: 36
Thanked 14 Times in 8 Posts
Default

I'm sure it will get patched soon but may not be tied to that release. I would assume they would push it out as soon as possible, similar to a browser patch. Companies don't want to sit on these types of fixes.
Reply With Quote Tip this Post
  #12  
Old 11-09-2011, 01:00 PM
Slayer of Misinformation
Device(s): MD276LL/BB9930
Carrier: Verizon
Pin: Smartphones are for Smart People
 
Location: Indiana
Join Date: Apr 2008
Posts: 5,265
Likes Received: 236
Thanked 176 Times in 135 Posts
Talking

Quote:
Originally Posted by belfastdispatcher View Post
And you know this how? Or is it just an assumption?

Posted from my CrackBerry at wapforums.crackberry.com
FYI: For Belfast:

According to his tweet, iOS 5.0.1 will close an iOS security bug found by Charlie Miller that makes exploits dramatically easier to tackle. This would imply that a jailbreak for iOS 5.0 versus iOS 5.0.1 could come quicker. Pod2g clarified in a later tweet that it wasn't a matter of iOS 5.0.1 never being jailbreakable, it will just be more difficult and will take longer.

I know people
__________________
"Do you want to sell sugar water or do you want to change the world?"

Steve Jobs to John Sculley the then CEO of Pepsi.

Reply With Quote Tip this Post
  #13  
Old 11-09-2011, 01:14 PM
CrackBerry Genius
Device(s): Samsung Galaxy Nexus LTE
Carrier: Verizon
Pin: lssanjose@gmail.com (Google Talk)
 
Location: Tigard, Oregon
Join Date: May 2009
Posts: 2,136
Likes Received: 56
Thanked 71 Times in 59 Posts
Default

The only way to be secure online, is to get offline. As long as you provide info online, it's up for grabs


Sent from my iPhone using Tapatalk
__________________
I will never understand these "help me to decide" threads. Grow a pair, or put on your big girl panties (whichever applies), and make the decision that works best for you. - AmazinglyGraceless.
Reply With Quote Tip this Post
Reply
BlackBerry Forums at CrackBerry.com > > Other Smartphone and Tablet Platforms > Apple iPhone/iPad   iPhone App Security Threat!

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes