Apple fixes iPhone SMS security flaw

Posted by David Walker on Wed 5 Aug 2009

iPhone now secured from remote attack

Remember that iPhone security flaw we told you about? Well, the hole is no more, with Apple now offering a patch via iTunes update.

If you missed it first time round, the security flaw was highlighted last week by Charlie Miller and Collin Mulliner, senior researchers at Independent Security Evaluators, who were able to take control of an iPhone via a string of text messages. How? Well, executable code from the messages embedded itself in the iPhone's memory, which allowed them to access and control the device remotely, throwing in all sorts of nasties which could spread the bug further (to your friends, for example), allow others to access your personal data and kill off the original infected iPhone. We suspect it's the kind of damage that wouldn't be easily sorted on the counter of your local O2 or Carphone Warehouse showroom either.

- Vote for the iPhone as the Gadget You Can't Live Without in our T3 Gadget Awards

Want to avoid that nightmare scenario? Well, you're in luck, with Apple now releasing a software patch for the iPhone which closes this loophole. The security update became available at the weekend and is accessible via iTunes. Simply sync your iPhone with iTunes and the patch will install on the handset

Apple has acknowledged the potential seriousness of the problem, but doesn't believe it was ever a real world problem for its users. 'We appreciate the information provided to us about SMS vulnerabilities which affect several mobile phone platforms,' it said in a statement. 'Less than 24 hours after a demonstration of this exploit, we've issued a free software update that eliminates the vulnerability from the iPhone. Contrary to what's been reported, no one has been able to take control of the iPhone to gain access to personal information using this exploit.'

Link: Apple (via Daily Telegraph)

iPhone software 3.0 revealed: 10 Things we love