Quantcast Security Flaw Shows SMSs In Emergency-Only Mode - iPhone Alley Forums

Security Flaw Shows SMSs In Emergency-Only Mode
Reply
Edward Kirk
WrAdminterizer
 
Edward Kirk's Avatar
 
Join Date: Apr 2007
Location: Illinois, USA
Posts: 3,084
Thanks: 19
Thanked 26 Times in 25 Posts
Security Flaw Shows SMSs In Emergency-Only Mode -    #1


Yet another security flaw in the iPhone's software had been found, and while it's probably not particularly harmful to the majority of users, it is pretty interesting. Karl Kraft posted the exploit on his blog, but he wasn't the one to uncover it. No, despite his skills with a computer and knowledge of the software, he didn't find it. Instead he says it was found by his 12-year-old son.

The flaw is fairly basic. When the iPhone is locked using a passcode in emergency call only mode and with text message previews disabled, the iPhone will still show incoming text messages.

In these circumstances the iPhone should just show a "New Text Message" preview window, but instead it shows as much of the message as will fit in the preview window and the name or number of the sender.

While this isn't nearly as big an issue as many of the exploits we've seen, it would make it possible for someone else to see possibly private information sent to you.

You can get more details on the exploit and some screenshots at his blog, KarlKraft.com.

[via Ars Technica]
__________________

About my iPhone:
iPhone & Color: iPhone 3G 16GB White
iPhone Version: 3.0
Computer & OS: MacBook Pro 15", Mac OS X 10.5.4

Twitter
Edward Kirk is offline   Reply With Quote
madscientest
Rocks the Board
 
Join Date: Sep 2007
Location: CA
Posts: 294
Thanks: 1
Thanked 0 Times in 0 Posts
this is not really an issue -    #2
why does age matter when it come to who finds it? just because he is 12 means absolutely nothing. he didn't find the flaw he just saw it! big difference. it dont take a computer degree to find user level mistakes on software, just using it. so please dont think of the 12 year old as a genius or anything.
madscientest is offline   Reply With Quote
Beast
Rocks the Board
 
Beast's Avatar
 
Join Date: Dec 2007
Location: In my house.
Posts: 159
Thanks: 3
Thanked 1 Time in 1 Post
  #3
Quote:
Originally Posted by madscientest View Post
why does age matter when it come to who finds it? just because he is 12 means absolutely nothing. he didn't find the flaw he just saw it! big difference. it dont take a computer degree to find user level mistakes on software, just using it. so please dont think of the 12 year old as a genius or anything.
Ogenius 12-year-old then here:

http://blog.wired.com/geekdad/2008/0...npu=1&mbid=yhp

Last edited by JFrappuccino; October 7th, 2008 at 01:18 AM.
Beast is offline   Reply With Quote
Tandersn9
Forum Lurker
 
Join Date: Oct 2008
Location: Maine
Posts: 4
Thanks: 0
Thanked 0 Times in 0 Posts
  #4
Quote:
Originally Posted by madscientest View Post
why does age matter when it come to who finds it? just because he is 12 means absolutely nothing. he didn't find the flaw he just saw it! big difference. it dont take a computer degree to find user level mistakes on software, just using it. so please dont think of the 12 year old as a genius or anything.
I have a question, why are you making it sound like that was the focus of the article when clearly it wasn't? It was merely a side point or something that is less that a side point. So how about you stop leaving obnoxious comments. No wants wants to come on to a nice, friendly site like this one have to read comments left by jerks such as yourself. ...Isn't that what youtube is for....

Thanks
Tandersn9 is offline   Reply With Quote
JFrappuccino
Ubiquitous Mod
 
JFrappuccino's Avatar
 
Join Date: Aug 2007
Location: California
Posts: 703
Thanks: 14
Thanked 34 Times in 33 Posts
Send a message via AIM to JFrappuccino Send a message via MSN to JFrappuccino
  #5
Quote:
Originally Posted by madscientest View Post
why does age matter when it come to who finds it? just because he is 12 means absolutely nothing. he didn't find the flaw he just saw it! big difference. it dont take a computer degree to find user level mistakes on software, just using it. so please dont think of the 12 year old as a genius or anything.
Chill my ninja
its all good
it was just a point and nothing else =P
trial and error, nothing more
everyone is entitled to an opinion
JFrappuccino is offline   Reply With Quote
 
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Forum Jump


All times are GMT -5. The time now is 07:20 AM.
Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.