PCWorld Forums

PCWorld Forums: Security Becomes 'top Priority' For Smartphone Users - PCWorld Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Security Becomes 'top Priority' For Smartphone Users

#1 User is offline   PCWorld 

  • Advanced Member
  • PipPipPipPipPipPipPipPip
  • Group: PCWorld BOT
  • Posts: 103,817
  • Joined: 01-August 07

Posted 31 October 2010 - 08:41 AM

Post your comments for Security Becomes 'Top Priority' for Smartphone Users here
0

#2 User is offline   hastaluego249 

  • Advanced Member
  • PipPipPipPip
  • Group: Members
  • Posts: 460
  • Joined: 12-March 10

Posted 31 October 2010 - 06:23 PM

Didn't I tell you this day was coming? The first antivirus for phones is here. And guess what it only runs on Android. The iPhone version is not yet available. I guess the garden is keeping my data secure. Google the new MSFT, LOL! I guess the permissions security is not working as well as everybody had hoped.
0

#3 User is online   WinTard 

  • Veteran
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 6,513
  • Joined: 16-January 09
  • Location:Look behind you...

Posted 31 October 2010 - 08:38 PM

View Posthastaluego249, on 31 October 2010 - 06:23 PM, said:

Didn't I tell you this day was coming? The first antivirus for phones is here. And guess what it only runs on Android. The iPhone version is not yet available. I guess the garden is keeping my data secure. Google the new MSFT, LOL! I guess the permissions security is not working as well as everybody had hoped.


Ignorance and denial of a common problem afflicting all computers, such as "no virus in the wild" can only lead to disaster, for the clueless...

Why don't you Google for ios4 malware just for fun? Let's be kind and gentle, and leave out ios3 out of the equation...

Quote

About 4,340,000 results (0.18 seconds)
Search Results
  • Everything
MoreFewer
Search Options
Hide search toolsShow search tools
12345678910Next


How about a few articles from PCWorld only?
Update iOS Now, Malicious Attacks Coming Soon
Hacker: Apple iPad Simply Not a Safe Platform
iOS 4 Lock Screen Security Flaw Grants Access to Contacts
IPhone Security Flaw Allows Access to Contact Information

And searching the NVD for iPhone returns:

Quote


Search Results (Refine Search)
There are 123 matching records. Displaying matches 1 through 20.

CVE-2010-1817
Summary: Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1815
Summary: Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1814
Summary: WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1813
Summary: WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving HTML object outlines.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1812
Summary: Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selections.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1811
Summary: ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF file.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1810
Summary: FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.
Published: 09/09/2010
CVSS Severity: 5.8 (MEDIUM)

CVE-2010-1809
Summary: The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.
Published: 09/09/2010
CVSS Severity: 10.0 (HIGH)

CVE-2010-1781
Summary: Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the rendering of an inline element.
Published: 09/09/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-1768
Summary: Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.
Published: 08/20/2010
CVSS Severity: 6.9 (MEDIUM)

CVE-2010-1797
Summary: Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.
Published: 08/16/2010
CVSS Severity: 9.3 (HIGH)

CVE-2010-2973
Summary: Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.
Published: 08/05/2010
CVSS Severity: 6.9 (MEDIUM)

CVE-2010-1775
Summary: Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot.
Published: 06/22/2010
CVSS Severity: 1.9 (LOW)

CVE-2010-1757
Summary: WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document.
Published: 06/22/2010
CVSS Severity: 6.4 (MEDIUM)

CVE-2010-1756
Summary: The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network.
Published: 06/22/2010
CVSS Severity: 5.8 (MEDIUM)

CVE-2010-1755
Summary: Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to track users via a cookie.
Published: 06/22/2010
CVSS Severity: 4.3 (MEDIUM)

CVE-2010-1754
Summary: Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors.
Published: 06/22/2010
CVSS Severity: 6.9 (MEDIUM)

CVE-2010-1753
Summary: ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG image.
Published: 06/22/2010
CVSS Severity: 6.8 (MEDIUM)

CVE-2010-1752
Summary: Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to URL handling.
Published: 06/22/2010
CVSS Severity: 6.8 (MEDIUM)

CVE-2010-1751
Summary: Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location information via unspecified vectors.
Published: 06/22/2010
CVSS Severity: 5.0 (MEDIUM)


Alas, the walled garden only provides you a false sense of security (from looking out, not from hackers looking in). Where have you been lately?And how high are these walls? I'd prefer if the iPlatform also had some kind of anti-virus, but that would go against doctrine -- which is: Zero Virus In The Wild.

My point is not to dump specifically on your walled garden 'protection' but to alert everyone that no platform is secure, regardless of what 'assurances' or beliefs one may have.

Security for all through awareness, not blind faith.

~~~~~~~~~~~
Anticipate the difficult by managing the easy.
Lao Tzu

Disclaimer: This is just my humble opinion -- In a free world, is everyone is entitled to their own opinions?
Spoiler
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users