Apple’s more secure than Windows, maybe but the iPhone sucks.
Wednesday, July 29th, 2009Every time there is a new bug or virus or backdoor discovered in Windows, the Linux and Mac gang use it to attack Microsoft, as a weak OS, and that you should switch to a “better” system like Mac’s or Linux.
Every time there is a security warning around Internet Explorer, you should use a “good” browser like Firefox and Sarfie.
Now don’t get me wrong I’m not a MS fan boy, I’m never going to get Microsoft’s MVP status, but this trashing of Microsoft is stupid. I use Firefox because it a “better” browser *for me*. I use Windows because it’s a better platform *for me*.
One of the issues that Microsoft does now take seriously is security, windows is a leaky bag as far as security is concerned, and Microsoft has a difficult time balancing improving that security and breaking every poorly written windows application out there. However when a big issue does come to light, they normally work with the security people and have a patch ready before it’s made public.
Compare this well rounded, well stretchered, respectful approach to Apples.
Apple is a company not only known for its great design and high prices, but the internal security around its products, so much so that it could give North Korea a run for it money.
This security has lead at least in part to one death, and now to no patch to a security hole so wide it could seriously damage the companies standing, even with its biggest fan boys.
The iPhone, Symbol of Apple, can be hacked, with just two SMS messages. And when I say hacked, I mean taken over, I mean the attacker can dial the phone, open web sites in the phone’s browser, turn on the camera and microphone; in short, he or she can take complete control of your iPhone.
The only way according to Charlie Miller and his colleague Collin Mulliner to protect yourself is turn off your iPhone.
They will also tomorrow, showcase a flaw that allows you to knock Android phones off-line for a few seconds and could be repeated to knock them off for longer as a sort of DOS attack, however… Google has patched the Android flaw.
[Update]
Mashable’s Ben Parr has written an update to the security implications of this hack, the key point’s (from his post) are
- 1. The major issue is a security flaw involving SMS. Specifically, the hack can control an iPhone remotely, including your iPhone’s camera, Safari (Safari), and more. It can even send messages to friends in your address book, which is where this hack becomes scariest.
2. The hack works by sending you code in an SMS message (or a series of messages) that crashes your iPhone. After that, your iPhone is theirs to use.
3. The offending text would come in the form of a single square character. If you get the square character, turn off your phone IMMEDIATELY.
4. You only have to receive the message to get hacked; you don’t even have to do anything with the text message.
5. The flaw was discovered by noted security expert Charlie Miller, who has hacked everything from MacBook Airs to Second Life, and partner Collin Mullinger.
6. The attack was presented publicly at the Black Hat conference. The duo decided to do this after Apple gave them no response back in July, when they provided Apple with information on the security flaw. The goal is to bring attention to the flaw (which they are clearly getting).
7. According to Reuters, now that the vulnerability is exposed, hackers could build software that mounts this SMS attack within the next two weeks.
8. Apparently Google Android, Windows Mobile phones, and Palm Pres are vulnerable to similar hacks. The team demonstrated the attack on an Android (Android) phone and a Windows Mobile phone.
Finally as Ben says, “Don’t be alarmed, but be vigilant.”
Also covered in Business week the Guardian





