Feeds

Apple patches Black Hat SMS vuln

Claims 24 hour turnaround

Secure remote control for conventional and virtual desktops

Yesterday, The Reg reported that researchers had discovered a vulnerability in the iPhone and other mobile devices that made them vulnerable to an SMS hack.

This morning, Apple fixed it.

Apple spokesperson Tom Neumayr told The Reg about the fix when we contacted him after the BBC reported that O2 had said a fix was on the way.

According to Neumayr:

We appreciate the information provided to us about SMS vulnerabilities which affect several mobile phone platforms. This morning, less than 24 hours after a demonstration of this exploit, we've issued a free software update that eliminates the vulnerability from the iPhone. Contrary to what's been reported, no one has been able to take control of the iPhone to gain access to personal information using this exploit.

It should be said, however, the vuln was first discussed by security researcher Charlie Miller, principal analyst at Independent Security Evaluators, three weeks ago. Miller is credited by Apple, along with Collin Mulliner of Technical University Berlin, for reporting the vuln.

Although we're not among those who reported that the vuln had been used to bag anyone's personal info, we're still quite pleased that the 297.9MB iPhone 3.0.1 update loaded swimmingly onto our own personal iPhone 3GS.

iTunes iPhone 3.0.1 info dialog

One of the more straightforward update descriptions we've seen in quite some time

To access the fix, connect your iPhone to iTunes as per usual, and click Check for Update. Or you could simply wait until iTunes does its automatic weekly self-check.

But, as always, better safe than sorry. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.