Feeds

Only jailbroken iPhones, iPads can be safe from latest vuln

iUsers with unmeddled tech must wait for Apple patch

Build a business case: developing custom apps

The latest jailbreak for iPhones, published on Wednesday, exploits a zero-day bug in iOS that only users of jailbroken devices will be able to fix, security experts warn.

Version 3 of jailbreakme.com, which also works on iPad fondleslabs, takes advantage of a PDF-related vulnerability in iOS. Users of jailbroken devices can use PDF Patcher 2 to guard against the underlying flaw while users of regular devices will have to wait for a patch from Apple. Jailbroken devices allow the installing of apps besides those approved by the official Apple App Store.

Any web link could potentially be redirected to a malicious file that exploits the vulnerability to install malware instead of simply jailbreaking a device, so exploits do not have to rely on tricking punters into opening malicious PDF files.

"It's as serious as last time when jailbreakme.com was using a zeroday," notes Mikko Hyponnen of Finnish security firm F-Secure. "Last time nothing bad happened, as Apple patched fast."

Apple does not allow anti-virus software to be listed in the official iPhone AppStore, so there's no protection via this route until a patch for the underlying vulnerability is published by Apple.

The "temporary" vulnerability of unaltered iPhones and fondleslabs illustrates one security shortfall of the locked-down walled-garden approach practised by Apple. The more laissez-faire approach followed by Google with Android has seen an upswing in malicious code targeted against Droid phones, however. iPhone malware remains even rarer than the low levels of Droid Trojans in circulation but, even so, the potential for badness is still there. ®

Next gen security for virtualised datacentres

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Scale data protection with your virtual environment
To scale at the rate of virtualization growth, data protection solutions need to adopt new capabilities and simplify current features.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?