Linked by Thom Holwerda on Mon 9th Nov 2009 23:39 UTC
Apple The web went aflame today with headlines like "First iPhone worm discovered", and many other variants. Most of those headlines, however, left out a very important little fact which diminishes the impact of the news considerably: it only affects jailbroken iPhones with SSH installed, and with default root passwords.
Thread beginning with comment 394340
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[8]: Smart and dumb?
by broch on Thu 12th Nov 2009 20:44 UTC in reply to "RE[7]: Smart and dumb?"
broch
Member since:
2006-05-04

No you are not setting anything straight. It is quite easy to escape iPhone sandboxing. SMS runs on iPhone not sandboxed. Maybe check Miller's reports about "security" of sandboxed iPhone (crashing whole OS). The only real thing Apple "sandboxing" does is keep users from not buying apps from Apple store and extract maximum revenue.
What is funny is that Apple wants to patent crippling (ehmm sandboxing) cellphone devices (http://appft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d...)

iPhone is not safe device, never was. If Apple was smart they will open iPhone apps to keep users happy and eliminate jailbreak problems.


I don't need jailbroke blackberry to run (safely) SSH.

Reply Parent Score: 1

RE[9]: Smart and dumb?
by Chicken Blood on Thu 12th Nov 2009 22:52 in reply to "RE[8]: Smart and dumb?"
Chicken Blood Member since:
2005-12-21

No you are not setting anything straight. It is quite easy to escape iPhone sandboxing. SMS runs on iPhone not sandboxed. Maybe check Miller's reports about "security" of sandboxed iPhone (crashing whole OS).

Maybe you should read the follow-ups to Miller's reports. That vulnerability was fixed back in July: http://support.apple.com/kb/HT3754.

The only real thing Apple "sandboxing" does is keep users from not buying apps from Apple store and extract maximum revenue.
What is funny is that Apple wants to patent crippling...

Ahh, you're an anti-Apple zealot. You failed to keep to the point and started off on a rant. I guess I should stop feeding the troll now.

I don't need jailbroke blackberry to run (safely) SSH.

That's nice for you. Enjoy.

Reply Parent Score: 2