<?xml version="1.0"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd">
<channel>
<title>Engadget</title>
<link>http://www.engadget.com</link>
<description>Engadget</description>
<image>
<url>http://www.blogsmithmedia.com/www.engadget.com/media/feedlogo.gif</url>
<title>Engadget</title>
<link>http://www.engadget.com</link>
</image>
<language>en-us</language>
<copyright>Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only.</copyright>
<generator>Blogsmith http://www.blogsmith.com/</generator><item><title><![CDATA[The Engadget Interview: Dr. Charlie Miller]]></title><link>http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/</link><guid isPermaLink="true">http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/</guid><comments>http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/#comments</comments><description><![CDATA[<div style="text-align: center;">
	<a href="http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/"><img src="http://www.blogcdn.com/www.engadget.com/media/2011/11/charliemiller1.jpg" style="border-width: 0px; border-style: solid; margin: 4px;" /></a></div>
Dr. Charlie Miller -- a man who has been <a href="http://www.engadget.com/all/charliemiller">covered extensively</a> here at Engadget -- snagged a doctorate in Mathematics from the University of Notre Dame. He spent five years working on cryptography for the National Security Agency. And, after heading into the wilds of security analysis, he was the first to find a bug in the battery of the first MacBook Air, various bugs within Mac OS X and the Safari web browser and assorted bugs within iOS itself, all while racking up thousands of dollars in hacking contest prize money.<br />
<br />
<div class="follow_this_in_post">
	<img alt="" src="http://www.blogcdn.com/www.engadget.com/media/2009/11/more_info_header_1.gif" /><br />
	<div class="ftip_links">
		<a href="http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/">PWN 2 OWN over: MacBook Air gets seized in 2 minutes flat</a></div>
	<div class="ftip_links">
		<a href="http://www.engadget.com/2009/03/19/the-pwn2own-trifecta-safari-ie-8-and-firefox-exploited-on-day/">The Pwn2Own trifecta: Safari, IE 8, and Firefox exploited on day 1</a></div>
	<div class="ftip_links">
		<a href="http://www.engadget.com/2008/03/29/linux-becomes-only-os-to-escape-pwn-2-own-unscathed/">Linux becomes only OS to escape PWN 2 OWN unscathed</a></div>
</div>
Last week, this came to a head, as Miller created a controversial proof of concept application that both proved the existence of an iOS security hole as well as <a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/">got him expelled</a> from the App Store's developer network. Given that he's driven Apple Inc. somewhat nuts over the past few years, we sat down with the good doctor to see how he felt about Apple, iOS, security, technology, sandboxing, the pros and cons of modern security and the ups and downs of one of the weirdest career paths for any aspiring technologist today. Join us after the break for the full interview in both textual and audio form.<p><a href="http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/" rel="bookmark">Continue reading <em>The Engadget Interview: Dr. Charlie Miller</em></a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/">The Engadget Interview: Dr. Charlie Miller</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Fri, 18 Nov 2011 13:30:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/20108985/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2011/11/18/the-engadget-interview-dr-charlie-miller/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>charlie miller</category><category>CharlieMiller</category><category>engadget interview</category><category>EngadgetInterview</category><category>hack</category><category>hacker</category><category>hacks</category><category>interview</category><category>ios</category><category>ios 5</category><category>Ios5</category><category>mac</category><category>mobilepostcross</category><category>os x</category><category>OsX</category><category>security</category><category>the engadget interview</category><category>TheEngadgetInterview</category><dc:creator><![CDATA[Chris Barylick]]></dc:creator><pubDate>Fri, 18 Nov 2011 13:30:00 EST</pubDate></item><item><title><![CDATA[Charlie Miller's latest iOS hack gets into the App Store, gets him tossed out (video)]]></title><link>http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/</link><guid isPermaLink="true">http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/</guid><comments>http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/#comments</comments><description><![CDATA[<div style="text-align: center;">
	<a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/"><img src="http://www.blogcdn.com/www.engadget.com/media/2011/11/imhackingintouriphone.jpg" style="border-width: 0px; border-style: solid; margin: 4px;" /></a></div>
This isn't the first brush Apple's iOS platform has had with apps that exploit <a _mce_href="http://www.engadget.com/tag/ios,security" href="http://www.engadget.com/tag/ios,security">security holes</a> to run unsigned code, but according to the developer of InstaStock, this may be the first to get a security researcher booted from its developer program. <a href="http://www.engadget.com/tag/charliemiller">Charlie Miller</a> shared his discovery with <em>Forbes</em> earlier today, showing off an app which successfully made it through Apple's approval process despite packing the ability to download and run unsigned code. That could allow a malicious app to access user data or activate hardware features remotely. Apple pulled the app after the findings were published, and according to Miller, revoked his developer access shortly afterward for what seems to be a clear violation of the guidelines. He told <em>CNET</em> that he alerted Apple to the exploit three weeks ago, however it's unknown whether or not a fix for the problem is included in the new <a href="http://www.engadget.com/tag/ios5.0.1">5.0.1 version of iOS</a> that's currently in testing. He'll be explaining his method in more detail next week at SysCan, but until the hole is confirmed closed we'd probably keep a tight leash on our app store browsing.<br />
<br />
[Thanks to everyone who sent this in]<p><a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/" rel="bookmark">Continue reading <em>Charlie Miller's latest iOS hack gets into the App Store, gets him tossed out (video)</em></a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/">Charlie Miller's latest iOS hack gets into the App Store, gets him tossed out (video)</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Mon, 07 Nov 2011 22:57:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/20100984/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2011/11/07/charlie-millers-latest-ios-hack-gets-into-the-app-store-gets-h/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>app store</category><category>apple</category><category>apple iphone</category><category>AppleIphone</category><category>AppStore</category><category>charlie miller</category><category>CharlieMiller</category><category>developer</category><category>flaw</category><category>hack</category><category>instastock</category><category>ios</category><category>ios 5</category><category>Ios5</category><category>iphone</category><category>itunes</category><category>mobilepostcross</category><category>security</category><category>security hole</category><category>security researcher</category><category>SecurityHole</category><category>SecurityResearcher</category><category>unsigned code</category><category>UnsignedCode</category><category>video</category><dc:creator><![CDATA[Richard Lawler]]></dc:creator><pubDate>Mon, 07 Nov 2011 22:57:00 EST</pubDate></item><item><title><![CDATA[Charlie Miller finds MacBook battery security hole, plans to fill with Caulkgun]]></title><link>http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/</link><guid isPermaLink="true">http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/</guid><comments>http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/#comments</comments><description><![CDATA[<div style="text-align: center;">
	<a href="http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/"><img src="http://www.blogcdn.com/www.engadget.com/media/2011/07/laptopbatteries-1.png.jpg" style="border-width: 0px; border-style: solid; margin: 4px;" /></a></div>
Those batteries have probably met a worse fate than the <a href="http://www.engadget.com/2011/07/20/the-macbook-drops-from-apples-store/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+weblogsinc%2Fengadget+%28Engadget%29">white MacBook</a> line they came from. According to <em>Forbes</em>, <a href="http://www.engadget.com/tag/charlie+miller">Charlie Miller's</a> managed to render seven of them useless after gaining total access to their micro-controllers' firmware via a security hole. Evidently, the Li-ion packs for the line of lappies -- including Airs and Pros -- are accessible with two passwords he dug up from an '09 software update. Chuck mentions that someone could "use them to do something really bad," including faulting charge-levels and thermal read-outs to possibly even making them <a href="http://www.engadget.com/tag/explodingbattery">explode</a>. He also thinks hard-to-spot <a href="http://www.engadget.com/tag/malware/">malware</a> could be installed directly within the battery, repeatedly infecting a computer unless removed. Come August, he'll reportedly be detailing the vulnerability at the Black Hat security conference along with a fix he's dubbed Caulkgun, which only has the <em>mild</em> side-effect of locking-out updates by Apple. Worth being safe these days, though. Right? Full story in the links below.<p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/">Charlie Miller finds MacBook battery security hole, plans to fill with Caulkgun</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Fri, 22 Jul 2011 23:59:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19998445/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2011/07/22/charlie-miller-finds-macbook-battery-security-hole-plans-to-fil/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>battery</category><category>battery hack</category><category>BatteryHack</category><category>black hat</category><category>black hat security conference</category><category>BlackHat</category><category>BlackHatSecurityConference</category><category>caulkgun</category><category>charlie miller</category><category>CharlieMiller</category><category>exploit</category><category>firmware</category><category>hack</category><category>laptop</category><category>Lithium Ion</category><category>lithium ion batteries</category><category>LithiumIon</category><category>LithiumIonBatteries</category><category>macbook</category><category>macbook air</category><category>macbook battery</category><category>macbook pro</category><category>MacbookAir</category><category>MacbookBattery</category><category>MacbookPro</category><category>micro-controller</category><category>security</category><category>software update</category><category>SoftwareUpdate</category><dc:creator><![CDATA[Joe Pollicino]]></dc:creator><pubDate>Fri, 22 Jul 2011 23:59:00 EST</pubDate></item><item><title><![CDATA[Charlie Miller and Kim Jong-Il could pwn the Internet with two years, $100 million]]></title><link>http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/</link><guid isPermaLink="true">http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/</guid><comments>http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/#comments</comments><description><![CDATA[<div style="text-align: center;"><a href="http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/"><img vspace="4" hspace="4" border="1" alt="" src="http://www.blogcdn.com/www.engadget.com/media/2010/08/100802-cyberwar-01.jpg" /></a></div>
<div style="text-align: left;">Well there's one thing we can say about Charlie Miller -- he sure is an ambitious rascal. When not busy exposing <a href="http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/">security holes in OS X</a>, our fave security expert (aside from Angelina Jolie in <em>Hackers</em>, of course) has laid out a shocking expose based on the following premise: if <a href="http://www.engadget.com/tag/KimJongIl/">Kim Jong-Il</a> had a budget of $100 million and a timeline of two years could North Korea's <em>de facto</em> leader (and sunglasses model) take down the United States in a cyberwar? It seems that the answer is yes. Using a thousand or so hackers, "ranging from elite computer commandos to basic college trained geeks," according to AFP, the country could target specific elements of a country's infrastructure (including smart grids, banks, and communications) and create "beacheads" by compromising systems up to two years before they pulled the trigger. Speaking at <a href="http://www.engadget.com/tag/Defcon/">DEFCON</a> this weekend, Miller mentioned that such an attack could be carried out by anyone, although North Korea has a few advantages, including the fact that its infrastructure is so low tech that even destroying the entire Internet would leave it pretty much unscathed. That said, we're not worried in the least bit: if the diminutive despot brings down the entire Internet, how is he ever going to see <em>Twilight: Eclipse</em>?</div><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/">Charlie Miller and Kim Jong-Il could pwn the Internet with two years, $100 million</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Mon, 02 Aug 2010 11:53:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19577381/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2010/08/02/charlie-miller-and-kim-jong-il-could-pwn-the-internet-with-two-y/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>charlie miller</category><category>CharlieMiller</category><category>cyberwar</category><category>CyberWarfare</category><category>defcon</category><category>DEFCON 2010</category><category>Defcon2010</category><category>defense</category><category>hack</category><category>hackers</category><category>hacking</category><category>Internet</category><category>kim jong il</category><category>KimJongIl</category><category>north korea</category><category>NorthKorea</category><category>wargadget</category><dc:creator><![CDATA[Joseph L. Flatley]]></dc:creator><pubDate>Mon, 02 Aug 2010 11:53:00 EST</pubDate></item><item><title><![CDATA[Charlie Miller to reveal 20 zero day security holes in Mac OS X]]></title><link>http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/</link><guid isPermaLink="true">http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/</guid><comments>http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/#comments</comments><description><![CDATA[<a href="http://www.h-online.com/security/news/item/Mac-OS-X-safer-but-less-secure-957981.html"><img hspace="4" border="1" align="right" vspace="16" alt="" src="http://www.blogcdn.com/www.engadget.com/media/2010/03/os-x-terminal.jpg" /></a>Say, Charles -- it's <a href="http://www.engadget.com/tag/charlie+miller">been awhile</a>! But we're pleased as punch to see that you're back to your old ways, poking around within OS X's mainframe just looking for ways to remotely control the system, snag credit card data and download a few interoffice love letters that are carefully stashed 15 folders down within 'Documents.' The famed <a href="http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/">Apple security expert</a> is planning yet another slam on OS X at <a href="http://www.engadget.com/tag/cansecwest">CanSecWest</a>, where he'll reveal no fewer than 20 zero day security holes within OS X. According to Miller, "OS X has a large attack surface consisting of open source components, closed source third-party components and closed source Apple components; bugs in any of these types of components can lead to remote compromise." He also goes on to reemphasize something he's been screaming for years: "Mac OS X is like living in a farmhouse in the country with no locks, and Windows is living in a house with bars on the windows in the bad part of town." In other words, Apple users are "safer" (due to the lack of work that goes into hacking them), "but <a href="http://www.engadget.com/2007/04/22/safari-browser-exploit-produced-within-9-hours-in-hacking-compet/">less secure</a>." So, is this a weird way of applying for a security job in Cupertino, or what?<p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/">Charlie Miller to reveal 20 zero day security holes in Mac OS X</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Fri, 19 Mar 2010 09:29:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19406485/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-20-zero-day-security-holes-in-mac-os-x/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>CanSecWest</category><category>charlie miller</category><category>CharlieMiller</category><category>exploit</category><category>flaw</category><category>fuzz</category><category>fuzzing</category><category>hack</category><category>hacker</category><category>hole</category><category>leopard</category><category>mac</category><category>operating system</category><category>OperatingSystem</category><category>os x</category><category>OsX</category><category>security</category><category>security hole</category><category>SecurityHole</category><category>snow leopard</category><category>SnowLeopard</category><category>software</category><category>vulnerabilities</category><category>vulnerability</category><category>zero day</category><category>ZeroDay</category><dc:creator><![CDATA[Darren Murph]]></dc:creator><pubDate>Fri, 19 Mar 2010 09:29:00 EST</pubDate></item><item><title><![CDATA[O2 claims iPhone security patch will hit iTunes on Saturday, Apple stays silent]]></title><link>http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/</link><guid isPermaLink="true">http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/</guid><comments>http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/#comments</comments><description><![CDATA[<div style="text-align: center;"><a href="http://news.bbc.co.uk/2/hi/technology/8177755.stm"><img vspace="4" hspace="4" border="1" src="http://www.blogcdn.com/www.engadget.com/media/2009/07/hacking-into-iphone-sms.png" alt="" /></a></div>
According to UK carrier O2, the SMS-based iPhone security hole that <a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/">Charlie Miller unveiled on Black Hat this week</a> should be patched by this weekend. An O2 spokesperson claimed the update would be pushed through iTunes this Saturday, says <em>BBC</em>. Apple hasn't made a comment yet, and it's not perfectly clear that this will be an update for iPhones worldwide, but hopefully that's the case -- the security flaw certainly isn't geographically limited.<br />
<br />
[Thanks to everyone who sent this in]<br /><p>Filed under: <a href="http://www.engadget.com/category/cellphones/" rel="tag">Cellphones</a>, <a href="http://www.engadget.com/category/handhelds/" rel="tag">Handhelds</a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/">O2 claims iPhone security patch will hit iTunes on Saturday, Apple stays silent</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Fri, 31 Jul 2009 11:05:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://news.bbc.co.uk/2/hi/technology/8177755.stm>Read</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19115543/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/31/o2-claims-iphone-security-patch-will-hit-itunes-on-saturday-app/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>charlie miller</category><category>CharlieMiller</category><category>hack</category><category>iphone</category><category>o2</category><category>security</category><category>security flaw</category><category>security hole</category><category>SecurityFlaw</category><category>SecurityHole</category><category>sms</category><category>sms hack</category><category>SmsHack</category><dc:creator><![CDATA[Paul Miller]]></dc:creator><pubDate>Fri, 31 Jul 2009 11:05:00 EST</pubDate></item><item><title><![CDATA[SMS vulnerability on iPhone to be revealed today, still isn't patched]]></title><link>http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/</link><guid isPermaLink="true">http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/</guid><comments>http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/#comments</comments><description><![CDATA[<div style="text-align: center;"><a href="http://www.forbes.com/2009/07/28/hackers-iphone-apple-technology-security-hackers.html"><img vspace="4" hspace="4" border="1" alt="" src="http://www.blogcdn.com/www.engadget.com/media/2009/07/hacking-into-iphone-sms.png" /></a></div>
Remember that <a href="http://www.engadgetmobile.com/2009/07/02/apple-patching-nasty-iphone-sms-vulnerability/">alleged SMS-based security hole</a> on the iPhone allowing evil-doers to execute arbitrary code and do all sorts of nasty crap like create an army of mobile zombies ready and willing to execute a DoS attack? The guy who found it, security expert Charlie Miller, said that he'd reveal the details of it at Black Hat -- and Black Hat's this week. Sure enough, Miller and his cohorts plan to unleash details of the hack today, and while they claim they informed Apple of the problem over a month ago, Cupertino's yet to make a move. We'd stop short of suggesting iPhone owners all turn off their handsets and take themselves firmly off the grid and into a completely disconnected underground bunker the moment the attack becomes public, but if it's as serious as Miller claims, it definitely bumps up the pressure on Apple to get a fix out on the double -- preferably before <a href="http://www.engadgetmobile.com/tag/iphoneos3.1">3.1</a> drops.<p>Filed under: <a href="http://www.engadget.com/category/cellphones/" rel="tag">Cellphones</a>, <a href="http://www.engadget.com/category/handhelds/" rel="tag">Handhelds</a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/">SMS vulnerability on iPhone to be revealed today, still isn't patched</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Thu, 30 Jul 2009 03:29:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://www.forbes.com/2009/07/28/hackers-iphone-apple-technology-security-hackers.html>Read</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19113799/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-today-still-isnt-pa/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>black hat</category><category>BlackHat</category><category>charlie miller</category><category>CharlieMiller</category><category>iphone</category><category>security</category><category>security hole</category><category>SecurityHole</category><category>sms</category><category>text</category><category>text messaging</category><category>TextMessaging</category><category>vulnerability</category><dc:creator><![CDATA[Chris Ziegler]]></dc:creator><pubDate>Thu, 30 Jul 2009 03:29:00 EST</pubDate></item><item><title><![CDATA[SMS vulnerability on iPhone to be revealed today, still isn't patched]]></title><link>http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/</link><guid isPermaLink="true">http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/</guid><comments>http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/#comments</comments><description><![CDATA[<div style="text-align: center;"><a href="http://www.forbes.com/2009/07/28/hackers-iphone-apple-technology-security-hackers.html"><img vspace="4" hspace="4" border="1" alt="" src="http://www.blogcdn.com/www.engadget.com/media/2009/07/hacking-into-iphone-sms.png" /></a></div>
Remember that <a href="http://www.engadget.com/2009/07/02/apple-patching-nasty-iphone-sms-vulnerability/">alleged SMS-based security hole</a> on the iPhone allowing evil-doers to execute arbitrary code and do all sorts of nasty crap like create an army of mobile zombies ready and willing to execute a DoS attack? The guy who found it, security expert Charlie Miller, said that he'd reveal the details of it at Black Hat -- and Black Hat's this week. Sure enough, Miller and his cohorts plan to unleash details of the hack today, and while they claim they informed Apple of the problem over a month ago, Cupertino's yet to make a move. We'd stop short of suggesting iPhone owners all turn off their handsets and take themselves firmly off the grid and into a completely disconnected underground bunker the moment the attack becomes public, but if it's as serious as Miller claims, it definitely bumps up the pressure on Apple to get a fix out on the double -- preferably before <a href="http://www.engadget.com/tag/iphoneos3.1">3.1</a> drops.<p>Filed under: <a href="http://www.engadget.com/category/software/" rel="tag">Software</a>, <a href="http://www.engadget.com/category/apple/" rel="tag">Apple</a>, <a href="http://www.engadget.com/category/os-x/" rel="tag">iPhone OS</a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/">SMS vulnerability on iPhone to be revealed today, still isn't patched</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Thu, 30 Jul 2009 03:29:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://www.forbes.com/2009/07/28/hackers-iphone-apple-technology-security-hackers.html>Read</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/19113796/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2009/07/30/sms-vulnerability-on-iphone-to-be-revealed-tomorrow-still-isnt/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>black hat</category><category>BlackHat</category><category>charlie miller</category><category>CharlieMiller</category><category>iphone</category><category>iphone os</category><category>iphoneos</category><category>mobile</category><category>security</category><category>security hole</category><category>SecurityHole</category><category>sms</category><category>text</category><category>text messaging</category><category>TextMessaging</category><category>vulnerability</category><dc:creator><![CDATA[Chris Ziegler]]></dc:creator><pubDate>Thu, 30 Jul 2009 03:29:00 EST</pubDate></item><item><title><![CDATA[PWN 2 OWN over: MacBook Air gets seized in 2 minutes flat]]></title><link>http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/</link><guid isPermaLink="true">http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/</guid><comments>http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/#comments</comments><description><![CDATA[<div align="center"><a href="http://news.yahoo.com/s/infoworld/20080327/tc_infoworld/96676"><img vspace="4" hspace="4" border="0" src="http://www.blogcdn.com/www.engadget.com/media/2008/03/3-27-08-mba_pwned.jpg" alt="" /></a><br /></div>
And just think -- last year you were singing Dino Dai Zovi's praises for taking control of a MacBook Pro in <a href="http://www.engadget.com/2007/04/22/safari-browser-exploit-produced-within-9-hours-in-hacking-compet/">nine whole hours</a>. This year, the <a href="http://www.engadget.com/2008/03/27/pwn-2-own-contest-lets-hackers-choose-vista-os-x-or-linux/">PWN 2 OWN hacking competition</a> at CanSecWest was over nearly as quickly as the second day started, as famed iPhone hacker Charlie Miller showed the MacBook Air on display who its father really was. Apparently Mr. Miller visited a website which contained his exploit code (presumably via a crossover cable connected to a <a href="http://dvlabs.tippingpoint.com/blog/2008/03/27/day-two-of-cansecwest-pwn-to-own---we-have-our-first-official-winner-with-picture">nearby MacBook</a>), which then "allowed him to seize control of the computer, as about 20 onlookers [read: unashamed nerds] cheered him on." Of note, contestants could only use software that came pre-loaded on the OS, so obviously it was <a href="http://www.engadget.com/2007/07/23/safari-exploit-gives-hackers-full-control-of-your-iphone/">Safari</a> that fell victim here. Nevertheless, he was forced to sign a nondisclosure agreement that'll keep him quiet until "TippingPoint can notify the vendor," but at least he'll have $10,000 and a new laptop to cuddle with during his silent spell.<p>Filed under: <a href="http://www.engadget.com/category/laptops/" rel="tag">Laptops</a></p><p style="padding:5px;background:#ddd;border:1px solid #ccc;clear:both;"><a href="http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/">PWN 2 OWN over: MacBook Air gets seized in 2 minutes flat</a> originally appeared on <a href="http://www.engadget.com">Engadget</a> on Thu, 27 Mar 2008 17:57:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.</p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://news.yahoo.com/s/infoworld/20080327/tc_infoworld/96676>Read</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/forward/1151047/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://www.engadget.com/2008/03/27/pwn-2-own-over-macbook-air-gets-seized-in-2-minutes-flat/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>apple</category><category>CanSecWest</category><category>charlie miller</category><category>CharlieMiller</category><category>Dino Dai Zovi</category><category>DinoDaiZovi</category><category>exploit</category><category>hack</category><category>hacker</category><category>linux</category><category>macbook air</category><category>MacbookAir</category><category>operating system</category><category>os</category><category>os x</category><category>OsX</category><category>PWN 2 OWN</category><category>Pwn2Own</category><category>safari</category><category>safari exploit</category><category>SafariExploit</category><category>vista</category><category>windows</category><category>winner</category><dc:creator><![CDATA[Darren Murph]]></dc:creator><pubDate>Thu, 27 Mar 2008 17:57:00 EST</pubDate></item></channel></rss>
