Given the hype surrounding Apple's iPhone, we're actually surprised that we haven't seen more holes to plug over the years. In fact, the last major iPhone exploit to take the world by storm happened right around this time two years ago, and now -- thanks to OS X security expert Charlie Miller -- we're seeing yet another come to light. Over at the SyScan conference in Singapore, Mr. Miller disclosed a hole that would let attackers "run software code on the phone that is sent by SMS over a mobile operator's network in order to monitor the location of the phone using GPS, turn on the phone's microphone to eavesdrop on conversations, or make the phone join a distributed denial of service attack or a botnet." Charlie's planning to detail the vulnerability in full at the upcoming Black Hat conference, but Apple's hoping to have it all patched up by the end of this month.

[Via HotHardware]

Okay, so if you thought the CATSeye matchbox-sized tracking device was a bit too big or cumbersome, the gang is back with something decidedly smaller and more discrete. Introducing the CATS.i, also known as CATSeye Mk2. It's got all the same functionality as its predecessor -- GPS, GSM/GPRS, RF, internet / SMS controls, etc. -- but is now only eight millimeters thick (or twelve if you chose the thinner "folded over" arrangement) and completely waterproof. Power options include a Li-ion battery, solar power, or any number of other ways you can think to run juice. Have an urge to keep track of all your family members and loved ones even more secretly than before? The new devices ship next month.

[Via NaviGadget]

So Boost Mobile's $50 per month free for all hasn't gone exactly as planned, with a surge in the carrier's customer base exacerbating excessive text message delays that have been known to plague Boost and Nextel in the past. The house of "Where You At" has acknowledged the issue, with spokesperson John Votava telling the Wall Street Journal there'll be a fix in place specifically by May 7th. He said the number of new customers that have signed up has overwhelmed the company, and with SMS a still growing trend, that iDEN network's gonna have to either get in better shape or wait for enough frustrated customers to leave and reach a more stable equilibrium.

The knee-jerk reaction to Verizon chief Ivan Seidenberg's recent inflammatory interview -- saying he doesn't know "what Sprint thinks it is" in response to Boost's blowout $50 all-you-can-eat calling and texting plan -- was to call him out for slamming competition (because, let's be real, no one likes executives hating on affordable stuff). His belief was that Sprint simply didn't have the network capacity to support a plan priced that aggressively because it'd bring too many new subscribers on board, and drama over on the iDEN airwaves suggests he may not have been too far off the mark. Boost resellers and customers alike are apparently experiencing insane text messaging delays -- sometimes several hours' worth between sending and receiving -- that are rendering the service useless, and while voice and push-to-talk are still said to be performing flawlessly, a strong swing toward messaging in the past 18 months across all US carriers (along with the upcoming launch of the Clutch) puts the spotlight squarely on the problem.

Texting has never been iDEN's strong suit; it's simply not what the network was originally built to do, and when we approached Boost about this at CTIA earlier this year, we were told that the situation was under control. A company spokesperson says that they're working around the clock to get the delays resolved and expect to have it smoothed out by next week -- but with the $50 plan continuing to win conquest subscribers hand over fist and a network that's being stressed in ways it's never been stressed before, we have to wonder: is this every going to be fully resolved? Even more importantly, though, with Boost's pricing undercutting its national-level competition by a country mile, do they even have to fully resolve it to keep customers on board?

[Via mocoNews]

We'll go ahead and warn you that a lot has changed since 2007, but if anything, the surge in Twitter users and the overwhelming growth in social networking would likely strengthen these findings. The Pew Internet and American Life Project has just revealed some rather interesting stats from its study of age groups and their connection to mobile technology, particularly when looking at the "Ambivalent Networkers" group. Said clump is comprised mostly of males in their late 20s, which are stereotypically connected to their handsets at all times with a smile to go with it. According to the research, however, the majority of this group agreed that "taking a break is definitely a good idea," which was around ten percentage points above the average in the other four groups. We know you're about to tweet this to your 27 year old brother-in-law, but think twice before you knowingly hurt his soul like that.

[Via ArsTechnica]

Apple's done a decent job of implementing features that we've all been clamoring for into its forthcoming OS 3.0, and aside from copy and paste, there's probably no one single feature add bigger than this. You heard right -- multimedia messaging (MMS) is at long last coming to the iPhone 3G (sorry, first-gen iPhone owners) after years of dealing strictly with SMS. During the keynote, Apple was pretty remarkably short with details, simply noting that MMS "support" would be added. Frankly, we don't expect anything mind-blowing; it'll probably look a lot like the current SMS setup, and it'll definitely make AT&T happy when you start firing away picture messages without first subscribing to an unlimited messaging plan.

Update: Apple's official PR on the subject has given us just a bit more to chew on. We're told that MMS will enable iPhone 3G users to "send and receive photos, contacts, audio files and locations with the Messages app," hinting that Apple may just smash MMS and SMS together into a single 'Messages' app in OS 3.0. Also of note, owners will also be able to "forward and delete multiple messages."

It's pretty clear by watching the demonstration video (which is lurking in the read link, just so you know) that this stuff is still pretty preliminary, but we could definitely see it going places with the right people behind it. The Interface Database Concept was dreamed up by Alan Sien Wei Hshieh, and by utilizing a relatively simple set of Javascripts, he was able to overcome traditional platform incompatibilities that can so often hamstring medical hardware / software in day-to-day usage. The creation aims to enable "seamless and intuitive data transfer" and to "define a set of gesture and multitouch commands that will override controls and input devices that may be difficult to use on medical devices." The aforementioned vid shows off gesture-based transfers and even an accelerometer-based cross-platform transfer, both of which make you forget that we're just talking about X-rays and blood tests.

[Thanks, Kara]

Here's an odd one for you. Tobias Engel of the Chaos Communication Congress has discovered a rather nasty exploit that'll cause any Nokia S60 devices running versions 2.6, 2.8, 3.0 or 3.1 to stop receiving SMS and MMS messages. The "Curse of Silence," which has been independently verified by F-Secure, is triggered by sending an SMS that begins with an email address that's at least 32 characters long. The attacker must also change the protocol identifier to internet electronic mail before sending. Devices with versions 2.8 and 3.1 lock up after 11 such messages and still have some limited receiving capabilities, while 2.6 and 3.0 devices will go completely mum after just one attack. In both cases a factory reset is required to fix it, and he says there is no other known workaround for the user. We don't imagine this being a pervasive issue, but if you've got any tech-savvy enemies or malevolent pranksters in your life, you've been warned. Video demonstration is after the break, or hit up the read link to see if your device is among those listed at risk.

[Via Hack a Day]

Read - Vulnerability Advisory
Read - F-Secure Verification

C'mon folks, does it really take an in-depth research study to figure this one out? On the whole, per-use SMS rates have doubled from $0.10 to $0.20 in the span of three years, and carriers have shown no shame in pushing messaging packs (the "unlimited" one in particular) in an effort to snag more revenue per user. We already knew that Senator Herb Kohl was looking into the matter, and a new piece in The New York Times clearly explains just how lucrative these bite-sized messages are for carriers. We're told that most consumers simply assume that it's costing operators more each year as the volume of texts sent increases; according to University of Waterloo professor Srinivasan Keshav, "it doesn't cost the carrier much more to transmit a hundred million messages than a million." You see, SMS messages are elusively hidden within the so-called "control channel," which is space already reserved for the operation of the wireless network. So long as messages are kept concise (say, 160 characters or less), they can be sent without any real implication on the channel. Will this epiphany somehow change the way we're being gouged? Tough to say, but don't think for a second that carriers won't figure out another way to nickle-and-dime you if the hand is forced.

[Thanks, Jeevan]

Face it, kids. You missed the best time to be a teenager by around five or so years. As it stands now, technology is cutting into that adolescent fun, with device like Ford's MyKey and this one here ensuring that you're actually safe behind the wheel. In all seriousness, the terribly named Key2SafeDriving is a fine concept (at least in the parent's eye), as it fuses a cellphone jammer (of sorts) into a key fob in order to put the kibosh on freeway conversations. Essentially, the signal blocking kicks into action anytime the "key" portion is flicked out, connecting to a handset via Bluetooth or RFID and forcing it into "driving mode." No actual jamming, per se, is going on; it's more like a manual override of the ringer. Anyone who phones / texts you while you're safely driving will receive an automated response informing them of such, though we are told that handsfree devices can be utilized. Researchers at the University of Utah are hoping to see it on the market within six months via a private company "at a cost of less than $50 per key plus a yet-undetermined monthly service fee."

[Via Gadgets-Weblog]

We've seen some pretty sophisticated laptop security measures out here in the volatile civilian world, but Lenovo's taking things all top secret with its new Constant Secure Remote Disable feature. Slated to hit select ThinkPads in Q1 2009, the Phoenix Technologies, um, technology enables specially equipped notebooks to become utterly worthless if stolen -- so long as the owner remembers to text in the emergency code, that is. You see, with the Remote Disable function, proper owners can send an SMS to their missing WWAN-enabled machine in order to make it inoperable; the lappie then sends a message back to confirm that it's currently irritating the daylights out of a wannabe data thief. 'Course, said thief can track you down and implement all manners of torture to get you to reactivate it, but we suppose that's the risk you take with that sort of lifestyle. Full release after the break.

Oh, so you know what's hot, huh AT&T? Is flipping the on / off lever back and forth a gazillion times on this finicky Starbucks iPhone WiFi plan hot? Because it feels downright cold over here. While we can only hope and pray that this is the signal to finally close the book on this ridiculous saga, AT&T users all over the US are receiving text messages from AT&T confirming that free Starbucks WiFi (for iPhone owners) is on. Reportedly, the message indicates that their iPhone purchase gives them access to two hours of gratis use per day, though we'd go in with the lowest possible expectations in order to not be let down (again). Good luck, mettlesome ones.

[Thanks, Boy Genius]