Latest in Apple

Image credit:

iPhone vulnerability leaves your data wide open, even when using a PIN

Tim Stevens
05.27.10
Share
Tweet
Share
Save

Sponsored Links

If you feel like going through the process of typing in your PIN every time you unlock your iPhone is worth it thanks to the unconquerable security it implies, you might want to read this report from Bernd Marienfeldt about the chosen one's security model. Yes, a PIN will keep casual users from picking up your phone and making a call with it, or firing off an e-mail to your co-workers saying that you're quitting and becoming an exotic dancer, but it won't keep someone from accessing all your data. Bernd and fellow security guru Jim Herbeck have discovered that plugging even a fully up-to-date, non-jailbroken iPhone 3GS into a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone's storage -- even when it's locked. The belief is that they're just a buffer overflow away from full write access as well, which would surely open the door to making calls. Bernd believes the iPhone's lack of data encryption for content is a real problem, and also cites the inability to digitally sign e-mails as reasons why the iPhone is still not ready for prime time in the enterprise.

[Thanks, Amit]

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share
Save

Popular on Engadget

Engadget's Guide to Privacy

Engadget's Guide to Privacy

View
Volta Football is exactly what 'FIFA 20' needs

Volta Football is exactly what 'FIFA 20' needs

View
Skullcandy's Crusher ANC block noise while you feel the bass

Skullcandy's Crusher ANC block noise while you feel the bass

View
Zero's 2020 electric motorcycles include one that's loaded for adventures

Zero's 2020 electric motorcycles include one that's loaded for adventures

View
‘Call of Duty’ comes to mobile on October 1st

‘Call of Duty’ comes to mobile on October 1st

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr