Even if you feel absolutely secure in entering your PIN every time you unlock your iPhone, there may still be some security shortfalls. Per a blog post by Bernd Marienfeldt, Marienfeldt and fellow security wonk Jim Herbeck have discovered that plugging even a fully up-to-date, non-jailbroken iPhone 3GS into a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone’s storage even when it’s locked.
The belief is that they’re just a buffer overflow away from full write access as well, which would surely open the door to making calls. Bernd believes the iPhone’s lack of data encryption for content is a real problem, and also cites the inability to digitally sign e-mails as reasons why the iPhone is still not ready for prime time in the enterprise.
Still, better that these guys found it and put the evidence in front of Apple than another party locate the security hole.
Stay tuned for additional details as they become available.
One reply on “Security researchers locate additional iPhone security hole, publish findings”
“a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone’s storage even when it’s locked.”
Using Ubuntu is so useful…..