Showing posts with label iPhone. Show all posts
Showing posts with label iPhone. Show all posts

Wednesday, October 2, 2013

iOS 7.0, 7.0.1, 7.0.2 Security and Bug Fixes | iPhone 5c 5s improvements |

With the release of iOS 7 last month we have seen the best that Apple has to offer thus far. For some though, the many improvements to the popular iOS may be overshadowed by continuing bugs and security flaws, across the entire range of Apple's iOS compatible products. The iPhone 5S is having its newest feature, a fingerprint scanner, extremely criticized as being easily hackable. Apple does not completely agree with these claims but does agree that it is possible. The Touch ID scanner is reportedly able to be hacked with the installation of an exploiting application.
In only a few weeks after the release of iOS 7.0 two more versions have followed -- iOS 7.0.1 and 7.0.2. The 7.0.1 update was strictly meant for the iPhone 5C and iPhone 5S, which contained various bug fixes and improvements as usual. iOS 7.0.2, released September 26th, contained major security fixes for the iPhone 4 and later devices. On these devices it was possible for a person with physical access to the device to be able to make calls to any number.

Description: A NULL dereference existed in the lock screen which would cause it to restart if the emergency call button was tapped repeatedly. While the lock screen was restarting, the call dialer could not get the lock screen state and assumed the device was unlocked, and so allowed non-emergency numbers to be dialed. This issue was addressed by avoiding the NULL dereference. -- Apple

Additionally someone with physical access to a device may also be able to see recently used applications, as well as see, edit, and share a users photos.
Description: The list of apps you opened could be accessed during some transitions while the device was locked, and the Camera app could be opened while the device was locked. -- Apple

These seem to be some rather serious flaws for a flagship operating system release although not uncommon for any OS release of this magnitude.  Apple reportedly sold over nine million new iPhone 5S and iPhone 5C models in three days following the launch on September 20th. Additionally more than 200 million iOS devices are now running iOS 7, making it the fastest upgrade in history.

Tuesday, October 1, 2013

iPhone 5S Insecure Fingerprint Scanner | Hacking iPhone5S touchID | touchID as UserName not Password

Last month Apple unveiled and released yet another iPhone, complete with a fingerprint scanner for password access and a new classy clean look and feel. Some are suggesting that using a fingerprint as the password is a terrible idea, if anything a fingerprint may be used as a username or ID. Skeptics claim that we put our fingerprints everywhere, including all over the fingerprint protected iPhone 5S.

Also last month the Chaos Computer Club demonstrated in the video below just how insecure the Apple TouchID is.

If the absolute insecurity of biometric locks on your iPhone is not enough to discourage or prevent you from using this type of technology, you should be concerned about PRIVACY. Tim Richardson of Apple's North American Marketing team admitted that Apple will be sharing this data collected from their users with the NSA and possibly other security agencies.
 “Frankly, if a person is foolish enough to allow something as specific and criminally implicit as their fingerprints to be cataloged by faceless corporations and Government officials… Well, you can’t exactly blame us for capitalizing upon it, can you? Personally, I believe this effort will support a greater good. Some of the folks they’re hoping to apprehend are quite dangerous. Besides, it’s not like this is covered in the Constitution.”                     - Mr. Richardson
 The horrible truth of the entire thing is that users, Apple users, are readily volunteering this information under specific terms which grant  Apple permission to share personal data like fingerprints with government security agencies. These government agencies claim this type of technology could greatly help in apprehending criminals who have alluded the government for some time, by the creation of a special database, able to be merged with Apple's biometric database.
Related Posts Plugin for WordPress, Blogger...