Yet another iPhone flaw has been found. In this case, an attacker could use the flaw to remotely take control of a target iPhone.

It's nothing new, researchers have been hammering away at the iPhone since its release. Given that nobody has figured a way to install and execute anything other than a web app, the immediate chances of exploit appear pretty remote. In fact, it would seem that this would be the ideal time for researchers to be probing the iPhone for flaws, as it allows the company to patch the most glaring holes without any threat of exploitation.

24 Jul 2007

It seems at this point that there have been enough vulnerabilities found in the iPhone that the question will shift from "is it vulnerable?" to "will it be exploited?"

This was the question that we asked Trend Micro's Paul Moriarty when the dialler flaw was disclosed. He pointed out that similar flaws have been found in smartphones, and have yielded little fruit for malware authors.

As Moriarty put it, ""If you want to get a headline, maybe, but you are not going to make a whole lot of money."

And money, these days, is what malware is all about.

So, at this point it seems that you're more vulnerable shopping for your iPhone than you are using it.