06 Feb 2010
A security researcher at the Black Hat conference in Washington DC has claimed that major flaws exist in the Apple iPhone.
Nicolas Seriot said that the smartphone contains serious vulnerabilities which could allow attackers and malware developers to craft applications that steal user data, such as recent calls and locations.
"Overall security improves with each new iPhone version, but some basic security principles are still not correctly implemented, in particular the least-privilege principle, the deny-by-default principle and a recognition that it is dangerous for Apple to deny the existence of vulnerabilities," Seriot wrote in a paper entitled iPhone Privacy (PDF).
Seriot argued that Apple should acknowledge the flaws, implement better protection of the iPhone's cache files and develop an outbound firewall to block the transmission of stolen data.
The researcher warned iPhone users to keep a close eye on what they install on the handset, including third-party software from Apple's App Store.
"Consumers should be aware that iPhone security is far from perfect, and that a piece of software downloaded from the App Store may still be harmful," he wrote.
"As a basic precaution, users should regularly clean the browser's recent searches and the keyboard cache in 'Settings'."
Latest stories from Communications
Related videos
Related articles
Related jobs
Poll
What will be the biggest change to corporate technology in the future?
TFL director of Games transport Mark Evers discusses how the public transport network is preparing for this summer's event
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
C#/Java/C++ Algorithmic Developer/Programmer Skill...
We are looking for a talented junior java web developer...
OO Developer/Programmer, Greenfield Trading Software...
C++ Developer - Core Technology - Low latency Real Time...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?