iPhone hacked in Pwn2Own contest02: 30 25/03/2010, Mike Schramm, block, attack, blog, code, database, hack, hacked, hacking, Halvar phlipp-Flake, iPho

iPhone hacked in Pwn2Own contest02: 30 25/03/2010, Mike Schramm, block, attack, blog, code, database, hack, hacked, hacking, Halvar phlipp-Flake, iPhone, Pwn2Own, Ralf - Weinmann, sms, Vincenzo - Iozzo The Unofficial Apple Blog (TUAW)
Filed under: Security


An iPhone is hacked in just 20 seconds into the hacking contest this week in Pwn2Own CanSecWest 2010, ZDNet's Ryan Naraine reports. Hackers Vincenzo Iozzo, Ralf Philipp Weinmann to an exploit that allowed stations to send text messages to an iPhone friendly website online, then copy the database of all SMS on the iPhone (including deletion) to own server. The browser crashed during the raid, but the hackers are saying that with a little tweaking, it is still possible to capture information without the user ever knowing that the attack had occurred. Halvar Flake also helped with the hack, and said that while Apple has some protection in place to execute malicious code on the iPhone, but not enough: "The way that the implementation of code signing is too lenient . You can find more technical information in hack on his blog.

The hackers do not share exactly how he committed the act - as specified in the contest rules, knowledge of the hack is becoming property of the sponsor of the contest, the change of Ground Zero Day Initiative, which will send a report to Apple and only details of the version once the hole has been fixed. Safari and Internet Explorer 8 has the property both in the same conference, though details about those hacks are - Tipping Point is offering up to $ 100,000 in prizes for achievements in various programs, and it seems that the prize money has been well deserved.
TUAWiPhone hacked in contest Pwn2Own originally published at The Unofficial Apple Weblog (TUAW) on Wed, 24 Mar 2010 20:30:00 EST. Please see our terms of use of feed.


Read | Permalink | Email this | Comments