News iPhone patch fixes security holes

http://www.bit-tech.net/news/bits/2010/02/04/iphone-patch-fixes-security-holes/1

All iPhone and iPod Touch users are advised to apply Apple's latest update - 3.1.3 - as soon as possible, as it addresses three remotely-exploitable security flaws.

 

Balls. I've literally just installed cydia on mine :/

 

Snookied!

For the people who claim Apple is unbreakable!

 

what about the iPad?

 

hey, a mac product finally got enough market share to become a target! and now they are found to have vulnerabilities! honestly, who did not see this coming? (don't raise you hands mac fanatics, we already know about you)

 

makes you wonder how many serious vulnerabilities are sitting there in OSX just waiting to eventually be found.
I bet there are more than there are in probably any version of windows.

 

when there's no jailbreak for 3.1.3?

no thanks. it's only a virus, according to Apple, windows users are used to it.

 

As long as their is money to be made, curious minds, or prestige to be gained, no OS will be perfect. I do think that apple should be applauded for fixing the problems, (golf clap). But should be sent up the flag pole for trying to lead un-informed and lazy people into a false sense of security.

 

i love it when I hear stories like this only for the mere fact that my friends keep blasting to my face that their Apple devices are perfect, virus free pieces of s***. lol

 

I'd love it if linux had OSX's market share and had the same 3rd party support, but at the moment buying a mac is a small price to pay to avoid having to use Windows 7. I'll keep Vista for gaming, but that's my last MS OS.

Apple are quite lax at fixing vulnerabilities and it will turn around and bite them on the butt one day, but the UNIX underpinnings of OSX are at the heart of its security - anything that can cause major damage to the system requires a password from the user before it can happen - installing software etc - so the onus is on the user to be careful. Windows users know this as UAC, but XP-tards didn't like the UAC in Vista and went back to the seive they were using previously. Then when MS released Vista again with a new name and the ability to dumb down UAC, everyone was happy...because they could let all sorts of crud onto their system without being nagged about it.

As for the iphone, it is an enormously popular device that shares its OS with the ipod touch - another enormously popular device. It has an app store that is also enormously popular and most importantly an SDK so that code can be written for it - bugs and vulnerabilities are inevitable.

 

there are known exploits in every version of unix that can bypass root authentication. as many have said previously, here and elsewhere, no OS is perfect. an OS is "secure" only as long as it is not a target.

Apple made a name for itself for just this type of "security." as they gain market share and become a target they will find that it is not easy providing true security. ask Microsoft, they know. Microsoft has a more secure system because they have actually patched it when a hole was found. no one has looked for holes in a mac, so none of them have been patched.

Apple will rue the day they get enough market share to attract the attention of the botnets. They will eat their words. whether they do so graciously is yet to be seen.

 

+1

 

wow. the amount of ignorance on display in this thread is astonishing.

 

please be so generous to enlighten us with your enormous knowlegde then?

 

Honestly? It would be wasted and cause a flame war. I'll stick to being content with sounding like a know-it-all elitist.

 

oh no, i insist. i would love to hear what you have to say on the matter. if you make a grand sweeping statement like that you really should back it up.

 

Sigh. No, you know what? You're all right. I apologise, I was wrong. Apple are an evil selfish company who only release patches when it fits their public image agenda. Linux is the best thing since God himself, and Windows and iPhones are for retards.

 

i think you are taking it a little too personally.

windows has a more robust patching system than mac, because they have to. they are the target of just about everyone. mac has been criticized for years by the security sector for their slowness in releasing patches, and they almost never make a press release about it, or find ways to notify users. they are cutting their teeth with the iphone, and could learn a lot from microsoft on the issue. is microsoft's implementation perfect and without criticism? absolutely not, but it is superior to apples, as it has undergone "trial by fire."

linux has pretty good patch response time. . . if you spend the time to figure out what patches you need. that will depend entirely on what flavor and kernel revision you are running. the problem is you either need to spend the time to research it yourself, which can be a pain in the a$$, or hire a third party vendor to do it for you. linux licensing is cheaper than microsoft licensing (it is hard to beet free) but the costs are often made up with higher maintenance cost (primarily in the form of time invested), higher salaries for administrators and increased downtime. these issues are being resolved as it is more widely adopted, however, and it shows as more businesses adopt it for critical parts of their infrastructure.

their are certainly pros and cons to each system, but my vote for best over all patching system goes to microsoft for now. the linux community looks like they really want to start to challenge that title, but they are, as usual, not well coordinated in their efforts. apple seems to be in the middle of an identity crisis there, as starting a large scale and very public patching effort would somewhat contradict the image the have worked to build.

so far the responses from apple to all the attacks on the iphone have been rather unimpressive, and sometimes they seem to have a devil may care attitude towards fixing issues. "if you use it the way we tell you to that wont happen" is not the type of response i care to receive, but that may just be me.