• On MovieTome: New TERMINATOR 4 images are online!
November 21, 2008 12:27 PM PST

Apple iPhone update makes device more secure

Posted by Elinor Mills
  • Font size
  • Print

In addition to adding features like Street View on Google Maps and performance improvements that could reduce the number of dropped calls, the latest software update for the iPhone released on Friday also plugs holes that could expose data on locked phones.

The update plugs a hole that lets someone with physical access to a passcode-locked device to launch applications without knowing the passcode. The hole was discovered in August.

Also fixed is a weakness that displays incoming SMS messages if the device is set to emergency call mode. This problem was discovered last month by a privacy conscious 12-year-old boy who uses his iPhone mostly to text with his girlfriend, according to his father.

Another fix prevents someone from making arbitrary phone calls by using the emergency call setting. Before the update, a person who got ahold of someone else's iPhone could make long-distance calls that are then charged to the device's owner. The update restricts the emergency calls to a limited set of numbers.

The update also fixes vulnerabilities that could lead to malicious code attacks from viewing malicious Web sites, Excel files, or TIFF images. It also fixes holes that could lower the encryption settings for point-to-point tunneling protocol-based VPN (virtual private network) connections and initiate phone calls when visiting a malicious Web site.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
Recent posts from Security
Study: Data breaches rose in 2008
Fake celeb LinkedIn profiles lead to malware
Hackers hit MacRumors keynote coverage
Alarm systems at risk: UL establishes a higher security requirement for magnetic switches
Twitter phishing scam may be spreading
'Curse of silence' smartphone flaw disclosed
Defense contractors eye cybersecurity bonanza
Web browser flaw could put e-commerce security at risk
Add a Comment (Log in or register) 12 comments
by Mr. Dee November 21, 2008 1:37 PM PST
Hmm, 12 years old, has an iPhone and a girlfriend. Not even I was that slick back in my day. I am calling spoiled brat on that one. If I were the parent it would be a Motorola C350 and go do your home work.
Reply to this comment
by BradIdigo November 21, 2008 4:50 PM PST
Mr. Dee, this will really bug you. My 6 year old has an iPhone touch, knows more tricks on it than I know on my iPhone. Not only that he can set up a network (wired and wireless) and has been able to use a PC since he was three. Kids can do amazing things with technology, for example last year my son started typing out short stories because at his age it was hard for him to hand write a story. Should I have squashed his creativity because I did not want him to be seen as spoiled to people like you? Really look at yourself and ask why are you criticizing a kid who found a bug that you and I would have never noticed?
by M C November 21, 2008 5:02 PM PST
"I am calling spoiled brat on that one."

I am calling Dad-making-it-up on that one. He should have gone younger for more sympathy.

As for the 6-year-old who's writing short stories before getting into 2nd grade, congrats on that.
by Mr. Dee November 21, 2008 6:24 PM PST
@ Bradldigo:
That's cool to hear your son doing all those cool things which good for a kid. But that other kid at 12 with a girlfriend, I call that growing up too fast. No problem with the iPhone, especially if he knows how to appreciate it.
by thefilebunch November 22, 2008 8:51 AM PST
Bradldigo--please don't let technology get in the way of good writing skills. The youth of today has terrible penmanship.
by Dalkorian November 24, 2008 12:05 PM PST
I thought I was gullible, but to read the reactions to Bradldigo's comment makes me question it. A 6 year old with an "iPhone touch", which is apparently somehow different than dad's "iPhone"? A 3 year old setting up a network? Smart kid, smart enough to be writing short stories at age 5. He's just starting kindergarden about then, right? Does anyone else smell bull patties?
by orange636 November 21, 2008 4:05 PM PST
Cool kid. I dunno but probably has his act together and deserves the little joys in life such as the iPhone. I really can't say.

But I can say, this is a great update. OK i will take increased security. And i'll take google street view. But most of all, i will take the increased responsiveness of the OS. Way to go apple! I don't say that too often.
Reply to this comment
by cerebral_but_dull November 21, 2008 4:08 PM PST
Warning to Mac users: Update iTunes before you try to update your iPhone. Tried the update, phone locked up, said it could not be restored. But after going back and updating iTunes first, all is now well. I can't guarantee that was the problem of course.
Reply to this comment
by ferretboy88 November 22, 2008 2:29 PM PST
I thought that Apple products were secure right out of the box. I hate computers and phones, they are not secure at all. We are all going to be killed when China hacks all of our computers and blows us up.
Reply to this comment
by random truth November 22, 2008 3:37 PM PST
Things can be made more secure but not full proof. Any lock can be picked, any door can be knocked down, any key can be cracked. To call something perfectly secure is naive.
by ferretboy88 November 23, 2008 4:05 PM PST
Many Apple fans think no security is needed on their OS. Every system can be hacked. Of course some are more secure right out of the box.
Reply to this comment
by tommellor November 24, 2008 2:15 PM PST
I got the update for my iPod touch, and all of my music and videos were deleted. This is not the first time, and is starting to become a real pain in the arse. Has anyone else had this problem?
Reply to this comment
advertisement
Click Here

In the news now

Apple: DRM-free tunes, unibody MacBook Pro

roundup At Macworld, Phil Schiller touts 10 million songs sans DRM, plus 69-cent songs, a unibody 17-inch notebook, iLife updates, and more.


Countdown to CES

special coverage The tech community descends on Las Vegas as the Consumer Electronics Show gets ready to kick off in all its gadgety glory.


About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement

Inside CNET News

Scroll Left Scroll Right