Forgot your password?
typodupeerror
Bug

+ - Charlie Miller Circumvents Code Signing In iOS->

Submitted by Sparrowvsrevolution
Sparrowvsrevolution (1926150) writes "At the SysCan conference in Taiwan next week, Miller plans to present a method that exploits a flaw in Apple’s restrictions on code signing on iOS devices, the security measure that allows only Apple-approved commands to run in an iPhone or iPad’s memory. Using his method, an app can phone home to a remote computer that downloads new unapproved commands onto the device and executes them at will, including stealing the user’s photos, reading contacts, making the phone vibrate or play sounds, or otherwise using iOS app functions for malicious ends. Miller created a proof-of-concept app called Instastock that appears to show stock tickers but actually runs commands from his server, and even got it approved by Apple's app store."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Charlie Miller Circumvents Code Signing In iOS

Comments Filter:

Those who can, do; those who can't, simulate.

Working...