iPhone security posting suggests 2.2 firmware tomorrow

***AppleInsider*** · 11-20-2008, 06:24 PM

Germans documenting an exploit that forces an iPhone to dial an unwanted number have also potentially tipped users off to the imminent release of Apple's widely anticipated 2.2 firmware upgrade.

The Fraunhofer Institute for Secure Information's official release describes an attack which, after fooling users into visiting a maliciously crafted website, automatically kicks the phone into its dialer and composes a number without a chance to interrupt.

The trick theoretically allows the site owner to set up a 900 number or other calling destination that costs money or otherwise causes a problem.

Fraunhofer's Collin Mulliner notes that the exploit only requires three lines of code and is simple enough that anyone with "basic HTML knowledge" could add the formatting to a page and trigger the compromise.

While dangerous, the exploit was demonstrated to Apple a month ago with an understanding that it would be fixed soon.

The security experts, however, have also revealed that the necessary patch will surface in upcoming firmware from Apple -- code which Fraunhofer claims is due on November 21st.

Although the chance exists that the update in question is a minor maintenance update, the announcement comes just as Apple is generally believed to be wrapping up development of its major iPhone 2.2 upgrade, prompting speculation that the security fix is being rolled into the larger revision and is on the verge of being released.

After converting version 2.1 into a primarily bug-focused update, the electronics giant is known to be using 2.2 as a vehicle for several important feature requests. Among these will be a complete Google Maps refresh with Street View and non-driving directions, the ability to download podcasts over the air, an altered Safari and App Store client, and emoji icons for Japanese cellphone owners that often depend on them for text messaging.

[ View this article at AppleInsider.com ]

ipodrulz · 11-20-2008, 06:55 PM

That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?

mrsteveman1 · 11-20-2008, 07:06 PM

Quote:

Originally Posted by ipodrulz

That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?

hmmmm

I THINK IT STINKS

Feel better? That should tide you over for a while

DanaCameron · 11-20-2008, 07:58 PM

Quote:

Originally Posted by ipodrulz

That's nice Apple, but how Dvorak keyboard support!?

I use the Dvorak keyboard layout on full-sized keyboards, and much prefer it over QWERTY. But do you really think it would bring the same benefits to the virtual keyboard of the iPhone?

mariofreak85 · 11-20-2008, 08:22 PM

Quote:

Originally Posted by DanaCameron

I use the Dvorak keyboard layout on full-sized keyboards, and much prefer it over QWERTY. But do you really think it would bring the same benefits to the virtual keyboard of the iPhone?

It probably wouldn't bring the same benefits, but at least their keyboards would be consistent across devices.

My Garmin GPS has a keyboard that is laid out in alphabetical order. It drives me batty.

eAi · 11-20-2008, 08:35 PM

I'm still waiting for TomTom for my iPhone. Once I've got that I can get rid of my damn HP iPaq Windows Mobile PDA... Apple really should allow it, they'd make a load of money from it, based on the amount TomTom generally charge for their software...

Beyond that, I'd like Safari not to crash so much. Fed up with filling in web forms and it crashing just as I'm about to submit it. I'd like it to perform a bit better too, needs more snappy. Sometimes it can really get slow (then crash generally)...

8CoreWhore · 11-20-2008, 09:33 PM

I'm in no rush - I still have to wait for the pwnage tool to update...

Ireland · 11-20-2008, 09:52 PM

With copy & paste?!!!

sandau · 11-20-2008, 10:51 PM

WHAT? no QR or 3D barcode support? emoji only? ah, how can one live in japan with this crippled phone?

Akac · 11-20-2008, 11:10 PM

Quote:

Originally Posted by ipodrulz

That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?

You're not going to see Apple come up with Google sync on the iPhone. Just won't happen. And no need to because it will happen other ways. Actual PUSH email exists on the iPhone using IMAP IDLE. Works great. Same with Mobile Me.

Push notifications - lets give them a pass on this. Obviously they saw with Mobileme their failure and instead of pushing it out the door unready, they are getting it ready.

Rolf Schewe · 11-21-2008, 01:47 AM

New iTunes and iPhone updates. Right on the money.

rob05au · 11-21-2008, 02:26 AM

Iphone 2.2 firmware is available in itunes 8.0.2

Downloading it now

ksec · 11-21-2008, 03:27 AM

Quote:

Originally Posted by rob05au

Iphone 2.2 firmware is available in itunes 8.0.2

Downloading it now

It says i cant collect to server.... is the server being hammered ?

LowEnder · 11-21-2008, 03:46 AM

YES! it IS here!
keep trying....
http://www.apple.com/iphone/softwareupdate/
have fun!

AllanF · 11-21-2008, 04:41 AM

Quote:

Originally Posted by mariofreak85

It probably wouldn't bring the same benefits, but at least their keyboards would be consistent across devices.

My Garmin GPS has a keyboard that is laid out in alphabetical order. It drives me batty.

FYI, at least with Garmin nüvi you can change to a QUERTY keyboard layout - just go to Tools or Settings on the main menu screen.

Al

ksec · 11-21-2008, 04:46 AM

You can download the update and install it maually by holding shift when you click on check for update.
Then you select the file you just downloaded.

So far so good. Saferi seems faster and better. My Iphone feels fresh again.

11-20-2008, 06:24 PM	#1
*AppleInsider* Kasper's Automated Slave Join Date: Nov 1997 Posts: 6,151	iPhone security posting suggests 2.2 firmware tomorrow Germans documenting an exploit that forces an iPhone to dial an unwanted number have also potentially tipped users off to the imminent release of Apple's widely anticipated 2.2 firmware upgrade. The Fraunhofer Institute for Secure Information's official release describes an attack which, after fooling users into visiting a maliciously crafted website, automatically kicks the phone into its dialer and composes a number without a chance to interrupt. The trick theoretically allows the site owner to set up a 900 number or other calling destination that costs money or otherwise causes a problem. Fraunhofer's Collin Mulliner notes that the exploit only requires three lines of code and is simple enough that anyone with "basic HTML knowledge" could add the formatting to a page and trigger the compromise. While dangerous, the exploit was demonstrated to Apple a month ago with an understanding that it would be fixed soon. The security experts, however, have also revealed that the necessary patch will surface in upcoming firmware from Apple -- code which Fraunhofer claims is due on November 21st. Although the chance exists that the update in question is a minor maintenance update, the announcement comes just as Apple is generally believed to be wrapping up development of its major iPhone 2.2 upgrade, prompting speculation that the security fix is being rolled into the larger revision and is on the verge of being released. After converting version 2.1 into a primarily bug-focused update, the electronics giant is known to be using 2.2 as a vehicle for several important feature requests. Among these will be a complete Google Maps refresh with Street View and non-driving directions, the ability to download podcasts over the air, an altered Safari and App Store client, and emoji icons for Japanese cellphone owners that often depend on them for text messaging. [ View this article at AppleInsider.com ]

11-20-2008, 06:55 PM	#2
ipodrulz Registered User Join Date: Jul 2008 Posts: 33	That's nice apple.... That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?

11-20-2008, 09:52 PM	#8
Ireland Registered User Join Date: Feb 2006 Location: Ireland Posts: 8,557	With copy & paste?!!! Collecting my SSD iMac Fry-die. :D

11-20-2008, 10:51 PM	#9
sandau Registered User Join Date: Mar 2005 Posts: 1,009	WHAT? no QR or 3D barcode support? emoji only? ah, how can one live in japan with this crippled phone? :-D * * * * * * * * * * * * * * * *

11-21-2008, 01:47 AM	#11
Rolf Schewe Registered User Join Date: Nov 2008 Location: Staten Island, NY Posts: 1	Well you were right. New iTunes and iPhone updates. Right on the money.

11-20-2008, 08:35 PM	#6
eAi Registered User Join Date: Mar 2005 Posts: 366	I'm still waiting for TomTom for my iPhone. Once I've got that I can get rid of my damn HP iPaq Windows Mobile PDA... Apple really should allow it, they'd make a load of money from it, based on the amount TomTom generally charge for their software... Beyond that, I'd like Safari not to crash so much. Fed up with filling in web forms and it crashing just as I'm about to submit it. I'd like it to perform a bit better too, needs more snappy. Sometimes it can really get slow (then crash generally)...

11-20-2008, 09:33 PM	#7
8CoreWhore Registered User Join Date: Jan 2008 Posts: 457	I'm in no rush - I still have to wait for the pwnage tool to update...

11-21-2008, 02:26 AM	#12
rob05au Registered User Join Date: May 2005 Location: Australia Posts: 348	Iphone 2.2 firmware is available in itunes 8.0.2 Downloading it now

11-21-2008, 03:46 AM	#14
LowEnder Registered User Join Date: Jul 2008 Posts: 4	YES! it IS here! keep trying.... http://www.apple.com/iphone/softwareupdate/ have fun!

11-21-2008, 04:46 AM	#16
ksec Registered User Join Date: Dec 2006 Posts: 328	You can download the update and install it maually by holding shift when you click on check for update. Then you select the file you just downloaded. So far so good. Saferi seems faster and better. My Iphone feels fresh again.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode