iPhone security posting suggests 2.2 firmware tomorrow

Posted:
in iPhone edited January 2014
Germans documenting an exploit that forces an iPhone to dial an unwanted number have also potentially tipped users off to the imminent release of Apple's widely anticipated 2.2 firmware upgrade.



The Fraunhofer Institute for Secure Information's official release describes an attack which, after fooling users into visiting a maliciously crafted website, automatically kicks the phone into its dialer and composes a number without a chance to interrupt.



The trick theoretically allows the site owner to set up a 900 number or other calling destination that costs money or otherwise causes a problem.



Fraunhofer's Collin Mulliner notes that the exploit only requires three lines of code and is simple enough that anyone with "basic HTML knowledge" could add the formatting to a page and trigger the compromise.



While dangerous, the exploit was demonstrated to Apple a month ago with an understanding that it would be fixed soon.



The security experts, however, have also revealed that the necessary patch will surface in upcoming firmware from Apple -- code which Fraunhofer claims is due on November 21st.



Although the chance exists that the update in question is a minor maintenance update, the announcement comes just as Apple is generally believed to be wrapping up development of its major iPhone 2.2 upgrade, prompting speculation that the security fix is being rolled into the larger revision and is on the verge of being released.



After converting version 2.1 into a primarily bug-focused update, the electronics giant is known to be using 2.2 as a vehicle for several important feature requests. Among these will be a complete Google Maps refresh with Street View and non-driving directions, the ability to download podcasts over the air, an altered Safari and App Store client, and emoji icons for Japanese cellphone owners that often depend on them for text messaging.

Comments

  • Reply 1 of 15
    That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?
  • Reply 2 of 15
    Quote:
    Originally Posted by ipodrulz View Post


    That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?



    hmmmm



    I THINK IT STINKS



    Feel better? That should tide you over for a while
  • Reply 3 of 15
    Quote:
    Originally Posted by ipodrulz View Post


    That's nice Apple, but how Dvorak keyboard support!?



    I use the Dvorak keyboard layout on full-sized keyboards, and much prefer it over QWERTY. But do you really think it would bring the same benefits to the virtual keyboard of the iPhone?
  • Reply 4 of 15
    Quote:
    Originally Posted by DanaCameron View Post


    I use the Dvorak keyboard layout on full-sized keyboards, and much prefer it over QWERTY. But do you really think it would bring the same benefits to the virtual keyboard of the iPhone?



    It probably wouldn't bring the same benefits, but at least their keyboards would be consistent across devices.



    My Garmin GPS has a keyboard that is laid out in alphabetical order. It drives me batty.
  • Reply 5 of 15
    eaieai Posts: 417member
    I'm still waiting for TomTom for my iPhone. Once I've got that I can get rid of my damn HP iPaq Windows Mobile PDA... Apple really should allow it, they'd make a load of money from it, based on the amount TomTom generally charge for their software...



    Beyond that, I'd like Safari not to crash so much. Fed up with filling in web forms and it crashing just as I'm about to submit it. I'd like it to perform a bit better too, needs more snappy. Sometimes it can really get slow (then crash generally)...
  • Reply 6 of 15
    I'm in no rush - I still have to wait for the pwnage tool to update...
  • Reply 7 of 15
    irelandireland Posts: 17,585member
    With copy & paste?!!!
  • Reply 8 of 15
    sandausandau Posts: 1,230member
    WHAT? no QR or 3D barcode support? emoji only? ah, how can one live in japan with this crippled phone?
  • Reply 9 of 15
    akacakac Posts: 511member
    Quote:
    Originally Posted by ipodrulz View Post


    That's nice Apple, but how bout Push Notification? Calendar + To Do syncing with Gmail? Actual Push mail? Not 15 minute fetch! Or most importantly Dvorak keyboard support!?



    You're not going to see Apple come up with Google sync on the iPhone. Just won't happen. And no need to because it will happen other ways. Actual PUSH email exists on the iPhone using IMAP IDLE. Works great. Same with Mobile Me.



    Push notifications - lets give them a pass on this. Obviously they saw with Mobileme their failure and instead of pushing it out the door unready, they are getting it ready.
  • Reply 10 of 15
    New iTunes and iPhone updates. Right on the money.
  • Reply 11 of 15
    Iphone 2.2 firmware is available in itunes 8.0.2



    Downloading it now
  • Reply 12 of 15
    ksecksec Posts: 1,559member
    Quote:
    Originally Posted by rob05au View Post


    Iphone 2.2 firmware is available in itunes 8.0.2



    Downloading it now



    It says i cant collect to server.... is the server being hammered ?
  • Reply 13 of 15
    YES! it IS here!

    keep trying....

    http://www.apple.com/iphone/softwareupdate/

    have fun!
  • Reply 14 of 15
    Quote:
    Originally Posted by mariofreak85 View Post


    It probably wouldn't bring the same benefits, but at least their keyboards would be consistent across devices.



    My Garmin GPS has a keyboard that is laid out in alphabetical order. It drives me batty.



    FYI, at least with Garmin nüvi you can change to a QUERTY keyboard layout - just go to Tools or Settings on the main menu screen.



    Al
  • Reply 15 of 15
    ksecksec Posts: 1,559member
    You can download the update and install it maually by holding shift when you click on check for update.

    Then you select the file you just downloaded.



    So far so good. Saferi seems faster and better. My Iphone feels fresh again.
Sign In or Register to comment.