Apple Releases iOS 4.3.3, Addressing Location-Tracking Concerns

Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices. The firmware update is Apple’s response to the outcry that erupted last month when a pair o...

Congress to Apple: You Got Some Splainin to do

In a letter to the chairman of the Federal Trade Commission, Jay Inslee D-Wash. expressed concerns regarding recent revelations that Apple products have been continuously tracking and recording user location information with questionable consent and without an easy way to opt out of such tracking...

Apple Admits to Bugs, Denies Tracking iPhone Users

Apple finally sounded off on its phone tracking imbroglio on Wednesday telling iPhone customers that “it’s the location, stupid.” The company claims its tracking feature is designed to collect data on cell towers and wifi hotspots, not users. After more than a week of silence, the notoriously...

Users File Suit Against Apple Over iPhone Tracking

A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing...

Report: iPhones Track Movement Even With Location Services Disabled

The ongoing controversy over a hidden feature in Apple iPhones that tracks and stores the whereabouts of the phone became a bit murkier, after an analysis by the Wall Street Journal found that Apple may not be abiding by its own user privacy agreement by continuing to track its customers’...

Congressman Calls on Apple to Explain iPhone Tracking

Congress stepped into the brewing controversy over a recently disclosed tracking feature in most versions of Apple’s popular iPhone. Representative Ed Markey D-Mass has written a letter to Apple CEO Steve Jobs asking for more information about the feature PDF, suggesting that it may run afoul of...

Secret iPhone Feature Tracks Owners' Whereabouts

Security researchers have discovered a hidden iPhone feature that secretly tracks and saves the meanderings of the phone – and presumably its owner. The tracking feature was described in a presentation at the Where 2.0 Conference in San Francisco on Wednesday. According to the researchers, Pete...

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability (CVE-2011-1344)

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability CVE-2011-1344 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser,...

Tyler Shields on Mobile App Privacy and Security

Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general. Podcast audio courtesy of sykboy65 Subscribe ...

iDefense Security Advisory 03.21.11: Apple OfficeImport Framework Excel Memory Corruption Vulnerability

iDefense Security Advisory 03.21.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 21, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

(Pwn2Own) Apple Safari OfficeArtBlip Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari on the iPhone. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Hackers Exploit BlackBerry Browser Bug !

Research in Motion has found a security flaw and recommended that user disable JavaScript in browsers on certain phones, threatening the BlackBerry maker's iron-clad reputation for security. "The issue could result in remote code execution on affected BlackBerry smartphones," the Waterloo,...

Checkview 1.1 For iPhone / iPod Touch Directory Traversal

Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1.1 Tested on: iPhone, iPod 3GS with 4.2....

checkview v1.1 for iPhone / iPod Touch Directory Traversal

Exploit for windows platform in category remote exploits Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: email protected E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link:...

Times Square screens hacked using iPhone !

Times Square screens hacked using iPhone ! Hacker's Words : "The way it works is pretty simple: plug in my transmitter into the headphone minijack of an iphone 4 and play back any video clip. you can play it through the ipod feature or through the camera roll. the transmitter instantly sends the...

iOS Checkview 1.1 - Directory Traversal

iOS Checkview 1.1 - Directory Traversal Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1...

iOS Checkview 1.1 - Directory Traversal

Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1.1 Tested on: iPhone, iPod 3GS with 4.2....

iPhone, BlackBerry Fall on Second Day of Pwn2Own

VANCOUVER–For the fourth consecutive year, researcher Charlie Miller won one of the prizes at the annual Pwn2Own contest here. The difference this time is that Miller successfully exploited an iPhone 4 to win, rather than Safari, which he’s gone after the last three years. The BlackBerry Torch 98...

Apple iPhone information leakage

Information about Wi-Fi keys for Personal Hotspot feature is logged to debugging console...

Apple Releases iOS 4.3

Apple has released iOS 4.3 for the iPhone 3 GS and later, iPod touch 3rd generation and later, and iPad to address multiple vulnerabilities. These vulnerabilities affect the CoreGraphics, ImageIO, libxml, Networking, Safari, and WebKit packages. Exploitation of these vulnerabilities may allow an...