IPhone bug leaves emails vulnerable Skip to main content

IPhone bug leaves emails vulnerable

Apple says it encrypts email attachments you receive on your iPhone or iPad -- but it doesn't, according to a security researcher.
German security expert Andreas Kurtz has discovered that anyone in possession of your Apple device might be able to access files sent to you via email, even if your phone is locked with a passcode.

It's a major security flaw, but it's worse for people with older iPhones and iPads. It's less bad for folks with newer ones.

Since the release of the iOS 4 software in 2010, Apple has assured customers that files are guarded with an added layer of security. When you lock your phone, the email attachments in your phone are supposed to be individually locked too. Here's why: Even if hackers manage to grab your phone, hook it up to a computer and bypass the passcode that locks your entire device, they still aren't supposed to be able to read the files. Email attachment files are a jumbled mess of letters and numbers unless you unlock the whole phone.

Related story: AOL hack causes zombie spam
But that's not actually happening, Kurtz found. The files aren't encrypted that way. He was able to plug an iPhone 4 into a computer, go around the passcode and see those files.
Apple stock is an iPhenomenon  
Apple stock is an iPhenomenon
 
There are several methods available to hackers allowing them to access an iPhone's files even when it is locked and protected with a passcode. In theory, those files should be encrypted -- appearing as a jumbled mess of numbers and letters. But Kurtz found that email attachments aren't, in fact, encrypted. Kurtz was able to access email attachments on a locked iPhone 4 -- just by plugging it into a computer and using some passcode-bypassing software.

Importantly, that method won't work on newer devices, because they don't allow computers to access raw files. But the software flaw is still present on new devices, such as the iPhone 5S and iPad 2. That means that if hackers figure out how to reach those files, they'll find them unencrypted.

Kurtz, the co-founder of NESO Security Labs in Heilbronn, Germany, tested for the flaw in an iPhone 4, iPhone 5s and iPad 2. He first reported the findings on his personal blog on April 23.

Kurtz said he reached out to Apple and the company told him it was already aware of the problem. But when the company issued a software update to iOS 7.1.1 and did not include a fix, Kurtz posted his findings.

"Considering the long time iOS 7 is available by now and the sensitivity of email attachments many enterprises share on their devices, I expected a near-term patch," he wrote.

http://money.cnn.com/2014/05/06/technology/security/apple-email-bug/index.html
Labels:

Comments

Post a Comment

Popular posts from this blog

Chronology of the Press in Burma

1836 – 1846 * During this period the first English-language newspaper was launched under British-ruled Tenasserim, southern  Burma . The first ethnic Karen-language and Burmese-language newspapers also appear in this period.     March 3, 1836 —The first English-language newspaper,  The Maulmain Chronicle , appears in the city of Moulmein in British-ruled Tenasserim. The paper, first published by a British official named E.A. Blundell, continued up until the 1950s. September 1842 —Tavoy’s  Hsa-tu-gaw  (the  Morning Star ), a monthly publication in the Karen-language of  Sgaw ,  is established by the Baptist mission. It is the first ethnic language newspaper. Circulation reached about three hundred until its publication ceased in 1849. January 1843 —The Baptist mission publishes a monthly newspaper, the Christian  Dhamma  Thadinsa  (the  Religious Herald ), in Moulmein. Supposedly the first Burmese-language newspaper, it continued up until the first year of the second Angl
Post a Comment
Read more

ARSA claims ambush on Myanmar security forces

Arakan Rohingya Salvation Army (ARSA) on Sunday claimed responsibility for an ambush on Myanmar security forces that left several wounded in northern Rakhine state, the first attack in weeks in a region gutted by violence. Rakhine was plunged into turmoil last August, when a series of ARSA raids prompted a military backlash so brutal the UN says it likely amounts to ethnic cleansing of the Muslim Rohingya minority. The army campaign sent some 650,000 Rohingya fleeing for Bangladesh, where refugees have given harrowing accounts of rape, murder and arson at the hands of security forces and vigilantes. Myanmar's military, which tightly controls information about Rakhine, denies any abuses and insists the crackdown was a proportionate response to crush the "terrorist" threat. ARSA have launched few attacks in recent months.  But the army reported that "about ten" Rohingya terrorists ambushed a car with hand-made mines and gunfire on Friday morning
Post a Comment
Read more

Thai penis whitening trend raises eyebrows

Image copyright LELUXHOSPITAL Image caption Authorities warn the procedure could be quite painful A supposed trend of penis whitening has captivated Thailand in recent days and left it asking if the country's beauty industry is taking things too far. Skin whitening is nothing new in many Asian countries, where darker skin is often associated with outdoor labour, therefore, being poorer. But even so, when a clip of a clinic's latest intriguing procedure was posted online, it quickly went viral. Thailand's health ministry has since issued a warning over the procedure. The BBC Thai service spoke to one patient who had undergone the treatment, who told them: "I wanted to feel more confident in my swimming briefs". The 30-year-old said his first session of several was two months ago, and he had since seen a definite change in the shade. 'What for?' The original Facebook post from the clinic offering the treatment, which uses lasers to break do
1 comment
Read more