Monday, September 23, 2013

Week 5 Blog


iPhone iOS7 Users Fall Victim to Attackers


The iPhone’s new iOS7 is pretty nifty but it looks like there is already a security vulnerability that some may not know about yet. Apparently, a “SIRI vulnerability enables attackers to act on user's behalf - even when iPhone is locked” (Wilson, 2013). This vulnerability has me questioning Apple’s security standards. Obviously, Apple did not intend on have this type of vulnerability for their new iOS7 software but it does bring up the question of what security standards Apple does have in place because the vulnerability did still occur. Perhaps Apple should re-review their current security policies and standards to be sure that they are coinciding with what their current polies should hold.

“Cenzic researchers said they were able to use a locked iPhone belonging to a third party to send email and texts, make calls, access contact information, and make updates to Facebook and Twitter, all with the user's accounts and without the user's knowledge” (Wilson, 2013). Well, since I have an iPhone, this really alarms me. I just keep thinking Apple where is my security patch? I guess for now there is no patch. I supposed I could wipe my iPhone and then add all my data back once Apple decides to implement better security standards into their software. I guess this kind of defeats the purpose of buying an iPhone in the first place though. It might just be easier for Apple to hire some super smart information security personnel to help create better security polies, standards, and guidelines.

While the new iPhone iOS7 has this vulnerability, it seems that there is a way to add some protection to your device. Apparently disabling SIRI will help with this iPhone vulnerability. (Wilson, 2013) I hope that Apple will soon at least release an update that solves this security problem. Oh Apple, you are so flashy! You have the world at your disposal! Since so many people love you so much, you could at least give us some security in our relationship with you by implementing better security features.


 

Reference
 
Wilson, T. (2013, September 22). Flaw In iOS 7 Lets Attackers Take Control Of Users' iPhones. Retrieved September 23, 2013, from Security Dark Reading: http://www.darkreading.com/privacy/flaw-in-ios-7-lets-attackers-take-contro/240161623