iOS 7 Beta Fixes Malicious Charger Bug

POST

MAIL

Posted August 1, 2013 at 3:46am by Shalom Levytam

Apple has fixed a bug in iOS that allowed security researchers to inject arbitrary software into the iPhone using a malicious charger, reports Reuters.

Three computer scientists, who alerted Apple to the problem earlier this year, demonstrated the security vulnerability at the Black Hat hacking convention in Las Vegas on Wednesday where some 7,000 security professionals are learning about the latest threats posed by computer hacking. Apple said the issue had been fixed in the latest beta of iOS 7, which has already been released to software developers.

"We would like to thank the researchers for their valuable input," Apple spokesman Tom Neumayr said.

Billy Lau, Yeongjin Jang, and Chengyu Song from the Georgia Institute of Technology, demonstrated a custom built charger which was equipped with a tiny Linux computer programmed to attack iOS devices. It cost about $45 to build and took a week to design. When plugged into the charger the phone was infected with a virus that caused it to place a call to one of the researchers.

In the real world the bug would give cyber criminals remote control of the devices, letting them take steal personal information including banking passwords, credit card numbers, emails, texts, contact info, or location data.

Reuters notes that with iOS 7 a user will now be notified when they are connecting to a computer and not an ordinary charger.

Read More [via Tzvi]

Follow iClarified

Apple certified 9yrs - August 3, 2013 at 5:10am

The 6.1.3 jailbreak only runs on the 4 or 4S.That is why it's not ready for public release.Because the general use of the i5 is so vast that many users would attempt the jailbreak on them and do irreparable damage.As far as the Beta 7 jailbreak,it works across the table but will not be made available until September 21st,to guarantee flawless exploits on the final iOS 7 release.

Adnan - August 1, 2013 at 11:38pm

When will be the ios7 available to download on iPhone5

Apple certified 9yrs - August 1, 2013 at 4:59am

Saurik is correct.But the fact that jailbreaks for 6.1.3 and Beta 7 are already completed in certain circles(I am actually running 6.1.3 on this device,untethered and full Cydia support)doesn't mean they are available for public release through a download.Just like a beta iOS,a jailbreak goes thru testing also.

Andrew - August 1, 2013 at 6:28am

And please let me know how you got 6.1.3 untethered on a 5, I've been waiting and waiting. How long till ios7 is out because I really need my jailbreak back. Thanks.

m1k3y_b0y - August 1, 2013 at 4:12am

Yeah, I'm running the latest beta and I now get a popup asking me if I trust the computer when I plug my iPhone into the USB port on the front of my cable box to charge.

Jack Black - August 1, 2013 at 4:10am

Screw helping apple they should allow free jailbreak or get no help. As saurik said let people decide if they want a "secure device" or jailbreak

Apple certified 9yrs - August 1, 2013 at 4:00am

If an individual has a decent knowledge of Linux programming,and a basic knowledge of reverse engineering,it's not complicated to inject an info seeking virus into an iOS based device.This is common knowledge in most circles.Just like the 6.1.3 and Beta 7 jailbreaks,which exists and is used but not widely distributed,due to the unbelievable presence of greedy people who would use them to profit,and that's not right in our eyes.

I remember my first beer - August 2, 2013 at 12:07am

Lol yeah iOS 6.1.3 on iPhone 5, I'm also on this as i have overclocked the processor in my phone so that when I click the home button 7 times my iPhone 5 turns into a rocket and takes me to the moon...

sugarsugaryeah - August 1, 2013 at 3:59am

"iOS 7 Beta Fixes Fixes Malicious Charger Bug" wow.... better than "Fixes Fixes Fixes Fixes" huh!