Security researcher Aviv Raff said on Wednesday that the iPhone's Mail and Safari applications are prone to URL spoofing and could allow phishing attacks against iPhone users.
The alert was anticipated. Prior to the release of the iPhone 3Gon July 11, Raff was one of a few security researchers who indicated that they had found vulnerabilities but were waiting to see the final iPhone 2.0 release.
By crafting a specially designed URL, Raff says an attacker could create an email link that appears in Mail to be from a trusted site (a financial institution or social network). By clicking the link, Safari will open to the phishing site. The issue affects users of iPhone 1.1.4 and 2.0.
Raff, who has informed Apple of the vulnerability, declined on his blog to offer more details until a patch is available.
Until then, Raff suggests iPhone users "avoid clicking on links in the Mail application which refers to trusted Web sites (e.g. bank, PayPal, social networks, etc.). Instead, a user should enter the URL of the Web site manually in the Safari application".
If you have been following the development of the upcoming S60 Touch UI, you'd probably have noticed a handful of screenshots floating on the Web recently. These screenshots weren't taken from an actual device but are mockups from the Carbide UI, S60's theme builder. To catch a fleeting product placement of the Tube (Nokia's elusive touchscreen smart phone), you'll need to hit the cinemas to watch the The Dark Night. I haven't caught the movie yet, but I'll write in if I manage to spot it in the show.
Read more »
Here's another date to mark down on your calendar: August 22. Tim Cook, chief operating officer of Apple said during a recent conference call discussing the company's Q3 2008 financial results that it expects to launch the iPhone 3G in about 20 additional countries on August 22.
"We are confident enough in the production ramp that we will be launching about 20 additional countries on August 22, which will bring our total to over 40, and we still expect to be selling the iPhone in over 70 countries later this calendar year."
The iPhone 3G is now already shipping in 22 countries including Australia, Hong Kong, Japan and New Zealand in Asia-Pacific region. The App Store was also launched on July 11 together with the iPhone 3G and, according to Apple, there are currently more than 900 apps available, with over 20 percent of them free.
However, it wasn't mentioned which countries are amongst the 20 odd places that will get the iPhone 3G on August 22. One thing we know is, SingTel, the telco that will be the first carrier to bring the iPhone 3G to Singapore is keeping mum about it. More updates to come as we hear from Apple.
Not another iPhone app! That said, this one's just too cute not to Crave about. Bottoms up to iBeer, a little app that utilizes the iPhone's built-in accelerometer and generous display to give the impression that you're sipping ice cold beer right out of your iPhone. Just tilt, and virtual brew will fill your screen and appear to go down your gullet once you raise the handset to your lips. You can shake it for more foam or get it to burp even. iBeer has to be downloaded via iTunes (US$2.99), so too bad for those countries which don't have the iTunes App Store. This is one tipple that won't get you into trouble with drunk/drink driving laws. But if you're averse to beer, there's an iMilk app just for you teetotallers. *Burp*
Apple's MobileMe status page has a note up at the moment that says "1% of MobileMe members cannot access MobileMe Mail. We apologize for any inconvenience". It's just the latest in a series of problems that has plagued the launch of MobileMe, a US$99-a-year service that lets you access contacts, calendars, and other files from one computer on other Macs or PCs, as well as your iPhone.