Jon Westfall
05-28-2010, 02:30 PM
<div class='os_post_top_link'><a href='http://www.engadget.com/2010/05/27/iphone-vulnerability-leaves-your-data-wide-open-even-when-using/' target='_blank'>http://www.engadget.com/2010/05/27/...ven-when-using/</a><br /><br /></div><p><em>"Bernd and fellow security guru Jim Herbeck have discovered that plugging even a fully up-to-date, non-jailbroken iPhone 3GS into a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone's storage -- even when it's locked. The belief is that they're just a buffer overflow away from full write access as well, which would surely open the door to making calls. Bernd believes the iPhone's lack of data encryption for content is a real problem, and also cites the inability to digitally sign e-mails as reasons why the iPhone is still not ready for prime time in the enterprise."</em></p><p><img src="http://images.thoughtsmedia.com/resizer/thumbs/size/600/wpt/auto/1274965335.usr7.jpg" style="border: 1px solid #d2d2bb;" /></p><p>If you work in a highly regulated industry and think allowing your executives to use an iPhone instead of a Windows Mobile or RIM device is a fine idea, you may want to look at this article and others like it that point out that while an excellent device, the iPhone lacks basic security. Heck, iPhones blatantly lied to exchange servers for years about encryption capabilities, much to the chagrin of Exchange System Administrators. Apple succeeds at a lot of things, but iPhone security is not one of them!</p>