Topic: New iPhone worm leaves your data wide open (iRickRoll'd)

[Samker]

A new vulnerability has been revealed today that can access your data on your iPhone, even when your phone is in a locked and un-jailbroken state.  PIN codes to protect users from accessing your phone won't stop the vulnerability.

Bernd Marienfeldt and Jim Herbeck discovered the vulnerability, and said it can even access most of the users data.  The vulnerability can even work on an iPhone 3GS running firmware 3.1.3, when you connect it to a computer running Ubuntu Lucid Lynx, even when the phone is in a locked state.

This vulnerability can't be spread like the iPhone iRickRoll'd worm, which changed users backgrounds on their jailbroken iPhones, running SSH and who haven't changed their default password.  This new vulnerability appears to only be when the phone is tethered to a computer running Ubuntu Lucid Lynx, so any person wanting your data will need to get a hold of your iPhone first.

With open vulnerabilities like this, Apple will find it hard to turn the iPhone into a prime-time corporate device, where companies like BlackBerry have proven to be reliable and secure.  Apple has yet to address the vulnerability or release a patch.

(NW)