sms

Apple fixes iPhone SMS flaw

Apple on Friday fixed an SMS-related security flaw in the iPhone that had been at the center of one of the most talked-about exploits at this week's Black Hat security conference.

"We appreciate the information provided to us about SMS vulnerabilities which affect several mobile phone platforms," Apple representative Tom Neumayr told CNET.

"This morning, less than 24 hours after a demonstration of this exploit," Neumayr continued, "we've issued a free software update that eliminates the vulnerability from the iPhone. Contrary to what's been reported, no one has been able to take … Read more

An SMS can force a URL or app on smartphones

LAS VEGAS--In one of a handful of SMS-related presentations here at the Black Hat security show, researchers demonstrated on Thursday how they can force certain types of smartphones to visit a malicious URL or install an app without user approval.

The vulnerability only affects phones that have been misconfigured by the original equipment manufacturer so that they accept any message sent through WAP Push (Wireless Application Protocol), a service that runs on top of SMS, said researcher John Hering.

WAP Push messages should only be accepted when sent by a trusted party such as the mobile operator, said Hering, chief … Read more

Researchers can attack mobile phones via spoofed SMS messages

LAS VEGAS--Researchers at the Black Hat security conference on Thursday showed how an attacker could spoof a type of SMS message that appears to be sent from the carrier or some other trusted source.

This attack on MMS (multimedia messaging service) messages, a type of SMS message, could allow an attacker to trick the recipient into visiting a malicious Web site or ultimately do something else to harm the phone or steal data.

The attacks work potentially on any type of phone that is MMS-enabled and operating on Global System for Mobile communications (GSM) networks, said Zane Lackey, a senior … Read more

Researchers attack my iPhone via SMS

LAS VEGAS--Researchers have discovered a way to take complete control over an iPhone merely by sending special SMS messages and demonstrated it on my iPhone at the Black Hat security conference on Wednesday.

Although an attacker could exploit the hole to make calls, steal data, send text messages, and do basically anything that I can do with my iPhone, the researchers were kind and merely rendered it temporarily inoperable.

Here's what happened: While I was talking on the phone to Charlie Miller, his partner, Collin Mulliner, sent me a text message from his phone. One minute I'm talking … Read more

Reader's Questions About the Pre #2

Answering a few more reader's questions about the Palm Pre...

Kim Dushinski, founder of Mobile Marketing Profits says:

I am a very happy Pre owner (got mine on launch day!) I have a couple questions.

#1.

Q. Is there a way to back space without deleting?

A. Moving the cursor is done by holding the Orange key and swiping on the screen. Article here.

#2

Q. How do I close down the Web without having to "back" out of each page to get the web card in the deck so I can swipe it off the top … Read more

CNET News Daily Podcast: iPhone apps and SMS phishing

On Tuesday, Apple announced that more than 1.5 billion applications have been downloaded from its app store. We also get CNET's security expert, Elinor Mills, in the studio to talk about a new phishing scam that's tricking people into giving up their bank account information via SMS text message.

Also discussed: Blockbuster OnDemand is coming to a Samsung TV near you; Microsoft announces Azure pricing; and attacks on U.S., Korea sites pegged to U.K. server.

Listen now: Download today's podcast

Today's stories:

More than 1.5 billion apps have been downloaded from Apple's store… Read more

Cisco: Text message scams on the rise

Cyber scammers are banking on the notion that many people who might not fall for a phishing scam via e-mail may still be easy targets through their mobile phone, according to security report released Tuesday from Cisco Systems.

Text message scams are on the rise, particularly fake messages that appear to come from a legitimate bank, said the report, which covers a wide variety of cybercrime topics.

In many of the scams, the SMS messages direct the recipient to call a telephone number where an automated message prompts the caller to provide log-in ID or account number and PIN. Other … Read more

For Uganda's poor, a cellular connection

In many parts of the world, electricity is a luxury. People spend hours gathering firewood to cook their dinners or warm their homes. In Uganda, only 10 percent of the population has electricity, the vast majority doesn't have microwave ovens, computers, or televisions. People don't have access to the latest information on disease outbreaks, weather forecasts, or soccer championships. But this may soon change.

More than a third of Uganda's population, about 10 million people, own a cell phone, and many more have access to these phones through family members and neighbors. Cell phones can be found … Read more

FAQ: How to vanquish mobile spam

I got my first SMS spam message last week and it infuriated me.

The mortgage-related text message was more than just a nuisance, like e-mail spam is. It also was a strong indication of how marketers have managed to invade every private communication space consumers have.

And it was frustrating that I didn't know what to do about it. Being an AT&T customer, I tried to register on AT&T's site figuring I could learn what to do and take action there. Unfortunately, it kept telling me that it didn't recognize my password, so … Read more