Eksperci bezpieczeństwa z firmy Verdasys ostrzegają: model bezpieczeństwa zaimplementowany w telefonie Apple iPhone korzysta z najgorszych praktyk, które skompromitowały Microsoft Windows 95 i (w mniejszym stopniu) kolejne wersje tego systemu. W skrócie: każdy program ma pełne uprawnienia do systemu. To oznacza, że złamanie zabezpieczeń jednego programu automatycznie daje atakującemu kontrolę nad urządzeniem.
Kto chciałby atakować użytkowników iPhone? Zainfekowane telefony nie posłużą raczej przecież jako sprawna sieć do przeprowadzania ataków DDoS (jest ich za mało, nie są na stałe podłączone do szybkiego Internetu, mają za małą przepustowość). Wired ostrzega jednak, że iPhone kontrolowany przez crackera mógłby posłużyć m.in. do:
wykonywania połączeń telefonicznych bez wiedzy użytkownika,
przechwytywania wiadomośći SMS, listy odebranych telefonów (politycy! z daleka od Apple!),
podsłuchu (sic!) użytkownika,
śledzenia lokalizacji właściciela (na podstawie punktów WiFi w pobliżu),
czy nawet do wykonywania zdjęć otoczenia.
Jest się więc czego obawiać. Niestety firma Apple wydaje się nieporuszona tą kwestią i od początku ignoruje wszelkie pytania związane z bezpieczeństwem iPhone. Podobną taktykę przyjmował przez lata Microsoft, ale w końcu i on przyznał się do błędu i zaimplementował model bezpieczeństwa na wzór UNIX-a (UAC) w ostatniej wersji Windows — Vista. Czy pierwsze trojany skierowane przeciw iPhone, które bez wątpienia pojawią się niebawem, zmienią nastawienie Apple to kwestii bezpieczeństwa? Będziemy to śledzić na bieżąco w serwisie.
376 odpowiedzi na „iPhone bezpieczny jak Windows 95”
Wizard
Jasne, nastawienie Apple.. Parę dni temu były jakieś dziury w openssl bodajże, no i patrze w errate OpenBSD – jest łatka, patrzę, na FreeBSD informacja.. Teraz moje ubuntu chce instalować poprawki.. A Mac OS.. cóż.. zobaczymy, ale myślę, że albo przemilczą, albo łatka wyjdzie za miesiąc.
co do UAC, to co prawda nie mam visty (i nie zanosi się na to żebym miał mieć, ale obiło mi się o uszy że generuje takie ilości ostrzeżeń, że większość userów go wyłącza.
śledzenia lokalizacji właściciela (na podstawie punktów WiFi w pobliżu)
prostrza metoda to przesylanie informacji o cell-id do ktorego jest w danym momecie przypisany telefon (informacje taka ma m.in. sieci komorkowa, dzieki czemu w najprostrzej postaci moga namierzyc telefon z dokladnoscia do komorki – a przy dodatkowej informacji o sile sygnalu z sasiednich przekaznikow – z dokladnoscia do kilku/kilkudziesieciu metrow)
sa aplikacje na np. nokie ktore sledza trase przemieszczania sie telefonu wlasnie w oparciu o cell-id. co wiecej – gdzies widzialem nawet baze zawierajaca opis poszczegolnych cell-id, z przypisaniem polozenia geograficznego i normalnego adresu!
Problem w tym że firma jest z dupy wzięta, i raczej nigdy nie miała iPhone w ręce. Telefon używa tak jak OSX Darwina, i utilsów BSD, ma też taki sam Unixowy model działania. Porównując tenże model do Win95 to ta firma wystawia się na pośmiewisko. Co więcej, te same dziury które są na iPhone będą i na OSX, i na Linuxie i BSD – np libtiff dzięki któremu udało się zdjąć SIMLocka.
Komentujący powinni najpierw zrobić trochę własnego szukania a nie komentować jak owce.
Wizard : żal.pl, bo Apple średnio co miesiąc oprócz System Update dla OSX (zmienia się ostatni numerek) wypuszcza security updates w których właśnie są przede wszystkim łatki do userlandu BSD typu openssl, openssh, apache etc..
@Movi: przeczytaj ze zrozumieniem niusa. Chodzi o to, że w iPhone wszystkie programy automatycznie uruchamia z poziomu administratora. Przez to dziura w dowolnym programie spowoduje przejęcie całego urządzenia.
Jeśli uważasz, że taki sam model bezpieczeństwa jest przyjęty w Linuksie czy BSD to doczytaj trochę o architekturze tych systemów. Polecam m.in. artykuły: Windows vs Linux: porównanie architektury, część 1 i Windows vs Linux: porównanie architektury, część 2
Pod Linuksem czy BSD tez mozna wszystkie programy odpalac z poziomu administratora.
A w iPhone… Komus chyba umknelo, ze iPhone to _telefon_. Z definicji jednouzytkownikowy. Jedyny uzytkownik musi miec mozliwosc zrobienia z nim wszystkiego, w koncu to jego telefon; nie ma wiec znaczenia, czy dziura oznacza przejecie uprawnien tego uzytkownika czy roota. Po kiego grzyba w tej sytuacji prawa dostepu?
@Movi niestety nie masz racji. Na prawdę wszystkie aplikacje są uruchamiane z root-a. Apple tłumaczy to tym, żeby wszystko szybciej działało. ;(
Potwierdzili to już wiele miesięcy temu ludzie, którzy odblokowywali telefon.
"Eksperci bezpieczeństwa" z firmy Verdasys ostrzegają: model bezpieczeństwa zaimplementowany w telefonie Apple iPhone jest dokladnie taki sam, jak w pozostalych smartfonach.
This blog appears to get a large ammount of visitors. How do you promote it? It gives a nice unique twist on things. I guess having something real or substantial to give info on is the most important factor.
This is certainly a well written post. My only issue is I am experiencing an issue with your RSS feed . For some reason I am unable to subscribe to it. Is there anybody have an similar RSS issue? If anybody else is having a similar issue please let me know Jonson462@gmail.com.
Hello! This is kind of off topic but I need some help from an established blog. Is it difficult to set up your own blog? I’m not very techincal but I can figure things out pretty fast. I’m thinking about setting up my own but I’m not sure where to begin. Do you have any ideas or suggestions? Appreciate it
While I tend to side with the post I sincerely believe that car insurance has become too complex for the average policy holder. Just like any serious purchase however you must perform due diligence and research the companies before you purchase.
I am really impressed with your writing skills and also with the layout on your weblog. Is this a paid theme or did you customize it yourself? Anyway keep up the excellent quality writing, it’s rare to see a nice blog like this one today..
This is absolutely a excellent post. My only issue is I am experiencing an issue with your RSS feed . For some reason I am unable to subscribe to it. Is there anybody have an identical RSS issue? If somebody else is having the same issue please contact me Laursen779@gmail.com.
These days, it is possible to get Wii owners to expertly run an unlock software and have complete the additional features and never have to kill their gadget.
I recently came across your own site on google coupled with always check a number of early strings. Prolong up the perfect get the job done. I really additional the Feed to excellent Bing Announcement Human being. Seeking toward going through increased from your website afterwards!…
I located your main web-site online in addition to have a look at many of the early items. Preserve the wonderful do the job. I merely some other increase your Rss to help my very own Windows live messenger Report Subscriber. Looking for toward looking at supplementary from your website at a later point!…
An interesting discussion is worth comment. I think that you should write more on this topic, it might not be a taboo subject but generally people are not enough to speak on such topics. To the next. Cheers
This is clearly a excellent article. My only issue is I am having an issue with your RSS feed . For some reason I am unable to subscribe to it. Is there anybody have an similar RSS issue? If somebody else is having the same issue please contact me Permenter1619@gmail.com.
I as well as my friends were found to be examining the nice points on your web site while quickly I had a horrible feeling I never thanked the site owner for those tips. All the ladies ended up consequently stimulated to learn them and have in effect honestly been taking pleasure in these things. Appreciate your simply being indeed accommodating and for making a choice on such great resources most people are really eager to understand about. Our sincere regret for not saying thanks to you sooner.
Hullo, perhaps this is not on topic but anyhow, I have been browsing about your web site and it looks truly neat. impassioned about your writing. I’m building a new blog and hard put to make it appear great, and provide really good content. I have discovered a lot on your website and I look forward to more updates and will be coming back.
This is actually the latest very efficient study for me personally, Are required to say that you could potentially be 1 in the simplest web owners I truly seen.Nice writing this educational report.
My partner and I actually enjoyed studying this weblog post, I was simply itching to know do you trade featured posts? I’m at all times trying to find somebody to make trades with and merely thought I’d ask.
Great blog. Many websites like yours cover subjects that aren’t found in magazines. I don’t know how we got by 12 years ago with just newspapers and magazines.
That is the fitting weblog for anyone who needs to find out about this topic. You realize a lot its virtually laborious to argue with you (not that I truly would need…HaHa). You positively put a new spin on a topic thats been written about for years. Nice stuff, just nice!
Great site here. Many websites like yours cover subjects that can’t be found in magazines and newspapers. I don’t know how we got on 15 years ago with just print media.
Oh my goodness! a tremendous article dude. Thank you Nevertheless I’m experiencing issue with ur rss . Don’t know why Unable to subscribe to it. Is there anyone getting equivalent rss problem? Anyone who is aware of kindly respond. Thnkx
Good post. I learn something more challenging on completely different blogs everyday. It would always be stimulating to learn content from different writers and follow just a little something from their store. I’d desire to use some with the content material on my blog whether you don’t mind. Natually I’ll offer you a hyperlink in your net blog. Thanks for sharing.
How do you fancy being your personal boss, selecting your own working hours and meeting new men and women just about every day? Would you prefer to make good income and have the satisfaction of assisting men and women learn about anything new? It really is effortless to see why a great number of people from each and every walk of life wish to be a driving instructor.
I’m a college student that wants to secure a personal loan of 00 for just a 60 month period. I do not want to secure a student loan, because I do not need the $ for student, rather some personal expenses.
Just killing some in between class time on Digg and I found your article . Not usually what I prefer to read about, however it was completely value my time. Thanks.
What an enjoyable (and may I say insightful) read! You may not know it, but this post of yours gave me so many realizations. I wonder if it occurs to you and other people, too, but there are times when I get wonderful ideas from things that don’t have anything to do at all with what’s in my mind. On a different note, I read a lot of blogs, it’s what I do before I head off to the gym, and I can’t believe some of the trash that some people are putting out, like a magic bullet for this, and a so-called-secret for that. Like in the topic of body-building, I’ve read quite a number of blogs that talk about products that make building muscles almost instantaneous! Imagine, bodybuilding without breaking a sweat?! Come on! At the very least you need to have a workout program which you will actually follow! Now I’m ranting, sorry. I’ll look around your blog some more before heading to another one.
I needed to thanks for this nice read!! I positively having fun with every little bit of it I have you bookmarked to take a look at new stuff you submit
Having just been looking for useful articles for the research project I’ve been working on when I happened to come across yours. Thanks for this helpful content! — Nick Perry
Heya i’m for the first time here. I found this board and I find It really useful & it helped me out much. I hope to give something back and help others like you helped me.
Sorry for the huge review, but Im really loving the new Zune, and hope this, as well as the excellent reviews some other people have written, will help you decide if its the right choice for you.
Thanks for taking the time to debate this, I feel strongly about it and love learning more on this topic. If possible, as you gain expertise, would you mind updating your weblog with additional info? It is extremely helpful for me.
I recently uncovered your personal internet on the search engines plus double check many of the blogposts. Preserve in the very good get the job done. I just now added up your Feed for you to my personal Yahoo Media Website reader. Attempting to find toward studying alternative from your site subsequently!…
An fascinating discussion is worth comment. I think that it’s best to write more on this matter, it might not be a taboo topic but usually individuals are not enough to speak on such topics. To the next. Cheers
[…]we prefer to honor numerous other world-wide-web web sites around the internet, even when they arent linked to us, by linking to them. Underneath are some webpages really worth checking out[…]
Wonderful story, reckoned we could combine a few unrelated data, nonetheless seriously really worth taking a look, whoa did one discover about Mid East has got more problerms as well.
[…]although internet websites we backlink to below are considerably not connected to ours, we feel they are truly really worth a go by, so possess a look[…]
[…]very couple of internet websites that transpire to become comprehensive beneath, from our point of view are undoubtedly well really worth checking out[…]
[…]although internet sites we backlink to below are considerably not associated to ours, we really feel they’re truly worth a go via, so possess a look[…]
Chapter 17 Outline – Summary The World of the Cell
Chapter 17 Outline – Summary The World of the Cell
[…]we like to honor quite a few other web websites on the net, even when they arent linked to us, by linking to them. Under are some webpages worth checking out[…]
[…]we like to honor lots of other online websites around the net, even when they arent linked to us, by linking to them. Underneath are some webpages worth checking out[…]
[…]Wonderful story, reckoned we could combine a few unrelated data, nevertheless seriously really worth taking a search, whoa did 1 understand about Mid East has got more problerms too […]
[…]although internet sites we backlink to beneath are considerably not related to ours, we feel they may be in fact really worth a go through, so have a look[…]
[…]Wonderful story, reckoned we could combine a handful of unrelated information, nevertheless really really worth taking a look, whoa did one particular discover about Mid East has got much more problerms also […]
[…]that may be the end of this report. Right here youll come across some web-sites that we assume you will appreciate, just click the hyperlinks over[…]
[…]we prefer to honor quite a few other online internet sites on the web, even though they arent linked to us, by linking to them. Underneath are some webpages worth checking out[…]
[…]we like to honor numerous other online web pages around the web, even if they arent linked to us, by linking to them. Underneath are some webpages worth checking out[…]
[…]that could be the finish of this report. Right here youll discover some websites that we believe youll appreciate, just click the hyperlinks over[…]
[…]although websites we backlink to beneath are considerably not connected to ours, we really feel they may be actually really worth a go through, so have a look[…]
[…]although web sites we backlink to below are considerably not associated to ours, we really feel they are actually worth a go through, so have a look[…]
[…]although internet sites we backlink to below are considerably not connected to ours, we feel they’re essentially really worth a go by way of, so possess a look[…]
[…]Wonderful story, reckoned we could combine a few unrelated information, nonetheless seriously worth taking a look, whoa did one particular master about Mid East has got additional problerms too […]
[…]we like to honor many other net sites around the net, even when they arent linked to us, by linking to them. Beneath are some webpages worth checking out[…]
[…]that will be the finish of this article. Right here you will obtain some web sites that we think you will appreciate, just click the hyperlinks over[…]
[…]we like to honor quite a few other world wide web sites on the internet, even when they arent linked to us, by linking to them. Beneath are some webpages really worth checking out[…]
[…]Wonderful story, reckoned we could combine a couple of unrelated information, nonetheless actually worth taking a look, whoa did one particular understand about Mid East has got far more problerms also […]
[…]Wonderful story, reckoned we could combine a few unrelated data, nevertheless definitely really worth taking a search, whoa did one particular understand about Mid East has got additional problerms also […]
[…]Wonderful story, reckoned we could combine a couple of unrelated data, nevertheless actually really worth taking a look, whoa did a single study about Mid East has got more problerms at the same time […]
[…]we like to honor quite a few other internet web sites on the net, even if they arent linked to us, by linking to them. Under are some webpages really worth checking out[…]
[…]that will be the end of this post. Right here you will come across some web-sites that we assume youll appreciate, just click the hyperlinks over[…]
[…]Wonderful story, reckoned we could combine a handful of unrelated data, nonetheless seriously worth taking a look, whoa did one study about Mid East has got a lot more problerms at the same time […]
[…]Wonderful story, reckoned we could combine a number of unrelated information, nonetheless seriously worth taking a look, whoa did a single master about Mid East has got more problerms too […]
[…]although internet websites we backlink to below are considerably not associated to ours, we really feel they’re really worth a go through, so possess a look[…]
[…]Wonderful story, reckoned we could combine a number of unrelated information, nevertheless really worth taking a look, whoa did 1 understand about Mid East has got extra problerms as well […]
[…]we like to honor several other internet web-sites around the net, even when they arent linked to us, by linking to them. Underneath are some webpages worth checking out[…]
[…]Wonderful story, reckoned we could combine some unrelated data, nevertheless definitely worth taking a look, whoa did 1 study about Mid East has got a lot more problerms as well […]
[…]we like to honor quite a few other online websites around the internet, even though they arent linked to us, by linking to them. Underneath are some webpages really worth checking out[…]
[…]very handful of web sites that transpire to be comprehensive beneath, from our point of view are undoubtedly effectively really worth checking out[…]
[…]although web sites we backlink to beneath are considerably not connected to ours, we really feel they may be basically really worth a go by, so possess a look[…]
[…]Wonderful story, reckoned we could combine a couple of unrelated information, nonetheless truly worth taking a search, whoa did one study about Mid East has got extra problerms also […]
[…]we like to honor quite a few other world wide web internet sites around the net, even when they arent linked to us, by linking to them. Below are some webpages worth checking out[…]
[…]although internet sites we backlink to beneath are considerably not connected to ours, we feel they’re basically worth a go by way of, so have a look[…]
[…]we like to honor numerous other world wide web internet sites around the web, even when they arent linked to us, by linking to them. Beneath are some webpages really worth checking out[…]
[…]we like to honor a lot of other online websites on the net, even when they arent linked to us, by linking to them. Under are some webpages worth checking out[…]
[…]Wonderful story, reckoned we could combine a couple of unrelated information, nevertheless truly really worth taking a appear, whoa did one particular understand about Mid East has got extra problerms also […]
[…]Wonderful story, reckoned we could combine some unrelated information, nevertheless seriously worth taking a appear, whoa did a single understand about Mid East has got more problerms as well […]
[…]although internet sites we backlink to beneath are considerably not associated to ours, we really feel they’re basically really worth a go via, so have a look[…]
[…]although internet websites we backlink to beneath are considerably not associated to ours, we really feel they may be really really worth a go via, so have a look[…]
[…]although web sites we backlink to beneath are considerably not associated to ours, we feel they may be truly really worth a go by means of, so possess a look[…]
[…]we prefer to honor several other online web-sites on the internet, even if they arent linked to us, by linking to them. Underneath are some webpages worth checking out[…]
[…]Wonderful story, reckoned we could combine a number of unrelated data, nevertheless seriously worth taking a search, whoa did one learn about Mid East has got additional problerms as well […]
[…]Wonderful story, reckoned we could combine several unrelated information, nevertheless really worth taking a search, whoa did one particular master about Mid East has got far more problerms at the same time […]
[…]Wonderful story, reckoned we could combine a couple of unrelated data, nevertheless truly worth taking a look, whoa did one particular master about Mid East has got far more problerms also […]
[…]Wonderful story, reckoned we could combine some unrelated information, nonetheless seriously worth taking a appear, whoa did 1 find out about Mid East has got extra problerms also […]
[…]Wonderful story, reckoned we could combine several unrelated information, nevertheless actually worth taking a appear, whoa did 1 discover about Mid East has got extra problerms as well […]
Dodaj komentarz