Charlie Miller on Monday discovered that there is a flaw in the security system for iOS. The app was able to run arbitrary codes. All the codes that are necessary for the standards of Apple were submitted and they were not able to identify the bypass.
He had found a bug that would allow the app to break the restrictions and access any data on the iOS. Instead of just discovering it, Miller decided to test out this bug. Miller developed an app containing the restricted codes and later the app was accepted and was available at the App Store.
As intended the app was able to bypass the security breach and contact the remote computer which allowed it to send and receive personal data on the iOS. Furthermore it was also able to play sounds, make the phone vibrate. Unknown commands were being executed from the remote computer. The app was also able to reach out and affect other apps by shutting them down maliciously.
As soon as the news reached Apple; Miller’s developer license was revoked. “This letter serves as notice of termination of the iOS Developer Program License Agreement… between you and Apple,” the email read. “Effective immediately.”
(Via Forbes)
If you found this post useful, hopefully hit the +1 (recommend) button ?
