Posted on 07/17/2007 8:48:47 AM PDT by RS
"If capable of luring iPhone users to malware sites or legitimate sites infected with cross-site scripting attacks, Hoffman said, attackers could infect the devices with spyware that could allow them to track calls, redirect calls placed by a user, place unauthorized calls from the browser, program the device to make repeated calls for an infinite amount of time, or prevent the phones from calling at all."
"The researcher with SPI (which was recently acquired by HP) said that the issue was reported to Apple on July 6, however, the iPhone maker has yet to address the issue in any form of public statement."
(Excerpt) Read more at weblog.infoworld.com ...
http://portal.spidynamics.com/blogs/spilabs/archive/2007/07/16/SPI-Labs-advises-avoiding-iPhone-feature.aspx
Prepare to get flamed heavily.
Seems like it would be pretty easy for some iphone owning FReepTech to use the code from the link and try it out.
But you’re right, as the bringer of bad news - the flames will be flying LOL
Since I don’t own one nor have the desire to, I’m going to anti-flame you.
Another site with more detail on the same subject -
http://extra.fortifysoftware.com/blog/2007/07/web_vulnerabilities_in_the_age.html
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.