Hackers Release Their Own iPhone SDK

Apple CEO Steve Jobs announced Wednesday that his company will release a software-development kit for the iPhone in February, to allow programmers to produce third-party applications for the device. But hackers have already come up with their own software-development kit. It allows them to deliver any code they want to the iPhone, including viruses, Trojan horses and the ability to snoop on audio and video.

Developer H.D. Moore has added support for iPhone attacks to the Metasploit Framework. Metasploit is an open source hacking tool used by computer-security administrators and black hats alike to create security applications and exploits.

Moore posted sample exploits and detailed instructions this week on how to write and deliver code that can take complete control of an iPhone.

The move takes hackers one step closer to being able to remotely and surreptitiously take control of an iPhone and turn it into a surveillance device.

But it also makes it easier for white hats to develop and install custom software for their own iPhones.

Moore's tool and exploits take advantage of a vulnerability in the TIFF image-rendering library that's used by the iPhone's browser, mail and music software.

It's the same vulnerability that has allowed numerous Apple customers to unlock and customize their iPhones. But Moore's Metasploit Framework does much more, giving hackers remote shell access to iPhones that will allow them to run any code on the device.

"All you have to do is get somebody to open a TIFF image with an exploit in it ,and you've owned the phone," says Rik Farrow, a security consultant and corporate speaker who delivered a security talk to Apple employees last year.

Attackers could conceivably write code to hijack the contacts in an iPhone address book, access the list of received and sent calls and messages, turn the phone into a listening device, track the user's location, or instruct the phone to snap photos of the user's surroundings -- including any companions who may be in view of the camera lens.

Moore wrote on his blog that the iPhone is more vulnerable than other phones, because every application on the phone runs as "root." That means a bug in the calculator application, for example, could lead to full access privileges on the device.

Simply patching the TIFF vulnerability in the iPhone won't solve Apple's problem. The Metasploit Framework allows hackers to easily mix and match exploits and payloads. That means hackers can develop code for the iPhone independent of any particular security hole, then deliver by means of whatever vulnerability in the phones is known and still unpatched at the time.

Jobs said in his announcement that the company is moving slowly on releasing the official SDK because it wants to provide broad access to developers, while also protecting users from hackers and others who might have ill designs on cracking the phones. That suggests the company recognizes it made a blunder by allowing full system privileges for every application.

"Apple is savvy enough to realize that this is really terrible," says Farrow. "And it's going to take them until February to actually be able to release the SDK, because they're going to have to do basic things to the cellphone operating system itself to make it secure. So we're not just talking about a software-development kit, we're talking about fixing something that has major flaws in the security of it as it exists."

But Moore and Farrow say to fix the problem, the company will need to do more, such as create precise rules in the system to limit what a malicious application can do on the phone.

"From what I've seen of the design of the phone, it doesn't look like an easy task," Moore says.

So why didn't Apple do this before releasing the phone?

"Apple wants to sell really fancy, glitzy appliances that have great consumer appeal," Farrow says. "And security has never been one of those things that has great consumer appeal. So Apple is totally correct to ship out an insecure product, because people snap them up. But at the same time I'm sure that there were engineers at Apple saying, 'This is totally insane. We are going to get so hammered for this.'"

"There are some very clue-ful people there. But my impression is that they have to work very hard to make security a priority."

Apple did not respond to a request for comment Wednesday.
Link

Sprint, HTC Unveil Touch, The Latest IPhone Rival

NEW YORK -(Dow Jones)- Sprint Nextel Corp. (S) and High Tech Computer Corp. ( 2498.TW) unveiled the Touch, a touchscreen smartphone they hope can take on the iPhone.

It's the latest in the wave of touchscreen phones unveiled in the aftermath of Apple Inc. (AAPL) and carrier partner AT&T Inc's (T) successful launch - Verizon Wireless also unveiled two phones utilizing the technology. For HTC, it marks an unusually splashy debut for a handset maker that typically leaves its logo off the product. The Touch, meanwhile, fills out Sprint's portfolio of smartphones.

"This device is for someone who can't live without either the (professional or personal) world," said Jason Cole, product manager at Sprint.

The Touch is positioned closer to the higher end of its range of smartphones with a $249 price tag with a two-year contract. Late last month, Sprint unveiled the Palm Inc. (PALM) Centro for $99, giving it a low-end offering. Research in Motion Ltd.'s (RIMM) Blackberry line and the older Palm Treos lie in the middle.

Sprint, which is among the most aggressive carriers in pushing data services, wants to get more smartphone and feature phone products in its line-up because it encourages the use of services beyond simple voice.

This is among the higher profile launches for Taiwan-based HTC, which has long provided smartphones that carried the brand of the carriers it supplies. It is the largest provider of smartphones using Microsoft Corp.'s (MSFT) Windows Mobile operating system. The Touch, however, carries the HTC logo in its back, a signal that it wants to make a name for itself.

"We want to build some of HTC value over time," said Peter Chou, chief executive of HTC. "We want to show that the HTC brand mean a quality device."

While it's uncertain how well the Touch will do in the U.S. - it's interface isn't as elegant as the iPhone, despite Chou's assurances that they keyboard function is superior - the device has already done well in Asia and Europe. The Touch has already sold 800,000 units overseas since its debut in June.

The Touch actually came out overseas before the iPhone hit the market in the U.S. Both devices have pushed the focus on touchscreen technology as a user interface.

"I believe this will become quite a trend," Chou said of future phones.

Verizon Wireless, jointly owned by Verizon Communications Inc. (VZ) and Vodafone Group Plc (VOD), recently unveiled the Voyager and Venus by LG Electronics Inc. (066570.SE), which feature similar technology.

On the iPhone, Chou said it is an entertainment device with a phone. In comparison, he considers the Touch a high-end phone with entertainment capabilities, touching upon HTC's experience in creating cellphones.

While comparisons to the iPhone are inevitable, HTC said the phone has been in development for two years.
Link

Apple Promises Third-Party SDK for iPhone, iPod Touch

Apple on Oct. 17 announced that it will provide a software development kit for third parties to create applications for the company's popular iPhone and iPod Touch.
"We want native third-party applications on the iPhone, and we plan to have an SDK in developers' hands in February. We are excited about creating a vibrant third-party developer community around the iPhone and enabling hundreds of new applications for our users," read a posting signed by Apple CEO Steve Jobs on company's Web site.

Previously, Apple has limited non-Apple iPhone development to "Web 2.0" implementations for use only online, and in the iPhone's Safari Web browser.

That brought criticism that has caused some pushback from developers. Safari-encased Web applications cannot be used without a live Internet connection, and do not share prime application icon space in the iPhone's main window.

Some developers have relied on hacks that "unlock" or "jailbreak" iPhones, such as
The recent iPhone 1.1.1 update eliminated many of the bugs that enabled this. In response, some customers accused Apple of intentionally "bricking" modified iPhones and one class-action lawsuit about this was filed in California.
Apple did not respond to inquiries seeking more details on the upcoming SDK and asking why it took so long to respond to developer demands for an SDK, which could have prevented a lot of complaints and hard feelings in the market.

But the Apple's online Hot News letter stated that, "It will take until February to release an SDK because we're trying to do two diametrically opposed things at once—provide an advanced and open platform to developers while at the same time protect iPhone users from viruses, malware, privacy attacks, etc."


In addition, the letter gave the approving example of how Nokia requires potential phone applications to have an approved "digital signature" before it can be loaded onto a Nokia handset.

Calling it a "step in the right direction." the letter said that Apple is "working on an advanced system which will offer developers broad access to natively program the iPhone's amazing software platform while at the same time protecting users from malicious programs."
This does not ensure that developers will need to step through an approval and registration process with Apple, or AT&T, Apple's cell carrier partner for the iPhone, though this partnership is irrelevant with the iPod Touch.

It is worth noting, however, that one of the new features of Leopard, the new version of Apple's operating system due on Oct. 26, is signed applications.

This allows developers, including Apple and third parties, to include a digital signature with applications. According to Apple, this enables the OS to verify the identity of each application, ensuring that corrupted or hacked versions will not open.
Link