Comments on: iPhone Exploit May Undermine App Store Security, Lets Devs Update And Run Arbitrary Code http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/ Startup and Technology News Thu, 26 Nov 2009 17:43:31 -0800 hourly 1 By: iPhone & iPhone 3G News Blog - Apple iPod + Mobile Phone » Arbitrary Code on iPhone? http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2650404 iPhone & iPhone 3G News Blog - Apple iPod + Mobile Phone » Arbitrary Code on iPhone? Tue, 10 Mar 2009 16:16:18 +0000 http://www.techcrunch.com/?p=27477#comment-2650404 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | Small Business System http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2621032 Arbitrary Code on iPhone? | Small Business System Tue, 10 Feb 2009 13:03:56 +0000 http://www.techcrunch.com/?p=27477#comment-2621032 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | MacWorldGame http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2617974 Arbitrary Code on iPhone? | MacWorldGame Fri, 06 Feb 2009 14:34:11 +0000 http://www.techcrunch.com/?p=27477#comment-2617974 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: IPhone App Reviews - Arbitrary Code on iPhone? | iPhone Daily http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2608580 IPhone App Reviews - Arbitrary Code on iPhone? | iPhone Daily Wed, 28 Jan 2009 06:03:22 +0000 http://www.techcrunch.com/?p=27477#comment-2608580 [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | iPhone Daily http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2598470 Arbitrary Code on iPhone? | iPhone Daily Mon, 19 Jan 2009 13:12:23 +0000 http://www.techcrunch.com/?p=27477#comment-2598470 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | Apple iPhone 3G http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2594093 Arbitrary Code on iPhone? | Apple iPhone 3G Wed, 14 Jan 2009 23:11:56 +0000 http://www.techcrunch.com/?p=27477#comment-2594093 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | Blogicity, a daily mirror of all the best http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2586694 Arbitrary Code on iPhone? | Blogicity, a daily mirror of all the best Tue, 06 Jan 2009 20:14:36 +0000 http://www.techcrunch.com/?p=27477#comment-2586694 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | Mobile Spot 24h/day http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2577693 Arbitrary Code on iPhone? | Mobile Spot 24h/day Fri, 26 Dec 2008 17:23:16 +0000 http://www.techcrunch.com/?p=27477#comment-2577693 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Apple iPhone Apps - Arbitrary Code on iPhone? | Apple iPhone App Reviews | iFones.com http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2574028 Apple iPhone Apps - Arbitrary Code on iPhone? | Apple iPhone App Reviews | iFones.com Sun, 21 Dec 2008 15:59:02 +0000 http://www.techcrunch.com/?p=27477#comment-2574028 [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: IPhone App Reviews - Arbitrary Code on iPhone? | Apple iPhone App Reviews | iFones.com http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2573220 IPhone App Reviews - Arbitrary Code on iPhone? | Apple iPhone App Reviews | iFones.com Sat, 20 Dec 2008 03:12:24 +0000 http://www.techcrunch.com/?p=27477#comment-2573220 [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Arbitrary Code on iPhone? | World Trends http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2570672 Arbitrary Code on iPhone? | World Trends Thu, 18 Dec 2008 03:06:25 +0000 http://www.techcrunch.com/?p=27477#comment-2570672 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: PlanetCellPhone Blog » Blog Archive » Arbitrary Code on iPhone? http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2568653 PlanetCellPhone Blog » Blog Archive » Arbitrary Code on iPhone? Tue, 16 Dec 2008 15:03:14 +0000 http://www.techcrunch.com/?p=27477#comment-2568653 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: chronic http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2553948 chronic Wed, 03 Dec 2008 01:12:50 +0000 http://www.techcrunch.com/?p=27477#comment-2553948 actually, the reason it will not "rm -rf /" is because /dev/disk0s2, which is the place that AppStore apps run, is mounted as nosuid. that means any code running on it will not be able to get root access. actually, the reason it will not “rm -rf /” is because /dev/disk0s2, which is the place that AppStore apps run, is mounted as nosuid. that means any code running on it will not be able to get root access.

]]> By: The Palermo Project » Blog Archive » iPhone App Store: business case analysis http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2553475 The Palermo Project » Blog Archive » iPhone App Store: business case analysis Tue, 02 Dec 2008 17:29:36 +0000 http://www.techcrunch.com/?p=27477#comment-2553475 [...] selection and « exclusion » policies, the lack of consistency of applications' ergonomy or the recent security issues. These, however, do not seem to slow down the business... [...] [...] selection and « exclusion » policies, the lack of consistency of applications’ ergonomy or the recent security issues. These, however, do not seem to slow down the business… [...]

]]> By: iPhone India, India iphone, iphone news and iphone prices http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2544955 iPhone India, India iphone, iphone news and iphone prices Mon, 24 Nov 2008 10:35:59 +0000 http://www.techcrunch.com/?p=27477#comment-2544955 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Hans Gerwitz http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2543069 Hans Gerwitz Sat, 22 Nov 2008 03:48:24 +0000 http://www.techcrunch.com/?p=27477#comment-2543069 OMG, I'd better go remove that happy little elves game! OMG, I’d better go remove that happy little elves game!

]]> By: IPhone App Reviews - Arbitrary Code on iPhone? | iFones.com Apple iPhone 3G News http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2539495 IPhone App Reviews - Arbitrary Code on iPhone? | iFones.com Apple iPhone 3G News Wed, 19 Nov 2008 15:22:54 +0000 http://www.techcrunch.com/?p=27477#comment-2539495 [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Apple iPhone Apps - Arbitrary Code on iPhone? | iFones.com Apple iPhone 3G News http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2538856 Apple iPhone Apps - Arbitrary Code on iPhone? | iFones.com Apple iPhone 3G News Wed, 19 Nov 2008 00:03:58 +0000 http://www.techcrunch.com/?p=27477#comment-2538856 [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] Code on iPhone? According to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: iPhone and Facebook apps and exploits | ITblackbook http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2533871 iPhone and Facebook apps and exploits | ITblackbook Fri, 14 Nov 2008 06:43:04 +0000 http://www.techcrunch.com/?p=27477#comment-2533871 [...] other news, the writers and commenters at TechCrunch have been having a lively debate over whether a possible iPhone exploit (possibly allowing developers to update code without [...] [...] other news, the writers and commenters at TechCrunch have been having a lively debate over whether a possible iPhone exploit (possibly allowing developers to update code without [...]

]]> By: iPhone and Facebook apps and exploits :: The Future of the Internet — And How to Stop It http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2533817 iPhone and Facebook apps and exploits :: The Future of the Internet — And How to Stop It Fri, 14 Nov 2008 05:25:37 +0000 http://www.techcrunch.com/?p=27477#comment-2533817 [...] other news, the writers and commenters at TechCrunch have been having a lively debate over whether a possible iPhone exploit (possibly allowing developers to update code without [...] [...] other news, the writers and commenters at TechCrunch have been having a lively debate over whether a possible iPhone exploit (possibly allowing developers to update code without [...]

]]> By: The Palermo Project» Archive du blog » iPhone App Store : démontage de la planche à billets http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2533396 The Palermo Project» Archive du blog » iPhone App Store : démontage de la planche à billets Thu, 13 Nov 2008 20:45:40 +0000 http://www.techcrunch.com/?p=27477#comment-2533396 [...] d'applications opaque, les écarts de niveau des applications au plan ergonomique ou de récents problèmes de sécurité. Cependant, cela ne freine pas ce succès… [...] [...] d’applications opaque, les écarts de niveau des applications au plan ergonomique ou de récents problèmes de sécurité. Cependant, cela ne freine pas ce succès… [...]

]]> By: Arbitrary Code on iPhone? | iphone-zone.co.cc http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2532759 Arbitrary Code on iPhone? | iphone-zone.co.cc Thu, 13 Nov 2008 09:01:04 +0000 http://www.techcrunch.com/?p=27477#comment-2532759 [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...] [...] to TechCrunch, it is possible for an existing iPhone App Store developer to put a hack that will allow the [...]

]]> By: Hack gives iPhone Developers Access to Dynamic Launch Images | iPhone 3G Hacked http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2532568 Hack gives iPhone Developers Access to Dynamic Launch Images | iPhone 3G Hacked Thu, 13 Nov 2008 04:37:56 +0000 http://www.techcrunch.com/?p=27477#comment-2532568 [...] Jason Kincaid of TechCrunch had initially believed that it was a serious security flaw as he felt it could be used as an exploit to update and execute arbitrary code regardless of content whenever the developer chooses to do so. Some experienced iPhone developers also seemed to agree with Jason’s analysis. However he has later clarified that “it not as serious an issue as we thought - while it is a legitimate bug”. [...] [...] Jason Kincaid of TechCrunch had initially believed that it was a serious security flaw as he felt it could be used as an exploit to update and execute arbitrary code regardless of content whenever the developer chooses to do so. Some experienced iPhone developers also seemed to agree with Jason’s analysis. However he has later clarified that “it not as serious an issue as we thought – while it is a legitimate bug”. [...]

]]> By: mikeash http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2531889 mikeash Wed, 12 Nov 2008 18:31:33 +0000 http://www.techcrunch.com/?p=27477#comment-2531889 Other easy ways to bypass Apple's security screening: - Have your app ping your web server when it starts. If the ping returns "0", display a game with happy little elves. If the ping returns "1", eat the user alive. Ensure that the server always returns "0" while your app is being reviewed by Apple. - Read the current date. For one month, display the happy little elves. After a month has gone by, eat the user alive. Apple's vetting is not nearly as thorough as people seem to think it is. You don't need to pull off clever security hacks to run unsigned code. Just hide the evil functionality, and Apple will sign it for you! Other easy ways to bypass Apple’s security screening:

- Have your app ping your web server when it starts. If the ping returns “0″, display a game with happy little elves. If the ping returns “1″, eat the user alive. Ensure that the server always returns “0″ while your app is being reviewed by Apple.

- Read the current date. For one month, display the happy little elves. After a month has gone by, eat the user alive.

Apple’s vetting is not nearly as thorough as people seem to think it is. You don’t need to pull off clever security hacks to run unsigned code. Just hide the evil functionality, and Apple will sign it for you!

]]> By: iPhone Exploit Lets Devs Update And Run Arbitrary Code | Unlock Iphone for FREE http://www.techcrunch.com/2008/11/11/iphone-exploit-undermines-app-store-security-lets-devs-update-and-run-arbitrary-code/comment-page-1/#comment-2531726 iPhone Exploit Lets Devs Update And Run Arbitrary Code | Unlock Iphone for FREE Wed, 12 Nov 2008 16:55:06 +0000 http://www.techcrunch.com/?p=27477#comment-2531726 [...] Read more here.. If you enjoyed the article, why not subscribe? Posted to » unlocked iphone news Share and Save [...] [...] Read more here.. If you enjoyed the article, why not subscribe? Posted to » unlocked iphone news Share and Save [...]

]]>