Metasploit 3.7 Hacks Apple iOS 68
An anonymous reader writes "HD Moore is at it again. This time the famous open source security researcher has set his sights on exploiting Apple iOS. The Metasploit 3.7 release includes 35 new attack modules in total."
It's time (Score:3, Insightful)
Re: (Score:3)
Re: (Score:1)
Because Apple hasn't attracted any interest in the past decade during its meteoric rise in popularity ? Please. The year of the "Mac Attacks" had been coming for almost as long as the year of the Linux desktop.
Re:It's time (Score:4, Informative)
Because Apple hasn't attracted any interest in the past few years during its moderate rise in popularity?
There, fixed that for you. Apple's have only gotten out of the 2% of computers in the last 2 or 3 years. Even now they struggle to get 5% worldwide.
/.er will always point out, malware is a business and business take a long time to react to changes in the marketplace. Malware attacks on phones are new, very new as there was
Now back onto topic, as a clued in
A) Never a market for phone malware.
B) Phones were never powerful enough to be useful.
C) Too many different types of phones to make any attack worthwhile. Cost would have been way too high to get every single Symbian model out there.
Take note of the last one. IOS drops that cost a lot, making malware on phones economically viable. Further more, IOS has proven itself to be quite vulnerable in the past, you do know that jailbreaking is done by exploiting a vulnerability dont you. Feel free to use the "jailbreak me" PDF vulnerability as an example. The only reason it hasn't been exploited is because there's more profit in Windows malware.
Claiming you are automagically protected when you've never even been attacked is naive at best. It's like Lisa's (Simpson) tiger repelling rock, you cant use the fact that there are no tigers around the rock as proof of it's tiger repelling abilities.
Re: (Score:2)
Apple's have only gotten out of the 2% of computers in the last 2 or 3 years. Even now they struggle to get 5% worldwide.
This Ars Technica article [arstechnica.com] has Apple at 10% market share in the US, this one [pingdom.com] has it at 14%. That's a lot of macs. Apple is one of the few companies that have consistently seen their market share grow the last few years in a floundering market.
Then there's Apple's strength in certain niches, like on college campuses [dailyprincetonian.com] :
"According to the Office of Information Technology (OIT), 45 percent of computers purchased this year were Macs, more than in any previous year. In 2003, when this year's seniors arrived on camp
Re: (Score:1)
This is off-topic, of course, but I want to chime in. I predict that Apple is about to see a meteoric rise in popularity for their desktop operating system. I have been using Ubuntu since Windows 98 stopped getting security updates, July 2006. In my latest computer upgrade, I decided to try OS X because I have found my iPod and iPad so easy to use (and I wanted to run iTunes). I built a hackintosh with the feeling that I could just install Ubuntu if it didn't work out.
I hated it. I couldn't get used to anyt
Metasploit 3.7 Hacks Apple iOS (Score:5, Insightful)
No, it doesn't.
It just has something to do after you broke in yourself now.
Re: (Score:2)
Re:Metasploit 3.7 Hacks Apple iOS (Score:5, Interesting)
Correct. Slashvertisements are annoying enough, at least they should be reasonably accurate. This one falls into the "sensationalist blurb" category.
Re: (Score:2)
I wish I knew what this +5 insightful comment meant.
Re: (Score:2)
Re: (Score:2)
Wait, you're telling me hackers have figured out that, if they have a password to a system, they can do stuff on that system? O. M. G. They're gonna be running nuts over all sorts of computers and systems out there.
Re: (Score:2)
Darn. I thought there were 35 ways to jailbreak the iPhones these days. Perhaps one of them would work on the iPad2 (which is still lacking a jailbreak).
(Jailbreaking relies on vulnerabilities typically)
Sites, Sights (Score:4, Informative)
"Set his sites"? really?
Re:Sites, Sights (Score:5, Insightful)
Illiteracy != typo
Please stop misusing the word typo; it means typographic error, not a sad ignorance of the language you are using to communicate.
Re: (Score:1)
Not ignorance... carelessness.. It's happening all over the place now... I find more errors like this on mainstream news sites every day. Professional writers are getting as sloppy as your average Slashdot poster.
Re: (Score:2)
Damn you! DAMN YOU TO HELL! (Score:3)
Damn you for implying that timothy should proof-read submissions! Heretic!
Re: (Score:2)
Did you're mom ever tell you knot two luck directly into the son?
FTFY.
Re: (Score:2)
>luck directly into the son.
You think that "look" and "luck" are homophones? Really?
You're concerned about "look" and "luck", but not "two" and "to"? Really?
That being said, look/luck depends where you're from, and hence, what accent you speak with.
Re: (Score:1)
Did your mom ever tell you not to look directly into the son?
She did.
So once when I was six, I did. At first the brightness was overwhelming, but I had seen that before. I kept looking, forcing myself not to blink, and then the brightness began to dissolve. My pupils shrunk to pinholes and everything came into focus and for a moment I understood.
Re:Sites, Sights (Score:5, Funny)
Let's eat, Grandpa!
Let's eat Grandpa!
Grammar saves lives.
--
BMO
Re: (Score:1)
Re: (Score:2)
It's that big company that screwed over Ripley?
Re: (Score:2)
The advent of spelling checker allows semi-retarded people to appear marginally intelligent. Except in cases like these. Without spelling checker, Timothy would be fucking things up every third word.
Really? That reads like one of those Google search results where some bot on a clickthrough search site fits a common search query into the phrase "Find _____ on eBay!"
Find start date of WWI on eBay!
Find natural hair colour Britney Spears on eBay!
Find Microsoft Exchange vulnerability on eBay!
Not an iOS Exploit In And Of Itself (Score:5, Informative)
If I'm reading this right, the "exploit" is that Metasploit can now read unencrypted backups. I'm not sure how this is an exploit (the backup DB format isn't much of a secret), but there you go.
If you want a real exploit, look into the "i0n1c" exploit being used to jailbreak phones on the latest OS.
Re: (Score:3)
Exactly. It's not that there are no iOS exploits out in the wild. As far as I know there's no remote exploit out there, though. You need physical access to the device or its backup (and then restore from that which requires physical access).
Re: (Score:2)
Since when does the ability to extract an unprotected archive format count as hacking?
Hack, Hackers, Hacking - those words have lost their original meaning (much like Expert has).
HAM?!? (Score:1)
If I opened my neighbours fridge, I'd start by taking his beers!
Re: (Score:2)
*Knowing full well, you're obviously an Apple hater fanboi, and feeding said troll*
The more closed, the better.
Better check your facts. Here's a site that can help.
http://opensource.apple.com/ [apple.com]
Go find any other software company that makes it this easy to find *all* their contributions to open source.
Re: (Score:2)
Also, did you LOOK at that page?
Did you? Click on the links.
Re: (Score:2)
You're a fucking moron who can't even click on links.
Here's whats under the iOS 4.0 link:
JavaScriptCore-576 BSD LGPL
WebCore-737.5 BSD LGPL
cctools-782 APSL GPL
gcc-5664 GPL
gdb-1469 GPL
gnumake-126.2 GPL
keymgr-22 GPL
ld64-97.14 APSL
libiconv-26 LGPL
libstdcxx-39 GPL
Yeah, real Apple specific.