Quote:
Originally Posted by
MediaRocker 
I think that he was completely justified if he told apple and they refused to listen...but only in that context.
And it's good that it is patched, but nonetheless this proves that no OS is infallible, which the majority of the apple community unfortunately fail to recognize.
I am pretty certain there are other security risks that we don't know about yet in the OS...
Edit: And sorry that this got reposted. I searched and apparently it had a different article title.
They didn't refuse to listen, he just didn't wait long enough for them to release it before announcing it before the entire world.
Quote:
Originally Posted by
MediaRocker 
Here's the kicker....
It shouldn't have happened anyway. The app should NOT have been allowed to get through, the hole here lies in how thoroughly they go through apps before they approve them.
It's a telling tale that says that Apple devices and the Apps Store is just as susceptible to compromise as other OS's.
Yes he got fired, but that's not really whats important here. It's HOW it happened and got through unnoticed. It cost him his job, but his proof of concept is genius.
Methinks he got tired of hearing how "secure" iOS was and went out to prove it's susceptibility. And he did. Why else would someone risk their job like that releasing an exploit to the public?
Who knows why it did? Perhaps they allowed it without much screen purely because he was who he was? It was a pretty simple app after all. (Not saying they did.) And anyway, the code itself was hidden inside the app.
And no, iOS isn't as susceptible to compromise as other OS's. It's far more secure, and you don't see issues very often yet alone malware or actual threats.
Quote:
Originally Posted by
MediaRocker 
This thread will only devolve if you let it. However, his comment is spot on considering that the vast majority of Apple users say that iOS is the most secure OS out there. This vulnerability perfectly envisions a flaw in the Appstore approval process, and at one point in time, an exception in Apple's iOS code. It supports the notion that iOS isn't the gods gift of OS's, and that like all OS's has holes, exceptions, and problems which may not be currently apparent. Who know's? Maybe it's friggin perfect now that this exception has been repaired!
The thing is no one knows for sure, so those making the ignorant comments spouting that iOS is the best platform out there are in fact sheep because they are willing to buy into the guise that apple is perfection.
No bias included. Now let's let not let this thread devolve. Shall we?
You seem to have misread my comment, I did not call him a genius. I said his proof of concept was genius. The point was to discern a vulnerability and how easily it could occur, and it did exactly just that. The way he went about releasing it was all wrong, I wouldn't have announced it to the public . Learn how to read before making comments like that.

Had you read, you would have noticed I did not condone his actions in releasing this information publicly. (extenuating circumstances omitted)
Nevertheless it's out there that the iOS App store is just as exploitable as the Android Marketplace. As expected. (people seem to be missing the entire point.)
It is more secure than Android, I don't know about WebOS or BlackBerry OS (i.e, on PlayBook). Unlike Android, you just don't hear of exploits, malware, or any kind of threat, at all. Google could cut down on most of those with a stricter store, but they've not done it yet. I'm not saying iOS is infallible, but it's pretty good.
It's not just as exploitable as the Android Marketplace, this is one app, one time and we're talking about a security researcher testing something rather than actual malware. The app he made was I think quite simple, and he hid code for the remote downloading. They may've just passed it off or maybe like I said given him a less thorough screening because he's a security expert and/or possibly because he's been a developer for a long time (if that's true).