iPhone vulnerable to remote attack on SSL

[Glenn]

Apple's iPhone is vulnerable to exploits that allow an attacker to spoof web pages even when they're protected by the SSL, or secure sockets layer, protocol, a security researcher said.

The fault lies in a feature that makes it easy to configure large numbers of iPhones so they meet an organization's IT policies, said Charlie Miller, a researcher at Independent Security Evaluators. Not only does the provisioning feature work over the internet, it can be tricked into accepting malicious configuration files.

http://www.theregister.co.uk/2010/02/02/iphone_malicious_config_attack/

Most won't fall for it, but it will catch out some poor souls, clicking on the links.

[Gary]

Apple's iPhone is vulnerable to exploits that allow an attacker to spoof web pages even when they're protected by the SSL, or secure sockets layer, protocol, a security researcher said.

The fault lies in a feature that makes it easy to configure large numbers of iPhones so they meet an organization's IT policies, said Charlie Miller, a researcher at Independent Security Evaluators. Not only does the provisioning feature work over the internet, it can be tricked into accepting malicious configuration files.

http://www.theregister.co.uk/2010/02/02/iphone_malicious_config_attack/

Most won't fall for it, but it will catch out some poor souls, clicking on the links.

Apple's iPhone is vulnerable to exploits that allow an attacker to spoof web pages even when they're protected by the SSL, or secure sockets layer, protocol, a security researcher said.

The fault lies in a feature that makes it easy to configure large numbers of iPhones so they meet an organization's IT policies, said Charlie Miller, a researcher at Independent Security Evaluators. Not only does the provisioning feature work over the internet, it can be tricked into accepting malicious configuration files.

http://www.theregister.co.uk/2010/02/02/iphone_malicious_config_attack/

Most won't fall for it, but it will catch out some poor souls, clicking on the links.

I never use my phone for ssl stuff never have and never will trust the mobile web for that

[Niall]

I'd be lucky if my fat fingers could select the links. I keep missing

[Gary]

I'd be lucky if my fat fingers could select the links. I keep missing

Double tap the screen and make the page bigger 

[Niall]

I do