Happy iPhone 5 day! As many of you (me included) await your phone to arrive today I also want to send some news regarding to a security team that has been able to hack the Apple iOS operating system for the iPhone 4S (and presumably the iPhone 5, too) via a drive-by download technique.
The malicious code — technically, a drive-by download — took only a few weeks to create and can be embedded anywhere on a website to work, Pol said.
When placed in a graphic or advertisement on a blog visited by Mobile Safari, the code figures out a workaround for Safari's sandboxing and signing mechanisms.
Users don't need to do anything but visit the booby-trapped page for the malware to work. While the attack is able to steal a lot of sensitive data, email and SMS messages are separately encrypted and are not vulnerable to this particular attack.
In short, the hack isn't public knowledge as of yet and the main thing to remember is to not click or open any links or emails that you don't know are safe. Have a great weekend everyone!
