Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
GET RECOGNIZED.
Let an ISACA® certification
elevate your career.

Register today and save
Apple/Mac
DDoS Protection Powered By Verisign
Average Rating:
Rate this article:  
60-Second iOS Charger Hack Detailed

60-Second iOS Charger Hack Detailed
By Seth Fitzgerald

Share
Share on Facebook Share on Twitter Share on Linkedin Share on Google Plus

Once Apple releases iOS 7, likely this fall, iPhones and iPods will respond to USB chargers in the same way that Android devices already do. If a charger is detected as being a computer and not an ordinary charger, users will be notified and will then have to choose whether or not to "trust" the charger, which should help protect against hack attempts.
 


Computer scientists from Georgia Tech showed off their ability to hack an iOS device in less than a minute during a presentation at the Black Hat security conference in Las Vegas this week. The researchers first announced the hack was possible in June, but finally detailed how the vulnerabilities in iOS devices could be exploited.

The researchers were able to inject malware into a device by using a custom-made power adapter that had a Linux-based program installed on it. Since current iOS devices will receive commands from a charger seeing it as a regular USB host, the hack is relatively simple. Theoretically anyone would be able to hack a device as long as they can get their hands on an unlocked iPhone or iPod.

Apple has since responded to the demonstration stating that the vulnerability will be fixed in iOS 7. Following the initial announcement of the flaw, Apple introduced a patch into the beta version of the coming operating system.

Was There Really a Risk?

With all the steps necessary to carry out an attack by exploiting this type of vulnerability, it seems unlikely that someone would ever be able to do so in a real-life scenario. However, there are far more chances for this type of hack to occur than the average user realizes.

In the aftermath of recent natural disasters such as Hurricane Sandy, multiple companies stepped up to offer public phone chargers in airport terminals as well as around a devastated area. AT&T and GoPhone are two of the leading companies behind these public charging stations. GoPhone in particular has nine locations scattered around New York, and all it takes is someone to switch out a charger to hack a device.

The researchers from Georgia Tech showed that by simply plugging in a phone, they were able to switch out a regular Facebook app with a malware-infected one, resulting in the hacker being able to see whenever passwords or sensitive information were entered into the infected device.

Luckily, someone that wants to carry out this attack would require an Apple Developer account, and even though it is just a matter of paying a small fee, the number of potential hackers is limited greatly by that requirement.

The iOS 7 Fix

Once iOS 7 is released, iPhones and iPods will respond to USB chargers in the same way that Android devices already do. If a charger is detected as being a computer and not an ordinary charger, users will be notified and will then have to choose whether or not to "trust" the charger.

Between the low chance that someone would have their device hacked in this manner and the addition of a manual "trust" or "don't trust" notification, this vulnerability is not likely to cause any harm. Whether it is actually worth worrying about or not, iOS 7 should be released in the fall and will patch the vulnerability.
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Apple/Mac
1.   Apple Stock Soars Ahead of iPhone 6
2.   Popular Mailbox App Comes to Mac
3.   Apple Opens China iCloud Data Center
4.   Android Crushing Smartphone Rivals
5.   Apple Bans Toxic Factory Chemicals


advertisement
New App To Manage Time Better
Helping to organize your busy life.
Average Rating:
Apple Stock Soars Ahead of iPhone 6
New products generating lots of buzz.
Average Rating:
Popular Mailbox App Comes to Mac
Takes to-do list approach to the inbox.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
UPS Stores in 24 States Hit by Data Breach
Big Brown has been breached. UPS said that about 105,000 customer transactions at 51 of its UPS Store locations in 24 states could have been compromised between January and August.
 
Cost of Target Data Breach: $148 Million Plus Loss of Trust
The now infamous Target data breach is still costing the company -- and its shareholders -- plenty. In fact, the retailing giant forecast the December 2013 incident cost shareholders $148 million.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 

Enterprise Hardware Spotlight
Three New Lenovo PCs Aimed at Business Users
Businesses everywhere want computing solutions that do more for less money, and Lenovo has unveiled three new desktop PCs that offer solid computing at a budget-minded price.
 
Aruba Networks Handles Black Hat with Aplomb
It's not an easy job. Aruba Networks' task throughout the Black Hat USA conference in Las Vegas this month was to ensure thousands of attendees could connect without malicious attacks.
 
Compression, Deduplication Come to Violin Concerto 2200
Violin Memory has announced that data deduplication and compression capabilities are now available on its Concerto 2200 solution. Typically, users will experience deduplication rates between 6:1 and 10:1.
 

Mobile Technology Spotlight
Samsung, B&N Target Amazon with Nook Tablet
They've seen the enemy and it is Amazon. So Samsung and Barnes & Noble are teaming up to combat their common foe with a 7-inch tablet that blends Samsung’s tech, Nook’s content and e-reader platform.
 
Apple Stock Soars Ahead of iPhone 6 Launch
The imminent release of the iPhone 6 -- and maybe even an iWatch -- has sent Apple's stock soaring to new heights. Considering what else the firm could have up its sleeve -- the stratosphere may be the limit.
 
HTC Debuts Windows Phone Version of One M8 Smartphone
HTC is bringing the Windows Phone mobile OS to its flagship One M8 device -- the first time any mainstream flagship smartphone has been offered with a choice of operating systems.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.