An anonymous reader writes “Forbes is reporting that Moxie Marlinspike and Stuart Anderson’s startup, Whisper Systems, has released a public beta of two Android applications that provide encrypted call and SMS capabilities for your Android phone. In the wake of recent GSM attacks, it’ll be interesting to see if smartphones end up providing a platform that fundamentally changes the security we can expect from mobile communication.”
Read more of this story at Slashdot.
gondaba writes “Security researchers at the Intrepidus Group have hacked into Palm’s new WebOS platform, using nothing more than text messages to exploit a slew of dangerous web app vulnerabilities. The white hat hackers found that the WebOS SMS client did not properly perform input/output validation on any SMS messages sent to the handset, leading to a rudimentary HTML injection bug. Coupled with the fact that HTML injection leads directly to injecting code into a WebOS application, the attacks made possible were quite dangerous (especially considering they could all be delivered over an SMS message).”
Read more of this story at Slashdot.
An anonymous reader writes “Two researchers say they have found a way to exploit weaknesses in the mobile telecom system to legally spy on people by figuring out the private cell phone number of anyone they want, tracking their whereabouts, and listening to their voice mail.”
Read more of this story at Slashdot.
anethema writes “iPhone hacker planetbeing, from the iPhone Dev Team, has successfully ported the Android OS over to the iPhone. He is doing it on a first-generation iPhone, but others may be possible. The port is pretty functional, with data, voice, and many apps working, although it is running a bit sluggish and buggy at the moment. There appears to be much work left.”
Read more of this story at Slashdot.
Trailrunner7 writes “Security researchers have found that Vodafone, one of the world’s larger wireless providers, is distributing some HTC phones with malware pre-installed on them. The phone, HTC’s Magic, runs the Google Android mobile operating system, and is one of the more popular handsets right now. A researcher at Panda Software received one of the handsets recently, and upon attaching it to her PC, found that the phone was pre-loaded with the Mariposa bot client. Mariposa has been in the news of late thanks to some arrests connected to the operation of the botnet.”
Read more of this story at Slashdot.
Trailrunner7 sends in a threatpost.com article on exploiting flaws in the way the iPhone handles digital certificates. “[Several flaws] could lead to an attacker being able to create his own trusted certificate and entice users into downloading malicious files onto their iPhones. The result of the attack is that a remote hacker is able to change some settings on the iPhone and force all of the user’s Web traffic to run through any server he chooses, and also to change the root certificate on the phone, enabling him to man-in-the-middle SSL traffic from that phone. … Charlie Miller, an Apple security researcher at Independent Security Evaluators, said that the attack works, although it would not lead to remote code execution on the iPhone. ‘It definitely works. I downloaded the file and ran it and it worked,’ Miller said. ‘The only thing is that it warns you that the file will change your phone, but it also says that the certificate is from Apple and it’s been verified.’”
Read more of this story at Slashdot.
Symbian has completed the process of open sourcing its entire code base, in advance of its June deadline. While the release is ahead of schedule, the first phones – expected to be out early next year – will hit the market more than two years after the first Android phone became available. The code is expected to become available on the Symbian developer page on Thursday.
Rovaani writes “There is a video floating around of a Nokia N900 smartphone running the full desktop Mac OS X 10.3. From the author, Tomi Nikkanen: ‘I believe this makes the N900 the first smartphone ever to run a full version of Mac OS X (at any speed, slow or otherwise). As you can see from the heavily edited video, it took almost 2 hours to reach the “About my Mac…” window. Keep your eye on the time display as that will give you an impression of just how uselessly slow it is.’”
Read more of this story at Slashdot.
CWmike writes “A ‘monstrous’ jump in demand for Android-equipped smartphones has turned the market upside down, according to a retail pollster. Of the people who told ChangeWave Research in a mid-December survey that they planned to buy a smartphone in the next 90 days, 21% said they expected to purchase an Android phone. That number represented a 250% increase over the 6% that pegged Android as their mobile OS of choice when ChangeWave last queried consumers’ plans in September. ‘That change rivals anything that we’ve seen in the last three years of the smartphone market,’ said Paul Carton, ChangeWave’s director of research, adding that the sudden surge in consumer interest in Android had ‘roiled’ the market. ‘This is an indication that Android has finally caught consumer interest,’ added Carton, who cited the recent advertising campaign for the Motorola Droid smartphone as the reason why interest in Android has skyrocketed. Android’s leap translated into good news for Motorola and HTC, the most prominent makers of Google-powered handsets, with the former reaping most of the benefit. Motorola’s share of smartphone purchases in the next 90 days shot up from 1% in September to 13% in December. Carton tagged the company’s Droid as the reason. ‘[It's] the first increase for Motorola we’ve seen in three years,’ Carton said.” Here is the ChangeWave report.
Read more of this story at Slashdot.
ChiefMonkeyGrinder writes “Reporter Dan Simmons from the BBC’s technology show Click managed to break a mobile phone marketed as ‘unbreakable’ (video), during a demonstration at the Consumer Electronics Show in Las Vegas.” The phone can survive a 10 story fall, being submerged 20 feet for 30 mins, and you can use it to hammer a nail; but it’s no match for a British journalist.
Read more of this story at Slashdot.
