Apple Seeks New Sheriff to Lock Up IPhones

Just as a new hack, blacksn0w, promises to unlock iPhones with the latest Apple software from AT&T's wireless network, Apple is looking for a sheriff to lock the smartphones back up again, permanently.

By John Cox

Thu, November 05, 2009Network World Just as a new hack, blacksn0w, promises to unlock iPhones with the latest Apple software from AT&T's wireless network, Apple is looking for a sheriff to lock the smartphones back up again, permanently.

Motorola Droid vs. Apple iPhone 3GS: finally, a contender? 

A job posting on Apple corporate Web site seeks a security manager for the iPhone platform to lead a team focused on secure booting and installation of the operating system, cryptographic services, partitioning and hardening its internal security domains, and risk analysis of security threats.

The "liberation movement" for iPhone poses special issues for enterprises that are adopting the iPhone in unprecedented numbers, despite the fact that Apple provides virtually no security or management infrastructure for the popular device. With jailbroken phones, enterprise users could load applications that might, even unintentionally, threaten corporate data or back-end Exchange servers, for example. Unlocking the phone from AT&T's authorized network makes it hard to track, monitor and optimize wireless costs and could open the enterprise to legal problems.

It's not clear from the online job post whether this is a brand new position or Apple is seeking a replacement for an existing, or former, employee.

Hardening the iPhone OS can address a whole range of potential issues, but almost surely involves preventing both jailbreaking – freeing the iPhone from dependence on the App Store (now at 100,000 apps) and thereby allowing users to load their own software programs – and unlocking – cutting the cord to exclusive carrier AT&T and letting the iPhone run on other GSM networks.

The liberation movement comes to a peak this week with the release of Blacksn0w, a free program from ace iPhone hacker George Hotz, known as Geohot. It offers a baseband unlock of the latest iPhone OS Version, 3.1.2 and the current standard 05.11.07 cellular modem firmware.

One iPhone owner is even touting the new hacking utility as a value-added feature to attract bids for his used 16GB iPhone 3GS model on eBay

According to another hacking site, iPhone Dev Team, Hotz exploits a known crash (manipulating the AT+XEMN command) to create a heap overflow, through which Hotz was able to inject code that results in a software unlock of the iPhone's SIM on the latest versions of the OS and baseband firmware loads.

The Dev Team post notes that users with the older 04.26 baseband firmware have been able to unlock using other programs, such as ultrasn0w and purplesn0w. "Whether or not you choose to update your baseband solely to use the new unlock is a personal choice, but so far there are no advantages to doing so (and remember you can't come back to 04.26 after you've gone to 05.11)," the post cautions.

Consumer Electronics

Loading...
Mobile MarketSpace
Retooling IT for a Mobile Workforce
Check out this research note from IDC for guidance. Learn more »
The Continued Evolution of Wireless Mobility
Learn about the two leading 4G technologies, the current status of deployed 4G networks, and how to manage long-term 4G costs Learn more »
Thinking About Deploying Mobile Broadband?
Explore lessons and best practices experienced by companies that have deployed mobile broadband to their workforce. Learn more »
Improving Healthcare Delivery with Role-Enabled Communications
Today, more healthcare IT organizations than ever are interested in implementing UC applications in a planned, cost effective manner. In order to meet their tremendous potential for improved healthcare delivery requires far more than UC; it requires role-enabled communications. Learn more »
Mobility Enables True Unified Communications
Deploying UC in conjunction with a mobility solution can increase employee productivity and improve customer service enabling workers to more easily collaborate from disparate locations. Learn more »
Making Consumer TwoFactor Authentication Cost-Effective
Offering your customers the security of two-factor authentication can help you boost your online business. Learn more »
Solve Five Key IT Security Challenges
Get a high level of security with minimal user impact. Learn more »
 
SPONSORED LINKS
 

Top 10 Lessons Learned for Corporate 3G Mobile Broadband Deployments

Mobile Security: The Essential Ingredient for Today's Enterprise

White Paper: Legacy Tools: Not Built for the Helpdesk

Learn how to maximize the mobile web opportunity

Upgrading to VMware vSphere with vWire

Maximizing website Return on Information with high-quality search

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: Improve Agility with Operational Responsiveness

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Keeping Your Members Safe from Online Scams and Predators

The Total Economic Impact of Network Security Intrusion Prevention

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

4G Revisited. The Continued Evolution of Wireless Mobility.

White Paper: 5 Best Practices for Smartphone Support

Five-Step Mobility Management Plan

White Paper: Visibility and the New Normal of Mobile Work

Return on Information: Google Enterprise Search pays you back

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths

White Paper: Managed Security for a Not-So-Secure World

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

Seven Design Requirements for Web 2.0 Threat Protection

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

 
 
RESOURCE CENTER