Viruses Find A New Host: Cell Phones
An anonymous reader writes "A NYTimes article (free reg) describes the dangers posed by viruses as 3G and text-messaging become more common, inluding an incident in '01 where numerous phones in Japan began calling 110 (equivalent to 911 in the U.S.). Wired mentions 13M vulnerable phones in Japan alone." (And that was a few years ago.)
New York Times Article Registration Free
Silly problems will arise whether or not an API is present or not. Murphy's Law and all.
The only thing one prevents by locking out developers is a steady pace of progress.
As cell phones became more powerful (and more like PDA's and computers) this was bound to happen. Unfortunately, with the adoption of GSM in the United States, that means the virus in question can be spread to US phones with the same vulnerability, as 911 is equivalent to 110 and 08 on most GSM carriers.
This is also a small part of the reason that the push was made for Java enabled phones, as there is less of a security risk (albeit still a small one) in running Java apps due to the construction of the language.
There is a somewhat heartening end to this story though. Sprint and other wireless carriers provision signed updates to phone firmware all the time over the air. Most times these updates include communications updates for new versions of software running in the MTSO or in the towers, but this sets a welcome precedent: Security updates can be pushed out to all phones of a particular model when they are first released. This way, a carrier will have no customers lingering months or years behind on updates (a la Windows XP and Windows Update) because the customers do not have to have the presence of mind to update manually, nor do they get to pick and choose what updates they want and what updates they don't.
Corporation, n. An ingenious device for obtaining individual profit without individual responsibility. - Ambrose Bierce
DoCoMo blocks about 55 percent of the one billion text messages that reach its servers each day because of suspicious return addresses or attachments. Another 26 percent of those messages are blocked by DoCoMo users who have programmed their handsets to turn back unwanted mail or spam.
Looks like the state of the cell phone is getting close to the dire state of the net in Japan.
And the 3G revolution is now coming our way.
Be afraid. Be very afraid. Especially those with a pay-for-incoming-SMS/e-mails (or pay-for-received-data) scheme.
just like how all the software companies should be held liable for thier faults. The only thing is no matter how good a programing job one does there is always a way around it.
I couldn't agree more, there will always be someone around to circumvent or exploit exisiting code for their own purposes, be it good or evil. While I don't like playing the blame game with software companies and software, they should be liable for any damage their software (intentional or otherwise), especially if it interferes with emergency or mission critical systems. Of course, maybe I'm being too idealistic, or Polyanna as it were...
Join the TWIT army now!
We actually some research at my university with bluetooth devices. It seems that if you send a bluetooth enabled cell phone a packet of data that it does not recognize (picture, text file, anything), it will crash the phone and force a hard reboot. We stumbled onto this while doing security tests on the actual bluetooth signal using a test kit.