The iPhone SMS Hack Explained

Posted by timothy on Monday August 10, 2009 @12:12AM from the en-percent dept.

GhostX9 writes "Tom's Hardware just interviewed Charlie Miller, the man behind the iPhone remote exploit hack and winner of Pwn2Own 2009. He explains the (now patched) bug in the iPhone which allowed him to remotely exploit the iPhone in detail, explaining how the string concatenation code was flawed. The most surprising thing was that the bug could be traced back to several previous generations of the iPhone OS (he stopped testing at version 2.2). He also talks about the failures of other devices, such as crashing HTC's Touch by sending a SMS with '%n' in the text."

1 of 94 comments (clear)

Min score:

Reason:

Sort:

Let me guess...the code was in C, right? by master_p · 2009-08-10 00:51 · Score: 0, Flamebait

There are numerous problems reported in Slashdot the last few years, and most, if not all of them, are in the C programming language. When some people say "it's time to move on from C, problems from using it have cost billion of dollars so far", some people insist that it's not the language but the programmers that are at fault. I would like to see for how long they would support that view, since the flow of problems coming from C pointers and arrays seems never ending...