Palm WebOS Hacked Via SMS Messages

Posted by Soulskill on Monday April 19, 2010 @05:26AM from the and-a-sausage dept.

gondaba writes "Security researchers at the Intrepidus Group have hacked into Palm's new WebOS platform, using nothing more than text messages to exploit a slew of dangerous web app vulnerabilities. The white hat hackers found that the WebOS SMS client did not properly perform input/output validation on any SMS messages sent to the handset, leading to a rudimentary HTML injection bug. Coupled with the fact that HTML injection leads directly to injecting code into a WebOS application, the attacks made possible were quite dangerous (especially considering they could all be delivered over an SMS message)."

2 of 99 comments (clear)

Min score:

Reason:

Sort:

Wow by coniferous · 2010-04-19 05:36 · Score: 5, Insightful

I cannot belive that: a) An exploit like this exists. SANITIZE ALL INPUTS! b) It took this long to find. This reminds me a lot of the exploit on android where it acted like all text entered was typed into a terminal.
Re:Lol by jsnipy · 2010-04-19 05:43 · Score: 4, Insightful

Its more about testing processes as opposed development processes ("coding").

--
-- if you mod me down, I will become more powerful than you can possibly imagine