Ever worry that someone is trying to spoof the origin of text messages on your iPhone? Well according to developer pod2g you should. Although the security flaw he cites is not capable of executing malicious code, it can be exploited to fake the origin of an SMS to an unsuspecting iPhone user.
Pod2g is hoping Apple fixes the problem before the final release of iOS 6. If iOS dealt with incoming text message information properly, the message would display the reply-to (spoofed) phone number as well as the actual originating phone number. As currently configured, iOS only shows the reply-to number.
The iOS Messages app writes timestamps to selected incoming and outgoing SMS, MMS and iMessage notes. Selected because Apple has designed Messages to only write the timestamp after a certain amount of time has passed. This can result in long threads with no record of when the messages were sent.
Now thanks to the SMS Timestamps tweak on Cydia, you can choose to write a timestamp to every message if desired. The tweak also has options to write a timestamp in the Messages app in intervals of 1, 5 or 10 minutes so you know exactly what's going on.
Apple has released version 3.0.1 of the iPhone OS software. This fixes the recently revealed SMS security flaw. The security hole was illustrated on Thursday by Charlie Miller at the Black Hat 2009 conference in Las Vegas.
iPhone owners can download and install the 3.0.1 update using iTunes immediately. Left unpatched, the problem makes it possible for iPhones to receive malicious binary programs through SMS messages without the user's knowledge.
A massive iPhone security flaw was illustrated on Thursday by Charlie Miller and Collin Mulliner at the Black Hat 2009 conference in Las Vegas. Word of the demonstration had been brewing for days, however Apple has remained silent on the issue.
The problem makes it possible for iPhones to receive binary programs through SMS messages without the user's knowledge. These programs can then give someone using the exploit complete control over the device.
Newly available via Installer/AppTapp is iSMS, a native text messaging client replacement for the iPhone. iSMS - also called weiSMS, is partially based on WeSMS, a Chinese SMS application, and provides a list of features/enhancemens not found in the standard iPhone SMS application. These lacking features have been high on iPhone owners' lists of gripes with the iPhone.
Though very much a beta, officially only a "preview release", iSMS provides many functions not available when sending text messages on the iPhone through the included interface. The two most prominent of these added features are the ability to send a text message to multiple recipients (or bulk SMS) and the ability to forward received text messages.
The list of major SMS features not normally available on the iPhone which iSMS adds includes the following: