iPhone 3GS encryption can be cracked in two minutes using freeware, says hacker

By Daniel Long on Jul 27, 2009 1:41 PM
Filed under Mobility

Using popular jailbreaking tools freely available online, an iPhone developer and hacker has demonstrated the lack of security on the Apple iPhone 3GS - and posing potential worries if you're using the iPhone for business.

According to a Wired interview with hacker, lecturer and iPhone developer Jonathan Zdziarski, the iPhone 3GS encryption is remarkably easy to crack and steal data from.

Zdziarski says it's all too simple, but you need physical access to the phone. He found that with common jailbreaking tools such as Red Sn0w and Purple Ra1n, an entire disk image of the iPhone could made.

But breaking the 3GS encryption and accessing personal data from the device would require much less time: less than 2 minutes, he claims.   

This isn't the first security compromise to embarrass Apple in the last couple of years. Last year, Macforum users found that they could get around the iPhone's locked screen mode (version 2.0.2), by selecting emergency mode and the home button, giving them full access to multiple functions on the phone.

Zdziarski notes that greater vulnerabilities arise from the way the 3GS works as a device, not just its security flaws. The 3GS caches keyboard strokes, logged in Safari, and Zdziarski believes that this could potentially allow hackers and thieves to gain access to credit card details, made from orders online.

A number of third party vendors have already created remote wiping software in the last couple of years to combat the rise in thefts of smartphones. Kaspersky currently offer an all-in-one software product that can detect, track and remotely secure a phone when it falls into thieves hands.    

Apple also offer a tracking service as part of an annual MobileMe subscription. The tool utilises GPS to the owner's iPhones. In recent times, this act of tracking down the theft, has given way to the rise of 'mobile vigilantism', where phone owners often attempt to find and confront the thieves themselves without police involvement.


Follow us on Facebook and Twitter
iPhone 3GS encryption can be cracked in two minutes using freeware, says hacker
Top Stories
How a devastating cyber attack turned Melbourne victim into evangelist
Back from despair after Distribute IT lost 4,800 websites.
Aldi to sell $279 dual SIM smartphone
Supermarket ups mobile ante with new plans and phone.
EMC takes custody of VCE as Cisco marriage falters
What will it mean for future of Vblock?
Sign up to receive CRN email bulletins
Is Microsoft right to limit the reseller channel for Surface?

Latest Comments