Printed from http://www.electronista.com

iOS vulnerability could allow keyboard, button logging by attackers

updated 03:43 pm EST, Tue February 25, 2014

Even patched versions of iOS 6, 7 are exposed, firm says

A vulnerability in iOS could allow remote hackers to log every keyboard and button press a person makes, says security firm FireEye. The exploit is only theoretical -- and would require a compromised app to somehow make it through the App Store review process -- but is said to have been tested and could potentially expose both software and hardware interactions. This includes Touch ID unlocks, although not the actual fingerprint data involved.

The hole is present in even the latest versions of iOS 6 and 7. A now-deleted FireEye blog post claimed that the company actually passed a proof-of-concept app through the App Store, but that it's "collaborating with Apple" on the issue.

iOS appears to be exposed to the problem through the resources it offers to apps running in the background. If so, the main way of avoiding attacks until a patch is released is simply to avoid questionable apps, or if all else fails kill their processes using the iOS task switcher.




By Electronista Staff
Post tools:

TAGS :

toggle

Comments

  1. Marook

    Forum Regular

    Joined: 05-05-99

    1: 'remote hackers'?
    If at all usable, YOU need to put the App on your iDevice! There is NO remote 'hacking' in this regard!

    2: What userdata can they get? You would need to know the Locale the iOS device is running in, and then parse the _potential_ keypad keys pressed, if it's a keypad/board.. Or is there alphanumeric data in the events? Don't think so...!

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

Adesso Compagno X Bluetooth keyboard

The shift from typing on physical keyboards to digital versions on smartphones and tablets hasn't been an easy for many consumers. Fro ...

Polk Audio 4 Shot headset

Sound quality and design are two of the biggest areas of focus for manufacturers when coming up with a new gaming headset. Depending o ...

Patriot Supersonic Phoenix USB 3.0 drive

USB thumb drives aren't the end all solutions for data transfer and traveling needs. Sometimes people want something with a little mor ...

Sponsor

toggle

Most Commented

 
toggle

Popular News