Apple's response to SMS flaw: use iMessage

55comments
Apple's response to SMS flaw: use iMessage
It was just Friday when we told you about a flaw discovered in the way iOS handles SMS messages. Advanced SMS functions can be accessed by those playing around with the UDH (User Data Header) section of a text message. One serious function would allow a hacker to change the reply-to path to another number. Information meant for someone via reply text could end up in the hands of someone itching to get his hands on your personal information. A spoofed message could appear to be coming from your bank, when it reality it's coming from Joe Hacker who will sell your social security number and other confidential information for big bucks.

Apple's response was, well, typical Apple. Instead of creating a fix for this problem in iOS 6 while there is time (one suggested idea was to have a text message come with both the original and reply-to addresses visible), Apple took this as an opportunity to promote its iMessages application by saying that it verifies addresses which will protect the user from getting spoofed.

The Cupertino based tech giant didn't finish its response without stating that SMS allows spoofed messages over any phone and suggests that SMS users be careful to make sure that they aren't being directed to an unknown website or address over SMS.

source: Engadget

Recommended Stories

Loading Comments...
FCC OKs Cingular\'s purchase of AT&T Wireless