Comments on: iPhone's Safari dialing feature can be hacked

Feature designed to dial Web page phone numbers is subject to cross-site scripting attack.

[neolyn]

Here's an idea...

Maybe everyone should stop the ********. If people would quit
being jackasses by hacking this crap, we wouldn't have to waste so
much money on security and software patches.

[siestaboy]

WHAT?!?!?!

What the heck are they talking about?!

[M C]

Of course, this is a Web flaw hyped by inserting the word "iPhone."

Good job with the press release, security company.

[DrtyDogg]

iPhone

The flaw pertains directly to the iPhone. In that it doesn't exist on any other product.

[ibaniski]

because it's a mac?

I bet you are all hyped up every time an IE security hole surfaces, and you don't complain about people "hacking".

It seems like a big deal to you now...

[nmc]

dude

I don't know about anybody else, but it ain't a big deal to
me...it'll get plugged quickly enough through software update,
so if somebody out there owns one of these babies, check for
software updates regularly if you haven't setup automatic
downloading.

consequently, my biggest gripe about software updates on
machines other than Mac, is that they don't include any "roll up"
updates...mini service packs from M$ would be good, especially
when you're clean installing the XP SP2 OS, it takes FAR too long
to get back to base. if i'm that bothered, it's very straight
forward to do a Mac clean install, without losing data or unique
file links.

i haven't worried about issues like this since 1984, the iPhone
will be no different and no amount of scare mongery will change
that.

[rcrusoe]

Drive by downloads?

I thought I read that downloads were disabled on the iPhone? Anyone know whether this is true?

[ThatScienceGuy]

Thank the good Lord...

Thank the good Lord there's another problem with iPhone, so that the legion of C|Net reporters assigned to hover around Everything Apple have something to write about.

[lavern]

And thank the lord

For the consistent denial that anything could possibly be wrong with an apple product. If this were a vista problem you would have probably written 10 scathing comments about it already.

[Vegaman_Dan]

Interesting idea

I wouldn't have considered using a hacked web page with a number on it to lock the handset into dialing a number like that. It does take someone to manually click on the number, but that isn't particularly hard to do. People click on enough emails about verifying your bank account login information, so I can see this happening.

It's not really hacking the phone at all. Just pointing out a vulnerability due to the nature of the device.

A good reminder to people browsing online to be think before you click.

[verbalvoodoo]

Firefox Security Flaws Simultaneously Announced

When Firefox or IE announce the 10th security update of the week to address issues -- it's just routine.

No screaming. No running around in hysteria.

It's just, "Another update issued. FYI." Followed by a big yawn.

Insert the word iPhone and OH MY GAWD! THE IPHONE IS THE BIGGEST SECURITY THREAT EVER!!!!

Just a little bit of a double standard perhaps?

Can you home laptop be hacked?

Yup.

is it possible to hack the iPhone.

Yup.

So the iPhone is no better or worse security wise than ANY computer?

S'funny. You wouldn't get that impression from the article.