Comments on: Apple patches 10 iPhone flaws

Seven of the updates affect the MobileSafari browser within iPhones.

[SecurityExpertMan]

Apple's habit...

...of just throwing a product out there without adequately pre-
testing for security issues is intolerable. For all these security
issues found by the good guys, there are 10 more found by the
bad guys that we hear nothing about and gets sold to the highest
bidder.

Apple's software products used to be the best in security and
privacy, but not anymore. Take EFI for instance.

[rcrusoe]

Apple's habit of just throwing a product out there

I agree, it is totally unacceptable.

They should wait until the product is 100% ready for the marketplace with all possible security flaws fully closed - like Microsoft Vista.

[dotmike]

Is there evidence it wasn't pre-tested?

Hacks are possible into anything. Even the best lock in the world
can be drilled.

I'm sure Apple did test, but the mathematics of security
vulnerabilities suggests the odds of finding every possible
combination within a given period of time are against it.

It's important that issues are patched as they are discovered and
before they are widely exploited, and Apple appears to be doing
that.

Besides, most of the exploits seem to rely on "enticing a user to
visit a maliciously crafted Web page."

As the doctor with the "it hurts when I do this" patient said,
"don't do that."

[Rick Cavaretti]

Ditto here RCrusoe

Great 'thinly veiled' post with a great punch line at the end. I too
almost lost my coffee across my keyboard.

[Rick Cavaretti]

Woops. One more thing

Hit the button too soon. Other sites are reporting this story in a
different slant. Apparently, this update shuts down all of the
hacked iPhones and limits them to the ATT network. Almost no
mention of the other issues.

[ferretboy88]

What Apple is not open source?

Apple only wants you to use the lame AT and T crap network. People talk about mircosoft and how greedy they are but Steve Jobs has 6 Billion and he sure is a real greedy pig also.

[mastercko]

the bigger issue (to me)...

...isn't the fact that they're releasing a patch (that's normal, whatever).

It's this:

Further, Apple refuses to discuss pending security vulnerabilities not patched here, stating "For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available."

guh? "We won't talk about it till we fix it?" Security through obfuscation? Isn't that attitude like the exact OPPOSITE of the computer security community at large? Gotta love the walled garden.

[Lee in San Diego]

Sure

They should publish details about vulnerabilities. /snark

[sirjigster]

horizontal keyboard for texting?

where is the horizontal keyboard for texting? why not try to add a
copy and paste feature? where is the MMS texting? like other
people have said they are just trying to relock the phones for the
users who have t-mobile.