Virtually all GSM phones (such as Apple’s iPhone) and GSM wireless operators (such as AT&T and T-Mobile) on the planet appear to be vulnerable to attacks using specially crafted SMS text messages discovered by security researchers Zane Lackey and Luis Miras. At the Black Hat Briefings this morning, the two researchers demonstrated several different ways they could bypass anti-spoofing protection in cellphones, and as a result, could send phones hidden commands, profile phones, or even exploit vulnerabilities that remotely disable a targeted phone’s ability to send and receive calls or text messages.
The researchers described how they set up test systems which could read the header data sent along with text messages, then used software to craft their own custom headers and messages and sent those messages to various types of GSM phones. Based on the behavior of the phones they tested, they were able to create several kinds of automated attacks for various phone models, and determined a method an attacker could use to silently connect to mobile phones and retrieve information that permits the attacker to identify the make and model of phone, and other profiling information.
One aspect of the vulnerability not well understood is how different models of phones will behave when they receive these specially-crafted messages. Some, like the Sony Ericsson model shown at right, provide the user no context as to whether information pushed down to the phone comes from a legitimate source.
In a final coup for the conference, Lackey and Miras demonstrated an iPhone app they call TAFT which can, at the click of a few buttons, transmit various types of attacks against specific, vulnerable phone models, including iPhones, and phones running the Windows Mobile 5 and pre-“cupcake” Android operating systems.
The researchers are currently working with all major carriers and phone manufacturers to fix the problems, but warn that it may take some time before the vulnerabilities have been patched.
Run for the hills! That’s the message iPhone owners are receiving after multiple 
I continue to think of my iPhone not as a phone but as a personal computer. Which is why I continue to be so nonplussed about Apple’s 
What a revoltin’ development this is. As my colleague Jason Meserve 
Google Voice
About the only thing we know for sure about Apple’s allegedly upcoming tablet computer is that there’s definitely misinformation floating around at the moment. Last week, AppleInsider. Last week, AppleInsider was 
For ninety-nine cents, iPhone users can download an app called Offender Locator to locate sexual offenders in their vicinity. You might be surprised what you learn, even if you’re not personally worried about sex offenders at the moment.
Google’s Latitude–which lets you use your phone to share your location with friends–has 
One by one, the big names in GPS navigation are landing on the iPhone, thanks to iPhone OS 3.0’s support for turn-by-turn directions. Last month, AT&T