A group of security researchers have discovered an alarming vulnerability in Apple’s mobile and desktop operating systems.
In a newly-released paper, the research group explained how they tested a series of attacks that were able to bypass security checks, steal passwords, and even critical app data.
The vulnerability was discovered to exist on Apple devices including the iPhone, iPad, and Mac computers.
Due to the way Apple built apps to communicate with each other, the paper writes, researchers were able to "steal such confidential information as the passwords for iCloud, email and bank, and the secret token of Evernote."
Basically, these researchers were able to build a malware that was uploaded to Apple’s App Store in the form of a typical app, which was then able to steal credentials from the existing apps on the researchers' phones. These credentials include passwords and other precious app data that's supposed to be off-limits.
The lead researcher, Luyi Xing, told the Register that his team was able to "gain unauthorized access to other apps’ sensitive data such as passwords and tokens from iCloud, Mail app and all web passwords stored by Google Chrome."
According to the Register, Xing and his team informed Apple, which asked for six months to deal with issue. The six months have now passed and the vulnerabilities persist, say the researchers.
The ramifications of these findings could be huge. Very little has been written about the potential cross-app vulnerabilities in Apple’s software, and this discovery shows some huge holes certainly exist.
The researchers tested this type of attack with large sample of Apple apps and found that "more than 88.6%" were completely exposed. These include extremely popular apps like password manager 1Password and Google Chrome.
"The consequences of these attacks are serious," the paper concludes, "including leak of user passwords, secrete tokens and all kinds of sensitive documents."
The results were decent. Software revenue was good. Handsets are in decline. Stock was up 10% pre-market on the decent results.
I would not say it is a conspiracy against Blackberry. It is obvious that people invest based on the user experiences and purchases rightly or wrongly. Examples include Apple, Tesla, Amazon, Ebay, Twitter, Google, etc. Amazon is a huge money loser yet the stock price is through the roof.
Not bad for a stock that is not relevant. Wall Street still has a big hate on Blackberry.
Unfortunately, Blackberry is still in the minds of the bankers as they still use old Blackberry phones for security and easy typing. They refuse to upgrade and carry two phones-- a newer iPhone and a company issued 2009 Blackberry and they unfairly compare the two phones.