iPhone 4 Security Hole that Allows Easy Jailbreaking Being Closed by Apple

Apple has promised to close a flaw in iOS 4 that allows the iPhone 4 to be easily jailbroken. Two security holes could also be used by less ethical hackers to install malware.

Earlier this week, a programmer who goes by the pseudonym "Comex" launched the website www.jailbreakme.com, which can be used to easily jailbreak devices running iOS 4, the latest version of Apple's mobile operating system. This allows users to run software on the new iPhone or iPod touch that hasn't been authorized by Apple.

The Down Side
While many are happy about the painless jailbreaking tool, the same security holes used by Comex could be used by other websites to install software without the smartphone user's permission.

When used together, these security holes can give hackers root access to the operating system, allowing them to do almost anything.

A Fix Is Coming
Apple address this issue in a statement released today:

"We're aware of this reported issue, we have already developed a fix and it will be available to customers in an upcoming software update."

It's not clear if an update will be released just to fix these security holes, of if the fix will be wrapped up in iOS 4.1, a much larger update that Apple has been working on for some time, and which is expected to be released in the coming weeks.

Whichever it is, installing this update will also undo the jailbreaking of the devices it is installed on.

Source