Apple patches jailbreak bug
Apple has released a patch upgrading its mobile operating system to iOS 4.3.4, but hackers claim to have cracked it already
Apple has released a patch that fixes a vulnerability in its iOS mobile operating system, recently used to jailbreak iPhones and iPads.
The patch upgrades the iOS to version 4.3.4, and corrects a bug in the way the operating system handles PDF files.
From the patch notes released by Apple relating to the fix, it appears that no other issues were addressed by the patch.
The patch was released less than two weeks after the jailbreak vulnerability was disclosed to the public.
However, hackers claim to have already cracked the latest iOS version, with a new jailbreak tool.
Jailbreaking a device enables users to download software other than that directly approved by Apple, from locations other than iTunes.
However, it also renders the device vulnerable to security risks such as malware – the unbroken iOS is seen as a very secure operating system.
With enterprises increasingly finding business uses for iPhones and iPads, news that the security is not impenetratable will not be welcome to IT departments.
However, there is little evidence that jailbreaking Apple devices improves their business utility, so few companies are expected to see employees take this course of action.
There is a risk that authors of jailbreak software could insert their own malware into a download.
Paul Ducklin, head of technology, Asia Pacific, at security firm Sophos, wrote on his blog that anyone considering jailbreaking their device should first decide whether it is appropriate to trust the jailbreakers themselves.
"If you're thinking of jailbreaking, ask yourself, 'Do I distrust the jailbreakers'. If not, then jailbreaking may be for you. Just be sure to read all the security guidelines associated with the process, and be sure you have the explicit permission of the owner of the device."