News19,135 Articles

October 2, 2007

iPhone owners now fear Apple patches

Warning over efforts to cripple iPhone hacks

Gregg Keizer, Computerworld US

Apple's efforts to cripple hacked iPhones have been criticised by analysts which say iPhone owners may now fear installing the company's patches.

Question of the day!

Does your smartphone replace your need for a laptop when on the move?

Question of the day!

Does your smartphone replace your need for a laptop when on the move?

% of PC Advisor readers agree with you

Yes
TBC
No
TBC

Which parts of the desktop PC/laptop experience can't you get on your smartphone?

119 characters remaining

Follow the conversation at @SmartphoneFocus

web browsing, search facilities, voip, email, word processing everything RT @Graham_D_C

Mainly email but getting better at spreadsheets etc, RT @IDGdan

Last Thursday's iPhone Update 1.1.1 included not only new features and functionality - including access to the iTunes Wi-Fi Music Store - but plugged holes in the device's built-in Safari browser, email software and Bluetooth implementation.

But it was the news that the update 'bricked' or disabled iPhones modified to work with networks other than AT&T in the US that caught the attention of security analysts such as Andrew Storms, director of security operations at nCircle Network Security.

"With the iPhone update, Apple is now producing a fear of taking their patches," Storms said. "If they release a functionality update and security fixes at the same time in the future, some users will think twice about applying it. They'll ask themselves 'What will it break this time?' and 'Will it backfire on me?'

"Apple would rather have [iPhone] users secure, and users would rather be secure," Storms continued. "But when the update appeared, it was almost certain that some huge percentage of devices for which the patches were intended would be broken. That, I think, was more important than the security updates themselves."

See also: The hidden costs of UK iPhone hacks

Vendors should separate functionality and security updates, added another analyst, Gartner's John Pescatore. "There should definitely be a separation between security and functionality," he said. "Users shouldn't be forced to accept new functionality to get security fixes." The problem with mixing the two for enterprise users, he said, is that it forces them to make a choice between spending additional time testing new features before deploying patches, or foregoing the fixes.

Storms seconded that thought. "Enterprises would really prefer to see them separated; The fewer the number of variables the better," he said, referring to troubleshooting possible problems after installing an update.

But vendors don't necessarily follow Storms' and Pescatore's advice. Other companies, Microsoft especially, have blended new features with patches. "In big updates, like Windows XP SP2, Microsoft has mixed security and functionality," said Pescatore. "Even in its monthly [security] updates, it has included things that weren't security patches."

He pointed to the June 2006 upgrade to Windows XP's Windows Genuine Advantage antipiracy technology, which was updated via the same Windows Update mechanism normally used for patching.

"The reason why companies bundle functionality and security updates is that users hate having to go through the pain of updating," said Pescatore. "Customers like fewer updates." What users dislike, he added, is when a vendor hides security fixes in a larger update. Microsoft's been guilty of that in the past when it's issued fixes but not disclosed the underlying vulnerabilities, perhaps in an attempt to keep the bug count artificially low.

"It's kind of a gamesmanship thing," Pescatore said.

That lack of full disclosure is exactly what got Apple into hot water last week, argued Storms. "In general, bundled updates are a good service for consumers, but the downside is if you don't explicitly tell them what you're updating. That's what happened last week, when everyone was blogging about the [iPhone] update and whether it 'bricked' the phone. There was no single source of information."

Pescatore didn't see it quite the same way: users had a pretty clear idea of what would happen to their iPhones the day Apple released the update. Instead, he pointed out another similarity between Apple and Microsoft on the problematic patching policy front.

"Apple was saying that if you hack the iPhone to work with other carriers, when you do download the update you'll disable the phone. That's not much different than what Microsoft says with WGA (Windows Genuine Advantage). It's Apple saying it wants to see if it's modified and then it may cause you some problems. It's definitely similar."

See also:

Jobs: We will stop UK iPhone hacks

Apple iPhone: the definitive UK review

15 changes Apple should include in the next iPhone

Free whitepaper: Is social networking really bad for business?

<<newer story | back to index | older story>>

Comments received


Grant said on Tuesday, 02 October 2007

Simple Version: Hackers install application and change firmware through security holes. Apple closes security holes (like they should). Customers now have a more secure device. Hackers are pissed.

Long version, read:
brockerhoff.net/bb/viewtopic.php?p=2191#2191

OS11 said on Tuesday, 02 October 2007

There was no "effort" on Apple's part to disable any 3rd party hack. Apple simply released a rather large (156MB) update to add the wireless Music Store, fix bugs, etc and some 3rd party "hacks" broke. So cry me a river...

Apple doesn't have an SDK for the iPhone yet, so trying to make this into a story other than Apple releases an update is pointless.

-

HG said on Tuesday, 02 October 2007

One million plus iPhones are happy with their iPhones and are not afraid to update them.

The bloggers are swiftboating Apple for ulterior reasons.

Bob said on Tuesday, 02 October 2007

I don't fear Apple updates; I fear modifications made without knowledge on the design of the software and how it may change in the future.

Steve said on Tuesday, 02 October 2007

Nonsense! The great majority of iPhone owners are happy with their purchase. I've had many cell phones and the iPhone is the first one I've owned that just works. No arcane OS or cluttered and confusing interface. I don't give a rat's ass about hackers, and I don't "fear" patches from Apple, I welcome them.

If you don't like what a phone offers, get another phone, better yet, get a life and quit whining. The only reason articles like this are written is simply lazy journalism. It's easier to write anything negative about any large company than to find a story that actually has relevance to most readers.

Low-lying fruit is always the easiest to pick. And words like "fear" in the headline of any article are just cheap hooks to garner attention. I'd never heard of your rag before today, and I certainly won't be linking to it again.

"Expert advice you can trust" eh? I think not.

Dabberdoo said on Tuesday, 02 October 2007

It's obvious anyone who hacked their iPhone will be scared, and that's what this story points out. And they should be scared. Whoo-ooo-ooo!

Eliakim said on Tuesday, 02 October 2007

Yeah, the only ones who are "afraid" now are the whiney hackers... LOL! The overwhelming and vast majority of iPhone owners, who are well-pleased with their investment (and don't go about destroying it either) still have their full and complete warranties and do the updates without any worries or concerns!

Joe S. said on Tuesday, 02 October 2007

What percentage of iPhone owners actually Give a care?

Randy Patton said on Tuesday, 02 October 2007

Whoa, boys, easy up on this story's credentials... This story has more meaning for Brit Mac fans who have bought US iPhones and hacked them so they can be used over in the United of Kingdom. They must fear not looking so cool now with their iPod touch and camera combo! Boy oh boy. What a doobie!

Ron said on Tuesday, 02 October 2007

Silliness.
I'm an iPhone user and I have no fear at all of installing updates.
People who have hacked their iPhone, though, were warned very clearly not to install the patch. And yet many still did, and they got a brick in return. For some reason they're pissy about it. But if you're going to hack a device, it entails risk. If you take a risk, be a man about it.

Voice of Reason said on Tuesday, 02 October 2007

The one percent of iPhone owners who have hacked their phones are upset and the rest of us love the phone. The only fear of updates are for those who bought into the farce that hacking your phone with a lame app is somehow less dangerous. I would be surprised if even one percent of iPhone owners are that stupid. I guess that puts PC Advisor in that camp for writing such a ridiculous argument.

James Katt said on Tuesday, 02 October 2007

Users have no reason to fear Apple's update. There is only one version of the iPhone hardware. It is not an open system.

Hackers have all the reason to fear Apple's update. It may inadvertently break their crack and render the hacked iPhone unusable. But this is expected. Anyone who has a hacked iPhone should realize they should NEVER EVER AGAIN update the iPhone using Apple's update. They have the full responsibility of doing their own updates. Duh! After all, they are taking responsibility of future updates on themselves, not Apple, if they "update" their iPhone with their own hack.

If anything, users should sue the hack software makers for causing the failure of their iPhone, for negligently not making the hack compatible with future Apple updates! Yes - SUE THOSE HACKER SOFTWARE MAKERS!

Harry Gogreens said on Tuesday, 02 October 2007

I wish Apple would kill you Hacks!

Thomcarl said on Tuesday, 02 October 2007

Fear iPhone patches? what a load, if you haven't screwed up your phone by hacking it, you won't have a problem. If you have hacked your phone then thats your problem, not Apples.

Toby said on Tuesday, 02 October 2007

What is evident from these responses is that no matter how many gloom and doom stories the media foists upon iPhone users telling them how mad they are at Apple for screwing up their iPhones, as many people will write in and say, "Guess what, we're not mad at Apple."

And it just TICKS the writers off. HG is so right. Swiftboating Apple is the goal. But this time, it's failed!

A rational person said on Tuesday, 02 October 2007

Where do you get this sensationalistic crap? This is the worst kind of journalism, just a ploy to rile up page views.

No Hacker are Pissed said on Tuesday, 02 October 2007

The bottomline hacker have sites and blogs. They complaint and make this an issue; but it isn't not. Majority will not have any issues because they have no interest in hacking their iPhone. It time for the hackers to grow up and stop trying to make this an issue

Mr. Underhill said on Tuesday, 02 October 2007

Every story like this on update 1.1.1 is a joke. Has Mr. Softy paid you to try and create FUD? Hackers who whine about their iPhone being "bricked" should either become better at hacking or not do it. Apple has no obligation to work with hackers to ensure their phones stay functional. The same holds for those who install applications not developed with a SDK at this time. Get over it or go buy a Treo.

JJB said on Tuesday, 02 October 2007

I bought a new car recently. I *really* want it to have an engine from a different manufacturer but it won't fit. I was warned not to change engines because if I did it would void my warranty. I tried anyway and it worked for a short time and then I had all kinds of problems because when I brought it into the dealer they laughed at me and told me to get lost. It's out of warranty so I think I'll sue someone because of it. On top of that, can you *believe* that I still have to pay for the car? It's THEIR fault!

Same stupid logic as the stupid people hacking the iPhone and then getting mad at Apple. Total idiots.

JJB said on Tuesday, 02 October 2007

One more thing.

But first, I own no Apple stock (darn!) and I work in no way, shape, or form for Apple. That said:

"With the iPhone update, Apple is now producing a fear of taking their patches," Storms said. "If they release a functionality update and security fixes at the same time in the future, some users will think twice about applying it. They'll ask themselves 'What will it break this time?' and 'Will it backfire on me?'

I loved the line, "...Apple is producing a fear of taking their patches..." APPLE is producing a fear? Apple?!? Seems like you hackers created your own problems, not Apple. YOU screwed up, not Apple. Look at the SLA and then see who’s fault all of this is. Y-O-U-R-S!

Take responsibility for your own actions, kiddies. Quit blaming everyone else for your problems. YOU did the hack and if it blows up in YOUR face then wa-a-a-a-ah!. If you can't take the heat, get out of the kitchen.

Bill said on Tuesday, 02 October 2007

As a very happy iPhone user, all I can say is that I am sick to death of Microsoft paying writers to publish FUD about Apple. OK, so your new Zista and Vune suck--get over it! And while I'm at it, Hey Microsoft, stop bribing Toshiba to stick with its inferior HD-DVD format (because it's based on Microsoft's horrible WMV). We're sick of the format wars and sick of Microsoft's horrible software.

HW said on Tuesday, 02 October 2007

If there are (legal) iPhone users who now fear Apple's iPhone patches, most of the blame is due to FUD put out by this writer and the "analysts". Why don't the "analysts" spend their time trying to figure out exactly how many and who were negatively affected by the update instead of just claiming that "everyone" now has an iPhone brick and hates Apple.

zato said on Tuesday, 02 October 2007

"Apple doesn't have an SDK for the iPhone yet, so trying to make this into a story other than Apple releases an update is pointless."
I disagree with this opinion. PCadvisor exists to promote Microsoft technology, and kill sales of any competing technology. Blowing this story out of proportion, and making Apple wrong is exactly the point.

DD said on Wednesday, 03 October 2007

The only reason I haven't updated is because my wife is using the phone in Mexico...and the phone works better there than any other U.S. phone that we have tried, including some "International" versions sold by Sprint. Will update sometime this month once I get the phone back.

Mr. Underhill said on Wednesday, 03 October 2007

Every story like this on update 1.1.1 is a joke. Has Mr. Softy paid you to try and create FUD? Hackers who whine about their iPhone being "bricked" should either become better at hacking or not do it. Apple has no obligation to work with hackers to ensure their phones stay functional. The same holds for those who install applications not developed with a SDK at this time. Get over it or go buy a Treo.

Mr. Underhill said on Wednesday, 03 October 2007

Every story like this on update 1.1.1 is a joke. Has Mr. Softy paid you to try and create FUD? Hackers who whine about their iPhone being "bricked" should either become better at hacking or not do it. Apple has no obligation to work with hackers to ensure their phones stay functional. The same holds for those who install applications not developed with a SDK at this time. Get over it or go buy a Treo.

What is this?

Subscribe to PC Advisor now and claim your FREE gift

Keep up to date by adding PC Advisor News to your iGoogle home page or Google Reader


Google


Recent reviews

Reviews index


Latest reader comments

Latest reader comments


Top news

News index


Latest blog entries

Blogs index


 Our RSS feeds

Sponsored Content

  • Take the internet to new places with the Nokia N800
    Communicate how you want to, where you want to with instant messaging, email and internet calling. View movies, browse the internet wirelessly and watch TV on the high-resolution screen and listen through high-quality stereo speakers with headphone jack.
    Buy now