Zero Day

Apple looking to hire iPhone hacker

Posted in:

Apple
Arbitrary Code Execution
Browsers
Data theft
Hackers
Hirings and firings
Kernel-level Exploits
Malware
Mobile (In)Security
Patch Watch
Pen testing
Research
Reverse Engineering
Wireless
Zero-day attacks

Apple is in the market for someone capable of hacking into the iPhone. According to this job listing, the company is looking for an iPhone Security Engineer capable of, among other things, developing "proof of concept" attacks on the device's current security mechanisms. The successful candidate will be tasked primarily with validating the security architecture for the iPhone. Some responsibilities:

Review and provide feedback on security mechanisms implemented in OS X
Provide risk analysis of potential security threats to our embedded products
Develop "proof of concept" attacks on the current security mechanisms
Come up with new and innovative ways of increasing security while preserving ease-of-use and increasing the quality of the end-user experience.
Work cooperatively with other parts of CoreOS on cross-functional technologies and initiatives to enhance security and security policies

[ SEE: Apple caught neglecting iPhone security ] This moves comes amidst news that the latest versions of iPhone are vulnerable to vulnerabilities that could aid phishing and spamming attacks. Apple has also been criticized in the past for inordinate delays in shipping iPhone patches, a problem caused mostly because Apple's agreement with carriers require every minor release is reviewed and approved, a mind-numbingly slow/exhaustive process. * Photo credit: quinn.anya's Flickr photostream (Creative Commons 2.0)

posted by Ryan Naraine
July 24, 2008 @ 8:43 am

Previous Post: |)ruid and HD Moore release part 2 of DNS exploit
Next Post: Speculation over possible Skype backdoor

Last 10 posts:

Opera patches 'extremely severe' security hole (11-23)
Exploit published for critical IE 7 zero-day flaw (11-23)
Inside the Google Chrome OS security model (11-19)
Microsoft finds security hole in Google Chrome Frame (11-19)
Mozilla locks out rogue Firefox add-ons (11-18)
Thousands of web sites compromised, redirect to scareware (11-17)
Microsoft confirms 'detailed' Windows 7 exploit (11-16)
Man-in-the-middle attacks demoed on 4 smartphones (11-13)
Microsoft bracing for malware attacks from embedded fonts (11-12)
Apple Safari exposes Windows to drive-by download attacks (11-11)