Intrepidus Group, a firm specializing in security and risk, has found an exploit for Palm WebOS firmware version 1.3.5, with the researchers sending a specially formatted SMS message that contains malicious HTML used to execute commands.
Says the group: “The security team was able to send SMS messages that would automatically open webpages and dial numbers to shut off the handsets radio . They say the reason the attacks are possible is because the OS is essentially a web browser written in javascript and HTML.”
It is important to note that the exploit is for 1.3.5, and the newly released 1.4 fixes the vulnerabilities, although not all carriers have offered the new firmware OTA.
Palm has been struggling, with the company putting itself up for sale, with the company’s software chief leaving, and retailers slashing prices just to get the phones off the shelves.
Result for: sms messages
Sprint has confirmed leaked WebOS 1.4 update details today, with many rumored features confirmed.
Video recording is coming, Adobe Flash 10.1 for the Palm Pre, and a Flash beta app for other Palm devices are also in the update.
Electronista says the “Universal Search now includes EAS (Exchange) GAL corporate address look up, while the application launcher now gives users more feedback. The Pre Button in the gesture area will now blink until a notification is acknowledged.”
Formatting, browser and time zone bugs have been fixed as well. Emails are now sortable and numbers can be dialed directly from SMS messages without need to load the contacts.
The update is expected tomorrow.
Result for: sms messages
If the Toronto Star is to believed, then the Apple iPhone should be available in Canada before the summer.
The article cites “industry contacts” who reveal that Canada’s only major GSM cell provider, Rogers, is hoping to introduce the iPhone “in time for it to be included in a campaign promoting touchscreen phones at the company.”
Rogers’ campaign will most likely start in late May or early June, before Apple’s Worldwide Developer Conference in which it is widely expected that the company will introduce the 3G model of the iPhone.
Despite its reputation as having the highest-priced mobile data plans of any cellular provider in Canada, Rogers is also the most advanced. About two months ago, the carrier introduced an unlimited data bundle “that gives users both unfettered browsing on most of its devices as well as a set amount of MMS/SMS messages and voicemail.” Rogers’ also offers advanced 3G network features including “two-way video calling on supporting devices as well as 7.2-megabit HSDPA downloads on portions of its network. The 3G iPhone is understood to use a newer Infineon chipset that would support both normal HSDPA service as well as its faster variety on Rogers.”
More information as it becomes available.
