The spoofing problem was first brought to light in mid-August by security researcher pod2g, who noted that the issue was still present in the beta 4 version of iOS 6. It works by exploiting a part of the SMS specification known as the Reply To field, which goes unused in most implementations, but is displayed in iOS. As pod2g pointed out, "most carriers don't check this part of the message, which means one can write whatever he wants in this section: a special number like 911, or the number of somebody else."
No comments:
Post a Comment