Security experts urge caution on Frash

 

Flash video on iPad.

Security experts have renewed warnings to iPhone users thinking about jail-breaking their handset's operating system to run unauthorised software, as it will increase the risk of downloading malicious applications in the future.

The warnings come after Apple jail-break developer Comex revealed earlier this week that its Frash offering can allow Flash content to run on the iPad.

A description next to a YouTube clip showing Frash in action reads: "Frash can run most Flash programs natively in the MobileSafari browser. It currently only runs on the iPad, but support for other devices (3GS+ only due to technical restrictions) is planned, as well as support for iOS 4."

However, software assurance firm Fortify Software has warned users against jail-breaking their iPhones because it allows the devices to run third-party apps which have not been sanctioned or security vetted by Apple, and could therefore be infected with malware.

"Whilst Frash may look attractive to iPhone 4 and 3GS users wanting to surf to extra web sites, the reality is that users will have to jail-break their handsets to install this software, allowing the loading of apps from almost any source," said Barmak Meftah, Fortify's chief products officer.

"We urge smartphone users to think very carefully before downloading an app for their handset from an untried or unknown source, no matter how attractive the free app looks."

Copyright ©v3.co.uk


Security experts urge caution on Frash
"Its like they didn't even look into Jailbreak - Drink more cool-aid guys, you will be doing us all a favor. This poses the same risk as pulling a package down to your Linux system - or downloading..."
By Daveh
 
 
 
Comments: 1
Daveh
Jul 8, 2010 10:16 AM
Its like they didn't even look into Jailbreak - Drink more cool-aid guys, you will be doing us all a favor.

This poses the same risk as pulling a package down to your Linux system - or downloading something from the internet on to your Apple Desktop.

Additionally, while its not perfect most of the iPhone PM systems (at-least Cydia and Icy) have known good sources and require input to load from unsafe sources.

Security researcher fail
Comments have been disabled for this article.
 
 
 
Top Stories
Australian miners send drones to work
In-depth: Unmanned aerial vehicles in the resources sector.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  19%
 
No
  81%
TOTAL VOTES: 508

Vote