Cellphone security holes
p2pnet.net News:- Holes in mobile phone software not only allow hackers to scroll through an address book by remote control, but also let them to eavesdrop on conversations.
Tnat’s the bad news from the "Hack in the Box" conference in Kuala Lumpur.
Delegates at the conference are to be shown a demonstration of security flaws found in the Java 2 Micro edition or J2ME software, jointly developed by Sun Microsystems, Nokia, Sony Ericsson and Motorola," says the BBC, going on:
"Experts say the flaw lies in the way Java tries to keep the operating system from accepting commands from outside.
According to the meeting’s organiser, Dylan Andrew, users could have personal information stolen or even find themselves bugged."
The good news is: the risk isn’t serious, apparently.
Sal Viveros, McAfee director of wireless security, told BBC News Online the danger wasn’t so much from malicious Java programs, but from badly written code that could have unintentional consequences.
"The risk is pretty minimal, but there is a risk out there," he said.
==================
See:-
Hack in the Box – Latest mobiles ‘open to attack’, BBC News Online, October 5, 2004
