RSS RSS Twitter Twitter
macnn

08/07/2008, 9:30am, EDT

Thursday, August 7th

iPhone 2.0 hiding built-in kill switch for apps?

The iPhone 2.0 firmware may contain a means of disabling applications at Apple's behest, investigation reveals. Probing into CoreLocation code has uncovered a reference to an unexpected URL, listed as "https://iphone-services.apple.com/clbl/unauthorizedApps." Visiting the page in a browser like Firefox displays yet more unusual code, containing terms such as "BlackListedApps," "com.mal.icious," "'Description' = 'Being really bad!'" and "Date Revoked."

The data suggests that Apple has remote control over which apps a person can use, likely without regard to whether or not something has been paid for. Mention of "malicious" apps, however, hints that the web code may be meant as a safeguard against software which has become dangerous, rather than unpopular with Apple management.


Filed under: iPhone, iPhone apps, Apple
Other story tags: iPhone 2.0

, , 8comments, del.icio.us, slashdot, digg, buzz , Twitter



8 comments
Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article




Expand All   Global Settings

Question for ya:

1
08/07, 10:33am, EDT

Has anyone used taken a VERY close look at the terms of service agreement they got with their iPhone? I'd like to know if there is legal provision in there to back this ability.

Fresh-Faced Recruit
Joined Dec 2005
User is offline

Or....

1
08/07, 11:01am, EDT

Or this could just be a hidden tool built into the software for use in enterprise to Kill apps that aren't meant to run on a company owned business phone, like Facebook or Super Monkey Ball. With this tool, IT Administrators could shut down unauthorized apps from running in the event they found installed.

Fresh-Faced Recruit
Joined Aug 2008
User is offline

re: Or...

-1
08/07, 11:13am, EDT

Except it's an apple.com domain and freely available. If it were for enterprise use, you wouldn't want to expose the blacklist to public eyes.

For the time being, it sounds more like an ability to blacklist malicious apps in a hurry, like a fail safe.

Dedicated MacNNer
Joined Sep 2000
User is offline

Here's the question...

1
08/07, 11:36am, EDT

Will it be limited to malicious apps, or just things Apple doesn't like (e.g. the tethering app, that $1000 app...)

Fresh-Faced Recruit
Joined Jan 2008
User is offline

I think it's a good thing

3
08/07, 12:38pm, EDT

First of all, it is obviously not for apps that Apple just doesn't approve of, this has already been proven. The three apps that Apple has removed from the store are still reported to run on purchaser's iPhones, they just aren't available for any new downloads. And, as far as that goes, I think that was a good idea to remove those apps anyway since the I Have Money app was just a piece of worthless software that someone put online to get publicity and/or money without putting out a real application.

As far as the disabling apps remotely, this is an excellent idea. I was just thinking the other day that even though Apple screens new applications, what if someone was clever enough to create a malicious app that got past Apple's security or morphed itself in some way after being installed. Then, Apple would be distributing an app to all iPhone users that everyone assumed to be safe but really wasn't. For the people that already installed the app there would be no way for Apple to kill the app without just removing it from the store, which would just prevent new users from getting it. Instead, if someone reports that an app is malicious and that's proven to be true, Apple can kill it on every single device and eliminate the threat to all users in one shot.

If you ask me, this is the perfect way to ensure the security of iPhone users, this is merely a way to protect users rather than give Apple more power.

Fresh-Faced Recruit
Joined Jun 2008
User is offline

this is news?

-7
08/07, 1:48pm, EDT

Hasn't it been known since the whole AppStore thing was publicized that this was a feature of said store? This way Apple protects their minions in case there's some trojan in that app you bought.

Fresh-Faced Recruit
Joined Aug 2001
User is offline

Re: i think...

-5
08/07, 1:51pm, EDT

I was just thinking the other day that even though Apple screens new applications, what if someone was clever enough to create a malicious app that got past Apple's security or morphed itself in some way after being installed.

You don't have to be "clever" to get past Apple's security. All you need to do is obscure it. Hell, put a trojan in there that reads the contents of the address book and send an entry every couple of hours to some server. Or put a nice piece of code in there that won't run for 14 days before it does it deed.

Fresh-Faced Recruit
Joined Aug 2001
User is offline

Challenge to Testudo.

6
08/07, 2:10pm, EDT

If it's so easy to get past Apple's security then do it. That's what I thought. Easier said than done.

Fresh-Faced Recruit
Joined Aug 2006
User is offline
Your Comments

In order to post comments: If you are a registered member, please login with your MacNN Forums username and password otherwise please uncheck the checkbox below.


Registered Member?
macnn forums login:

macnn forums password:

Not a member of the MacNN forums? Register now for free.

RSS Feeds

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.



  MacNN -all

  MacNN Reviews

  MacNN Podcasts

  iPodNN

  Electronista

  Left Lane News
Want To Sell Your Laptop? Any Condition - receive Top Cash. Get an instant quote. Free shipping www.CashForLaptops.com

Internet Marketing School - 100% Online: Master SEO, SEM, E Commerce, Media & More with a U of San Francisco Certificate.

Buy from The Apple Store, iTunes.com, Amazon.com, TechDepot, OfficeDepot, Computers4Sure, or donate.