News for hackers. Stuff that matters.
Re:Michael Tsai: Welcome to iPhone: Your Crappy Mac of Tomor... by tptacek on Monday August 04, 2008 @12:45AM (#266007)
None of the limitations being discussed with the iPhone have anything to do with whether programs are vulnerable to "stack attacks". The iPhone doesn't even have background processes. And "virus" is just a scary-sounding word for "program that deletes important files on your behalf". Don't run those.

I respect the "walled garden" as a business decision; it's Apple's platform, and maximizing its revenue is their prerogative. As a technical safeguard, there's no evidence that it works.

Re:Michael Tsai: Welcome to iPhone: Your Crappy Mac of Tomor... by tomsucks on Monday August 04, 2008 @03:30AM (#266090)
Here's my top: http://pastie.org/246884

MobileSafari, MobileMail, MobilePhone, all running in the background. fairplayd is the fairplay daemon, commcenter manages communications (all of them), springboard is the desktop, lockdownd is the little thing that checks to make sure the phone is activated (and locks it down if not)

only the top three apps (bash, top, sshd) aren't there on a vanilla iPhone. Apple's apps will run in the background, but other (app store) apps exit completely when you return to the home screen.

Re:Michael Tsai: Welcome to iPhone: Your Crappy Mac of Tomor... by tptacek on Monday August 04, 2008 @11:14AM (#266324)
Sorry, you're right. Apple can do whatever it wants on their phone, as you've pointed out. Evil third party developers can't.
Re:Michael Tsai: Welcome to iPhone: Your Crappy Mac of Tomor... by tomsucks on Tuesday August 05, 2008 @04:22PM (#267833)
Technically, good nda-abiding sdk-using $99-paying developers can't, evil ones that write their apps for jailbroken phones can ;)
Re:Michael Tsai: Welcome to iPhone: Your Crappy Mac of Tomor... by stcredzero on Monday August 04, 2008 @11:20AM (#266334)
AFAIK, the iPhone does have background processes. Apple just won't let you have at them!

Apple could easily write a specialized API that lets you run virtualized background processes. This would be an improvement on the current situation, but it would maintain heightened security.