Skip the navigation
)
News

Apple ships iOS 4.1, patches FaceTime flaw

Quashes 24 security bugs, targets problems with proximity sensor, Bluetooth and degraded iPhone 3G performance

September 8, 2010 03:16 PM ET

Computerworld - As expected, Apple today released the iOS 4.1 update for its iPhone and iPod Touch.

Apple also patched two dozen security vulnerabilities in its mobile operating system, most of them rated "critical," including the first ever in the firm's new FaceTime video calling software.

The update, which weighed in at between 308MB and 590MB in size depending on the destination device, hit Apple's download servers shortly after 1 p.m. ET on Wednesday.

Computerworld confirmed that the update was available, and downloaded iOS 4.1 without problems.

Last weekend, Apple's U.K. site briefly indicated that the update, which CEO Steve Jobs said would be released this week, would be available today. The site was quickly revised to show only the notice "Coming soon," however.

Along with new functionality included with iOS 4.1 -- ranging from "high dynamic range" (HDR) photography that produces more detail in over- and under-exposed areas, to the launch of Apple's Game Center multi-player online network -- Jobs also promised that the update would fix some of the bugs in iOS 4.0 that users have been complaining about since that version's June 21 debut.

Owners of older iPhones, especially 2008's iPhone 3G, have flooded Apple's support forum with reports of degraded performance since they upgraded to iOS 4.0.

Other parts of the upgrade kicked off Game Center, the company's multi-player online gaming network, and are supposed to fix problems with Bluetooth connectivity and the iPhone's proximity sensor. Customers have hammered Apple over the proximity issue, saying that the sensor didn't deactivate the touchscreen when the smartphone was held up to their faces, causing dropped calls, muted calls and "face-dialed" numbers.

Apple also patched 24 vulnerabilities in iOS with the update, including 19 tagged with the phrase "arbitrary code execution," Apple-speak for a critical vulnerability. Unlike other operating system makers, like Microsoft, Apple does not rank flaws with a threat-scoring system.

Over 80% of the bugs were in WebKit, the open-source browser engine that powers the mobile version of Safari integrated in iOS, as well as Safari on the desktop and Google's Chrome browser.

One of the four non-WebKit vulnerabilities was in FaceTime, Apple's new video chat application that debuted in June on the iPhone 4, and is also included on the new fourth-generation iPod Touch, which went on sale today in the company's retail stores.

The bug could let others redirect FaceTime calls, Apple said.

"An issue in the handling of invalid certificates may allow an attacker in a privileged network position to redirect FaceTime calls," said Apple's advisory. "This issue is addressed through improved handling of certificates."

Apple credited Aaron Sigel, who used to work in the company's security group, for reporting the bug. Sigel confirmed today that Apple's patch did the job.

The iOS 4.1 update is available for the iPhone 4, 3GS and 3G, as well as the iPod Touches introduced in 2008, 2009 and on Sept. 1, 2010. The oldest of Apple's iPhone and iPod Touch do not support iOS 4, and so will not receive today's upgrade.

Apple requires users to download iOS 4.1 to their Windows PC or Mac using iTunes, then sync their iPod Touches or iPhones to the machine to install the upgrade.

Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at Twitter @gkeizer or subscribe to Gregg's RSS feed Keizer RSS. His e-mail address is gkeizer@ix.netcom.com.

Read more about Mobile OSes in Computerworld's Mobile OSes Topic Center.



What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Don't have an account yet?
Additional Resources
Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Mobile OSes White Papers
Practice Management: Double Billing Rate and Improve Patient Services
Would you like to double your billing rate and achieve faster payment for services?

Download this customer success story to see how One Health...
Mission Critical Data Explosion and Customer Case Study
Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?

Download this customer success story to see how...
Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
Database Activity Monitoring Is Evolving
Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
Establishing a Strategy for Database Security is No Longer Optional
The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three...
All Mobile OSes White Papers
Mobile OSes Webcasts
BlackBerry® PlayBook™ Tablet featuring PlayBook OS 2.0
The BlackBerry® PlayBook™ tablet is built to provide a sleek and entertaining user experience with tools that empower users to get business done....
Distributed Database Security with Real-time Monitoring
View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
InfoSphere Warehouse Packs Demo
These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
Delivery Management -- Extending Lifecycle Management
Date: Wednesday, June 20, 2012, 1:00 PM EDT

Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,...
Leverage automation today to reduce IT complexity
Date: Tuesday, June 5, 2012, 2:00 PM EDT

Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific...
All Mobile OSes Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs