Global Security Watch > iPhone anti-phishing sigs only slightly delayed | iPhone News Updated

[iPhone News Updated] On Thursday, Apple highlighted the anti-phishing features of its popular mobile device, the iPhone, at a San Francisco product launch event. However, several security experts tested the feature only to find that phishing sites blocked by Safari were still loaded by the iPhone’s mobile browser.

Previous [Previous] iPhone OS 3.1 anti-phishing works; you just need to set it ...

Next [Next] Who Has Time For This?: Physical Encryption: The Ultimate ID T...

Some related posts from Technorati and Google.

[Phones Review] iPhone 3.1: Mobile Safari anti-phishing features been moaned about ...: Security firm Intego however, is criticizing the inconsistency as actually being worse that if the feature hadn’t been included at all. A number of people have tested the anti phishing feature, some people were getting warnings for sites that others load just fine with no warning.

[iPhones Talk] New iPhone Safari Anti-Phishing update criticized » iPhonestalk.com: It’s unclear what technology the Mobile Safari browser uses and what the exact reason is for the inconsistent results, however Intego as well as other researchers promise to continue to investigate the issue.

[Zscaler Research] Zscaler Research: Watered Down Phishing Protection in iPhone OS 3.X?: Based on what we've seen, it seems likely that the issue was not with the blocking feature itself within iPhone OS 3.1, but rather the updates being pushed to iPhones. At the time of the iPhone OS 3.1 deployment, some phones were not receiving updates while others were.]

[MacRumors iPhone Blog] Apple Offers Clarification on Mobile Safari Anti-Phishing Feature: "Safari's anti-phishing database is downloaded while the user charges their phone in order to protect battery life and ensure there aren't any additional data fees," Apple spokesman, Bill Evans, told The Loop. "After updating to iPhone OS 3.1 the user should launch Safari, connect to a Wi-Fi network and charge their iPhone with the screen off.

[winandmac.com] winandmac.com » You need complicated steps to make anti-phishing ...: In iPhone firmware 3.1, Apple has added the anti-phishing tools which can protect users from malicious websites. It's vital for users to click any links they saw in the world.

[iPhones Talk] Apple clarifies Safari “anti-phishing” feature » iPhonestalk.com: The Loop spoke with Apple about the issue, and learned that the anti-phishing database is updated on a user’s iPhone via the charging/syncing process in order to preserve battery performance and prevent hidden data usage on cellular networks.

[The Unofficial Apple Weblog (TUAW)] iPhone OS 3.1 anti-phishing works; you just need to set it up properly: For most users this process should happen automatically when they charge their phone."What this apparently does is allows Safari to completely download the anti-phishing database, which is necessary before the feature will work. It also appears that you'll need to update the database on occasion in the same way -- charge your iPhone with Safari up and the screen off.

[TechHail : Technology Blog] Safari’s Anti-Phishing Issues With Latest iPhone OS 3.1 Update: One of the features that was worth mentioning in the iPhone OS 3.1 is the anti-phishing feature in Safari browser. The Anti-Phishing feature protects users from malicious websites.

[Internetnews Blog] Apple's iPhone phishing expedition comes up short? - InternetNews ...: Security researchers are warning that the recent 3.1 update to Apple’s iPhone software doesn’t prevent phishing attacks consistently or as well as the company’s desktop version of the Safari browser. The anti-phishing feature should warn users when they may be visiting known phishing sites designed to illegally capture user’s personal information.

[MacRumors iPhone Blog] Mobile Safari Anti-Phishing Feature Criticized As Being Inconsistent: We've had a number of people test [the anti-phishing feature], and some people get warnings for sites that others can load just fine. We've tried isolating locations, iPhone/iPod touch models, and whether they are connecting over a cell network or via wifi, but all we've come up with is that sometimes it works and sometimes it doesn't.

[K7 Blog] iPhone Phishing protection branded “ineffective”: It is claimed that whilst the latest version of the iPhone software, version OS 3.1, comes with anti phishing measures that warn users when they come across a suspicious site, the feature failed to adequately warn researchers about known malicious websites. Researchers claimed that such sites were however blocked by the PC version of the Safari browser, the browser installed by default on the iPhone.

[iPhone Alley - News] Inactive Phishing Protection Filter In Safari Found In OS 3.1 ...: According to The Mac Security Blog, the iPhone OS 3.1 update released earlier this week adds an anti-phishing feature in Mobile Safari similar to the one in it's desktop counterpart. The feature, which is not active in the update but still present, should warn users when they are visiting a known malicious website and asks if they want to continue.

[The Mac Security Blog] Apple Adds Safari Anti-Phishing Feature that Doesn’t Work to iPhone: We’ve tried isolating locations, iPhone/iPod touch models, and whether they are connecting over a cell network or via wifi, but all we’ve come up with is that sometimes it works and sometimes it doesn’t. This is clearly more dangerous than no protection at all, because if users think they are protected, they are less careful about which links they click.

Reflected tags on Technorati: Blog, ,