Spyware threat haunts squeaky-clean iPhones
Research finds rogue app privacy risks to regulation models — Apple's line that iPhone users who toe the line and resist any temptation to jailbreak, unlock or otherwise desecrate their smartphone are protected from threats has been called into question by new research.
Context & Ripple Effects
Apple's pitch since the App Store opened has been that users who toe the line — no jailbreaking, no unlocking — are safe inside the garden. In March 2009 the company undercut that framing itself, using a jailbroken iPhone in its own patent application while telling customers such modifications desecrate the device.
New research reported by The Register on December 4, 2009 now finds rogue apps can pose spyware-grade privacy risks on unmodified iPhones, which puts the platform's review process — not user behavior — at the center of the question, and hands privacy regulators a concrete case study in whether app-market self-policing works.
First-order effects
- iPhone owners who have never jailbroken their devices learn that App Store distribution alone does not insulate them from rogue-app privacy threats, weakening the compliance-equals-safety message behind Apple's anti-jailbreak stance.
Second-order effects
- Apple faces rising scrutiny of its App Store vetting as the effective last line of defense, since the research shifts blame for rogue apps from user modification to the review gate itself.
Third-order effects
- If compliant devices carry spyware risk through official channels, app-store governance stops being a vendor-marketing talking point and becomes a candidate subject for privacy regulation aimed at platform operators.
The trend: Smartphone security debate is moving from 'jailbreakers assume the risk' toward whether centralized app-store vetting can actually protect ordinary users — the question every closed mobile platform will be measured against.