What does the iPhone mean for security pros?
Few people seem to know exactly what to make of the iPhone yet – other than to comment on how the device will deplete bank accounts.
But how much of a security headache will the iPhone be for IT pros? Here are two (mostly) opposite opinions:
“The vendor plays an important role in security methodologies, something I’ve written on before. Faced with a lack of vendor information, we must hunker down and prepare our defenses. For all our sake, let’s hope Apple pulls this one off (besides, I’d like an iPhone too). Though I suppose perhaps that Apple’s market analysis probably has already told them this – despite the fact of my own concerns, people like me will still want to pony up the $$ regardless.”
- Andrew Storms, 360 Security, “The iPhone, our new security nightmare”
“If you are responsible for keeping data inside of your organization, for the love of everything that is holy, please don’t spend too much time on the iPhone. Allow us to remind you about all of the data breaches that are happening thanks to insecure wireless access points, tape backups disappearing, wrapping your newspapers in customers’ financial information, and stolen laptops.
Will the iPhone compound this problem? Slightly.
Will researchers attack the iPhone? You bet.
Will attackers spend a lot of time trying to steal data off an iPhone? I doubt it.
Will someone run Linux on the iPhone? Sadly, yes.
The person that spends $500 on their phone will protect it more than the laptop that you issued them.”
-Dave G., Matasano Chargen, “Matasano does not care about iPhone security”
