Apple Inc recently fixed a major flaw in its iPhone and iPad tablet operating system which could allow encrypted data to be intercepted by a third party.
However, according to a report published on tech website ZDNet on Friday, the Cupertino, California-based company has left its early adopters in the lurch having discontinued software support for the iPhone 3G.
"Owners of these devices should not use them for any purpose for which security or privacy is required," Chester Wisniewski of NakedSecurity Blog proposed.
The company has not initiated any steps to fix the major flaw which afflicts the iPhone 3G. The phone which was launched in 2007 is vulnerable to attackers who can get around the security offered by SSL: "An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS," an Apple security advisory revealed. Thus putting iPhone 3G owners at risk of data breach and identity compromise.
Apple stopped manufacturing the iPhone 3G in June last year, while software support for the handset was shut down in January 2011. Although the company has knowledge about the WiFi security loophole in the iPhone 3G, it has done nothing to sort out the issue, whereas updates for iOS 4.3 (with which the iPhone 3G is not compatible) have been issued.
“Fixing security problems that render something unsafe is not dependent on hardware, and not something that should be seen as subservient to revenue maximisation. This is doubly so when the security flaw is in a vital part of the software,” the report on ZDNet commented.