I was on the train this morning, fighting sleep while reading through some RSS threads via ilium Software’s NewsBreak (love their apps…) when I noticed this.  According to The Register, Apple hasn’t patched the iPhone for any security vulnerabilities since, like, February 2008.

The latest version of the software for the iPhone, 1.1.4, came out in February and is essentially a pared-down version of Mac OS 10.5, according to security researchers. As a result the Jesus phone is still vulnerable to an exploit demonstrated by Charlie Miller at the CanSec West security conference back in March. Miller used a bug in Apple WebKit, as used in versions of Safari prior to version 3.1.1, to win a $10,000 prize in the “Pwn to Own” contest at the conference.

This isn’t the only security problem the iPhone has, either. There are other, admitedly, not as critical flaws/bugs that, for example, might allow phishing attacks.  Details of this vulnerability are being withheld until Apple can issue a patch to plug the hole.

Let me suggest this: Apple needs to get on the stick and insure that the v2.0 software update has all of this stuff plugged before the iPhone 3G goes GA this Friday, 11-Jul-08.  The last thing I think Apple wants is something like this marring what could be the biggest hardware release of the year.