CellTrust Corporation, a company that specializes in mobile communication security, invites paranoid iPhone owners (who’ve heard the recent SMS spoofing news as of late) to try out CellTrust SecureSMS as a replacement to iOS’s built-in Messages app.
For those who haven’t been in the loop lately, renowned iOS hacker Pod2g
(Cyril) recently discovered a flaw
in the way iOS handles text messages. The bug can lead to the spoofing of the reply-to phone number.
This, in turn, can lead to people getting their private information leaked. Pod2g says it’s not very serious
, but it is a security issue nonetheless, and one that Apple will have to patch.
In the meantime, the Cupertino giant learned of Pod2g’s discovery and issued a statement
in which it encouraged everyone to turn to iMessage, the company’s free text messaging service on iOS and OS X devices.
, however, thinks it’s got a better solution – its own SecureSMS app which, it claims, “protects against the recently discovered security flaws on iPhone iOS mobile operating system.”
Admittedly, CellTrust's SecureSMS is an enterprise-grade solution which uses an advanced security architecture to validate and authenticate the senders and receivers of each secure text message, “ensuring message integrity and authenticity.”
The company stresses that “A recent blog post by developer and security researcher, pod2g, warns mobile users to ‘Never trust SMS: iOS text spoofing,’ and cites a flaw in the implementation of SMS on the iPhone that puts mobile users at risk of their confidential information or identity being compromised or exposed by criminals through simple text messages.”
“This clearly shows the need for SecureSMS,” says CellTrust.
Of course, if you are afraid of the SMS spoofing bug, and if you do have to reply to non-iOS devices, then CellTrust SecureSMS sounds like a good solution until Apple rolls out the fix.
Some of the app’s key features include extended text message size from 160 characters to 5,000, two-factor authentication, the ability to confirm delivery and read receipt, policy-based encryption key changes, and an architecture that doesn’t store or send off passwords. The app is free.
Download CellTrust SecureSMS Enterprise (Free)