Apple iPhone 3G

Security Grade

Calculator v1

iPhone 3G

   Brand: Apple (Parent: Apple Inc.)

   Category: Smartphone • Model / Gen: 2nd A1324, A1241

   Release Date: 2008-06-09 • Status: End of life

   Classification Date: 2025-10-15 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Hardware tampering was not common from the supply chain, but "jailbreaking" by users to bypass restrictions was very widespread. This is a form of post-purchase software/OS tampering.
Known vulnerabilities	Very common	🔗 Proof	As an early smartphone, the iPhone 3G and its iOS versions (primarily 3.x-4.x) accumulated many discovered vulnerabilities over time, especially after newer models were released.
Prior attacks	Very common	🔗 Proof	Well-publicized attacks like the "ikee" worm (2009) and the SMS vulnerability demonstrated that the device was a active target for exploits.
Updatability	Rare	🔗 Proof	The iPhone 3G's last major OS update was iOS 4.2.1 (2010), which it performed poorly on. It did not receive updates for long, leaving it vulnerable to later discovered threats.
Category Score	Score: 3 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Supported integration with services like MobileMe (Apple ID) and Exchange for email/calendar, but modern OAuth-based integrations did not exist.
Communications	Encrypted with obselete encryption	🔗 Proof	Supported SSL 3.0 and early TLS versions (e.g., TLS 1.0), which are now considered obsolete and insecure. Wi-Fi encryption (WPA/WPA2) was supported.
Storage	Encrypted with obselete encryption	🔗 Proof	Full device encryption was introduced in iOS 4 for the iPhone 3G, but it used a weaker, hardware-based encryption system compared to modern iPhones. The passcode did not strengthen the encryption key.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Device had a single user account. Management was limited to setting a passcode and configuring basic mail/App Store accounts.
Authentication	Basic	🔗 Proof	Offered a simple 4-digit numeric passcode. Complex alphanumeric passwords were an option but not the default or common. No biometrics (Touch ID/Face ID).
Brute-force protection	Basic	🔗 Proof	After multiple failed passcode attempts, the device would impose increasing time delays before another attempt could be made.
Event logging	Partial logging	🔗 Proof	Limited system and diagnostic logs were available, primarily for developers and enterprise. Not a comprehensive security event log accessible to the user.
Passwords	Default/Common/Easy to guess	🔗 Proof	The default state was no passcode. When set, the default was a simple 4-digit number. The device did not force a change after initial setup or enforce complexity.
Category Score	Score: 3 / 3

Property	Details
Operating System & App	iPhone OS 2.0 (upgradable to iOS 4.2.1) (Companion App: iTunes (for sync and activation))
Hardware (CPU / GPU)	CPU: ARM11, 412 MHz (underclocked to 400 MHz) • GPU: PowerVR MBX Lite 3D GPU
Memory & Storage	Memory: 128 MB eDRAM • Storage: 8 GB / 16 GB (internal flash storage)
Power, Battery & Charging	Battery: Internal rechargeable lithium-ion battery 1150 mAh • Power: • Charging: Via 30-pin Dock Connector
Display & Camera	Display: 3.5-inch (diagonal) TFT LCD Multi-touch touchscreen 320 x 480 pixel resolution at 163 ppi • Camera: Rear: 2.0 MP Video recording: No (still photos only)
Sound & Connectivity	Sound: Single loudspeaker 3.5mm headphone jack • Connectivity: Wireless: GSM, EDGE, Wi-Fi (802.11b/g), Bluetooth 2.0 + EDR Location: Assisted GPS (A-GPS)
Physical (Dimensions & Mass)	Dimensions: 115.5 mm × 62.1 mm × 12.3 mm • Mass: 133 g