Re:Ouch! (Score 0)

Who the fuck though it would be a good idea to automatically execute the content of a message you have no control over whatsoever?

I would guess that this has more to do with the push features of the phone, including the new 'remote wipe' or 'find my phone' features if you happen to be using MobileMe. I would venture to guess the same functionality was provided to developers of any push application to execute commands for an applicable application.

I would venture to guess that the reason for this would be that SMS messages do not have any code signing, and in order to implement would have pushed out the deadline for Push based responses even further. Apple screwed the pooch by taking the path of least resistance, and gambled that this vulnerability wouldn't have been found for a good time (maybe iPhone OS 4.0).

Pure speculation on my part, but my $0.02.