28 Aug 2008
iPhone users have uncovered a simple procedure to bypass the handset's passcode protections.
A group of users on Apple news site MacRumors.com first pointed out the hole, which involves just a few taps on the touch screen. The tactic was later tested and verified by Gizmodo, which posted a video of the process.
The issue occurs when the user hits the "emergency call button" on the iPhone's passcode entry screen. This then brings up a dial pad for placing a call in an emergency situation. Unfortunately, it also enables the use of the iPhone's "home" button as normal.
By default, the home button is set to bring up the user's "favorites" list. It also enables an unauthorized user to access a number of other features on the phone.
From within the favorites list, an unauthorized user could view the contact details of those within the iPhone owner's address book. Furthermore, the user could access the owner's voicemail from the list, and could click on a contact's email address to open up the mail application or Safari browser.
From within the Safari or Mail, the intruder would then have access to all of the user's email messages or stored bookmarks, raising obvious privacy and information disclosure concerns.
According to Gizmodo, a fix for the issue is in the works from Apple. However, worried iPhone owners will not need to wait that long to fix the hole.
The site notes that simply opening the iPhone's general settings fixes the problem. Users can simply set the destination of the "home" button to either the actual Home screen, which requires the passcode to access, or the iPod function, which does not access the phone features.
Latest stories from Communications
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
My client is a well established, non profit organisation;...
PHP Web Developer – £30,000 - £35,000 PHP, MySQL, HTML...
HEAD OF DIGITAL - London - £80-95K + Excellent Bens...
Agile C# Developer - (North London) £55,000 - £65,000...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
iPhone Issues
Another reason that I have yet to purchase the iPhone.
Posted by: John Kreuzer 28 Aug 2008
Security Hole in iPhone
There is a second way, to avoid this problem, and that is to empty out your favorites list, so there is no address to jump to. You can have your choice. No Favorites, or jump to Favorites on the double click. There are only three choices in the General settings, and if you change the double click to iphone or ipod, you totally avoid the problem. If you empty the favorites, you lose the quick look-up functionality. If you chose to empty out the favorites list, you lose the same functionality. Should you choose to change the functionality of the double click button, you are safe, and can still use favorites.
Posted by: David B. Alford 28 Aug 2008