Serious iPhone Flaw Found?

[HardOCP News]

Rumors are floating around the internet that the iPhone has a serious security flaw that allows unauthorized people to access virtually all your private information.

"2.0.2 gives almost full access to the iPhone even while under password protection... Set iPhone to use passcode lock, have contacts marked as Favorites with links, phone numbers, addresses, etc. in address book entry. Tap 'Emergency Call' keypad from passcode entry screen. Double-tap home button. Tap blue arrow next to contact's name. You now have full access to applications..."

 

[tesfaye]

Interesting. Glad they found it. Hopefully they fix it quick enough which shouldn't be a big deal. Security flaw... It's a fugging bug, bugs happen. Just fix it and be done with it and note the scenario for the next development cycle so similar bugs don't appear again. I hope this doesn't turn into some huge ordeal.

 

[qwakrz]

This bug is not to serious but I hope they fix it quickly.

There has been alot of people calling this "the worst security bug ever" saying that if they left their phone on a desk while they were not present people could access all their contacts etc and find out all their private info. I would be more worried that the phone wont be their at all when they came back than someone getting to your data on the phone.

Its a phone, the security on it should not be relied upon to protect important information.


There is a work around for this in the mean time, DO NOT select a double tap of the home button to take you to your contacts, this stops the contact list appearing when locked and the backdoor working, I have always had mine set to iPod for double tap.

 

[Marmot]

There's also a huge security flaw in today's wallets. If you leave it on a table and someone find it, all they have to do is open the main flap, double tap the next flap, twist three quarters of a turn and BAM!, all your important information at their fingertips.

Oh man, we are all in some deep shit!

 

[Ockie]

There's also a huge security flaw in today's wallets. If you leave it on a table and someone find it, all they have to do is open the main flap, double tap the next flap, twist three quarters of a turn and BAM!, all your important information at their fingertips.

Oh man, we are all in some deep shit!

If it's such a common sense issue, then why even bother to put a lock on the phone?

 

[AVT]

I love how neither the NDA, apps store developer fee, nor Apple's general security paranoia have prevented the iPhone from having security vulnerabilities.

 

[yang88she]

well that sucks, I'm sure the enginerds over @ apple will be coming out w/ a fix soon

 

[Deviationer]

I love how neither the NDA, apps store developer fee, nor Apple's general security paranoia have prevented the iPhone from having security vulnerabilities.

hahahahaha

 

[Azhar]

There's also a huge security flaw in today's wallets. If you leave it on a table and someone find it, all they have to do is open the main flap, double tap the next flap, twist three quarters of a turn and BAM!, all your important information at their fingertips.

Oh man, we are all in some deep shit!

Not anyone's fault but yours you didn't install the latest firmware on your wallet.

 

[whrswoldo]

If my phone has a password protected lock on it I haven't bothered to look for it. I can't imagine leaving my phone laying around and expecting people NOT to be able to get my personal info if they steal my phone. Small bug, I'm sure it will be fixed soon, but then again it is Apple *obligatory Apple sucks comment*

 

[Absentee]

no big deal, I don't use keep a password on my phone. my info's free for the taking!

 

[QHalo]

I would venture to say this is a serious security risk if you're company is allowing iPhone usage for getting corporate email. So yes, it's very serious if you're using your phone in that regard.