Your iPhone PIN can be bypassed.

[Ichinisan]

http://www.youtube.com/watch?v=_pWKk7vJ7SQ

After reading the instructions, I was successful on the second try.

 

[CZroe]

This in only about the 15th time I've read it today.

 

[Ichinisan]

This in only about the 15th time I've read it today.

Did you read it on Anandtech forums?

 

[CZroe]

Did you read it on Anandtech forums?

I read it on the main page of Anandtech.

 

[Pardus]

,,

 

[OVerLoRDI]

Whoops.

This plus their recent exchange sync bug really is embarrassing

 

[Ichinisan]

To be fair, it got MMS with a carrier settings update (AT&T didn't enable it until some time after Apple added the capability to iOS).

 

[Red Squirrel]

lol that's hilarious. Talk about a pretty serious security hole. Not that one should store confidential info on their phone, but if it's linked to services or has "remember password" set for stuff like SSH servers it could be bad.

 

[Ichinisan]

I do remember a similar glitch affecting some Android phones.

 

[Tyranicus]

lol that's hilarious. Talk about a pretty serious security hole. Not that one should store confidential info on their phone, but if it's linked to services or has "remember password" set for stuff like SSH servers it could be bad.

The glitch only allows access to the phone app, so that shouldn't matter.

 

[CZroe]

Whoops.

This plus their recent exchange sync bug really is embarrassing

I don't think it's their bug, which is why Microsoft is expected to patch it.

 

[Mixolydian]

I don't have a PIN on mine anyway. :awe:

 

[JackBurton]

Whoops.

This plus their recent exchange sync bug really is embarrassing

Not really.

Fix coming soon.

 

[Pantoot]

Wonder how many calls to 911 went out as a result of people trying this out.

 

[TuxDave]

Wonder how many calls to 911 went out as a result of people trying this out.

Yeah I was about to give it a whirl but quit after seeing the call 911 and cancel step. Not worth screwing up that step.

 

[bearxor]

it doesn't really connect. You can hit it then immediately hit cancel.

I want to know what kind of person figured this out. I mean, are we serious with this? going to the dialer, holding down the power button, then canceling, then going to sleep, going back to the dialer, diall 911, cancel, back to sleep, then wake up, hold down the power button and press emergency call right before the power slider appears. and, btw, make sure you hold down the power button while you're crusing around the phone app, because as soon as you let go of it, it goes away.

I mean, how was anyone ever supposed to find this?

 

[TuxDave]

it doesn't really connect. You can hit it then immediately hit cancel.

That's the "plan". But if you screw up that step (you drop it, someone interrupts you, something lags and it doesn't respond to your cancel push, you accidentally hit the home screen after calling, etc...).... then what.

 

[bearxor]

That's the "plan". But if you screw up that step (you drop it, someone interrupts you, something lags and it doesn't respond to your cancel push, you accidentally hit the home screen after calling, etc...).... then what.

Hit it again.

 

[TuxDave]

Hit it again.

/sigh, nevermind.

 

[bearxor]

I knew you were being sarcastic. I thought my response was funny.

 

[CZroe]

it doesn't really connect. You can hit it then immediately hit cancel.

I want to know what kind of person figured this out. I mean, are we serious with this? going to the dialer, holding down the power button, then canceling, then going to sleep, going back to the dialer, diall 911, cancel, back to sleep, then wake up, hold down the power button and press emergency call right before the power slider appears. and, btw, make sure you hold down the power button while you're crusing around the phone app, because as soon as you let go of it, it goes away.

I mean, how was anyone ever supposed to find this?

It's not that hard when you already know that the lock screen has had vulnerabilities that involved notifications and camera shortcuts in the past and that the lock button and off slider have hidden process-killing functions when used in conjunction with the Home button. In fact, I fooled around a few minutes with someone else's phone to get background Safari media playback to work again (stopped working in iOS6.1) and was successful several times, though I couldn't figure out how to do it consistently. I was using camera/camcorder lock shortcuts with task switcher and lock-screen controls with multiple locks and unlocks before and after leaving Safari and I would not doubt if this was discovered by just such deliberate searching. In fact, it may have been another person trying to figure out how to leave Safari without it unregistering itself with the background music playback control API.

 

[Tegeril]

The glitch only allows access to the phone app, so that shouldn't matter.

This.

Sure it's a (ridiculously convoluted to exploit) bug that needs fixing, but it's not the end of the world.

 

[Red Squirrel]

Oh if it's just the phone app then not really a huge deal. Guess the only thing to worry would be if someone makes a long distance call, but that's not as bad as someone getting into all your accounts and stuff.

 

[CZroe]

Oh if it's just the phone app then not really a huge deal. Guess the only thing to worry would be if someone makes a long distance call, but that's not as bad as someone getting into all your accounts and stuff.

They can access all your contacts and voicemail. From your contacts, they can access email, locations, birthdays, and all kinds of info. That where the bulk of private info seems to be for the average user, so don't belittle it.

 

[Ichinisan]

I didn't realize this was moved to All Things Apple. I deliberately posted in Off Topic as a PSA to all iPhone owners.