Posted on 09/20/2013 8:23:44 AM PDT by for-q-clinton
The passcode lock screen on iOS 7 suffers from a bug that allows anyone with direct access to the iPhone or iPad to bypass the lock screen and open apps.
The bug, discovered by 36-year-old soldier Jose Rodriguez, who lives on the Canary Islands off the coast of Spain, is remarkably simple to exploit, reports Forbes. Swipe up from the lock screen to access the new Control Center, then open the alarm clock app.
Hold the phone's sleep button, but instead of swiping to power down the phone, tap cancel and double-tap the home button to access the multitasking screen. From there, you can jump to the camera and share stored photos, which gives you access to the user's communication accounts such as e-mail, Flickr, Facebook, Twitter, and others.
The exploit has been tested successfully on iOS 7 when running on the iPhone 4S, 5, 5C, and 5S, and the most recent iPad model.
Apple did not immediately respond to CNET's request for comment. However, an Apple spokesperson told Forbes and others that the company "takes security very seriously" and that it's "aware of this issue. We'll deliver a fix in a future software update."
Always wait for the second service pack, regardless of the OS.
Ping please.
Yeah. Sure it would. Hahahahahah, that is really funny.
I wonder how the heck someone figured that out. Seems an unusual set of steps to try. Didn’t take them long.
I don't have to worry about this bug. I don't have a password on the device. :-)
I wish they would come up with a fix for the gay user interface.
I just tried this and it didn’t work for me..
LOL
I did my iPad yesterday as well. Have yet to find ANYTHING that lived up to any of the hype preceding its release. At best some furniture rearrangement.
This coming from a guy who upgraded from windows 3.1 to windows 95 and cussed the bejesus out of it way back when.
Glossed over is the fact that if you don’t allow bypass of the screen locking, you don’t have this problem.
Unfortunately, links in emails and other apps only open in Safari because closed-world Apple will not allow you to select your default browser (imagine if Microsoft did that...).
I could not get it to work on mine either.
Doesn’t work on my iphone 5. Tried several times. I think it’s bogus.
As pointed out above, one of the very important requirements for this "exploit" to work was left out of the directions:
Glossed over is the fact that if you dont allow bypass of the screen locking, you dont have this problem.
In other words, it REALLY isn't secure to begin with if you allow bypassing screen locking!. That's exactly what this is describing: unlocked, bypassed screens! What do they expect if they TURN OFF SOME OF THE SECURITY????
Default is screen locking on.
This is almost as stupid as complaining that your Jailbroken iPhone is more susceptible to malware and blaming Apple. . .
As I said, it's bogus.
If you want on or off the Mac Ping List, Freepmail me.
I did my iPad yesterday, and so far there is only one issue I don’t like; the lack of a search box in my music library in the new iTunes . No problems at all with the phone..
For once, I agree with you: Buggy and insecure Microsoft products are all over the place... '-)
“Wow if a Microsoft product was this buggy and insecure it would be all over the place.”
It requires physical access to the device. Any Windows PC data that’s not encrypted is vulnerable if you have physical access to the computer.
Regardless, Apple will get it fixed soon I’m sure. ;-)
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.