iOS 4.1 Security Issue - Bypassing the Lock Screen to Make Calls

jordand321 · Oct 22, 2010, 11:43 PM

I think I just found a security flaw in ios 4.1.

When you iPhone is locked with a passcode tap Emergency Call, then enter a non-emergency number such as ###. Next tap the call button and immediately hit the lock button. It should open up the Phone app where you can see all your contacts, call any number, etc.

My iPhone is jailbroken so that could be causing it. Can anyone confirm that it works on non-jailbroken iPhones?

Runt888 · Oct 23, 2010, 12:05 AM

Does the same with mine, non-jailbroken.

iluvifone · Oct 23, 2010, 12:30 AM

yep, flawed here, i4 with 4.0.1.. congratulations sir!

how in the heck did you find such a random combination of actions to test out? wow

Bernard SG · Oct 23, 2010, 12:35 AM

So now that the flaw is public, I believe it goes without asking that you have reported it to Apple?

strodda · Oct 23, 2010, 01:06 AM

holy crap.

awesome find. not that it matters to me personally... i never lock my phone.

strodda · Oct 23, 2010, 01:07 AM

Quote:

Originally Posted by iluvifone

yep, flawed here, i4 with 4.0.1.. congratulations sir!

how in the heck did you find such a random combination of actions to test out? wow

i gotta assume he was bored and was trying to do it. kinda random to happen by coincidence.

QuarterSwede · 01:22 AM

It also seems to lock you out from doing anything else, even putting it to sleep. I had to power mine off.

Quote:

Originally Posted by Bernard SG

So now that the flaw is public, I believe it goes without asking that you have reported it to Apple?

I just did even if he didn't.

Kristijan · Oct 23, 2010, 01:25 AM

Works for me on my non-jb iPhone 4 running 4.1
Requires a reboot after though.

-Kristijan

strodda · Oct 23, 2010, 01:39 AM

Quote:

Originally Posted by Kristijan

Works for me on my non-jb iPhone 4 running 4.1
Requires a reboot after though.

-Kristijan

it doesnt.

while in contacts, tap on a contact, make the phone call and hit 'end'. then the phone will go back to the lockscreen asking for a pw.

Kristijan · Oct 23, 2010, 01:40 AM

Quote:

Originally Posted by strodda

it doesnt.

while in contacts, tap on a contact, make the phone call and hit 'end'. then the phone will go back to the lockscreen asking for a pw.

Cool, thanks.

-Kristijan

PNutts · Oct 23, 2010, 09:59 AM

Whilst in the phone app I held down the home button and entered voice control mode where I started a song. What other interesting things can we do?

SnowDX · Oct 23, 2010, 10:25 AM

Works on mine running 4.1, (not jailbroken). If I proceed with making a call, I also get 3 beeps before the call connects that I do not get if I go through the proper procedure of unlocking the phone.

iluvifone · Oct 23, 2010, 06:10 PM

Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!

forza69 · Oct 23, 2010, 06:28 PM

Quote:

Originally Posted by iluvifone

Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!

Chances are, whoever finds your phone won't be some iPhone expert. It's not that big of a deal. Though, you deserve it if you're careless enough to leave such an expensive piece of technology laying around. Either way, look for AndroidLock in Cydia.

jayducharme · Oct 23, 2010, 07:22 PM

Weird. I can't make mine do it. Every time I hit the lock button, the phone just shuts off.

scaredpoet · Oct 23, 2010, 07:44 PM

Quote:

Originally Posted by iluvifone

Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!

Using a security flaw to get around a security flaw? Ironic, much?

rkmac · Oct 23, 2010, 07:52 PM

Quote:

Originally Posted by jayducharme

Weird. I can't make mine do it. Every time I hit the lock button, the phone just shuts off.

Same here.

EDIT: just tried again and it worked this time... interesting flaw. I dont really care who sees my contacts tbh though.
EDIT 2: You have to pretty much press the call button and the lock button at the same time. And come to think of it, this leaves the phone open to be used to call other people...

chembox · Oct 23, 2010, 08:22 PM

I think this is quite useful for lost iPhones. If you needed to email the owner or dial the owner's mom/dad/wife, you could easily do so.

-Garry- · Oct 23, 2010, 08:30 PM

Reported to Apple.

Applejuiced · Oct 23, 2010, 10:31 PM

Quote:

Originally Posted by iluvifone

Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!

Easy, dont let people play with your phone

kAoTiX · Oct 25, 2010, 05:06 AM

This is a good find so congrats to the OP.
I can confirm that it works as described, I'm jailbroken on 4.1 iPhone 4.

One thing I did notice being jailbroken is that after you enter the contacts screen, I can make SBSettings appear. I have it disabled on the lockscreen but obviously enabled in apps. You could possibly access apps through SBSettings from the dock. You could disable wifi/phone to stop a remote wipe through MobileMe.

Just considering worst case scenario, never assume stupidity, ignorance or non-malicious intent.

macdim · Oct 25, 2010, 02:23 PM

Confirmed that it does not work on my girlfriend's iPhone 3G on 3.1.3 but works on my 4.1 iPhone 4.

ivan300 · Oct 25, 2010, 04:17 PM

i cant seem to do it, i tried like 20x. i4 4.1

JD914 · 05:26 PM

Another issue that needs to be addressed by Apple

http://www.youtube.com/watch?v=hq8Dok2Th2s

davidhawkins123 · Oct 25, 2010, 05:18 PM

just saw this on 9 to 5 mac

Oct 22, 2010, 11:43 PM	#1
jordand321 macrumors member Join Date: Apr 2008 Location: New Zealand	iOS 4.1 Security Issue - Bypassing the Lock Screen to Make Calls I think I just found a security flaw in ios 4.1. When you iPhone is locked with a passcode tap Emergency Call, then enter a non-emergency number such as ###. Next tap the call button and immediately hit the lock button. It should open up the Phone app where you can see all your contacts, call any number, etc. My iPhone is jailbroken so that could be causing it. Can anyone confirm that it works on non-jailbroken iPhones?
	0

Oct 23, 2010, 12:35 AM	#4
Bernard SG macrumors 65816 Join Date: Jul 2010	So now that the flaw is public, I believe it goes without asking that you have reported it to Apple? __________________ 21" 2008 iMac, 13" MBP, 32Gb iPod Touch 4, 2002 eMac, iPod Touch 2 8GB, iPod Nano 1st gen, iPad 3 white 32 GB 3G, iPhone 5 16 GB. Uhmm... Fanboi!
	0

Oct 25, 2010, 05:06 AM	#21
kAoTiX macrumors 6502 Join Date: Oct 2008 Location: Midlands, UK	This is a good find so congrats to the OP. I can confirm that it works as described, I'm jailbroken on 4.1 iPhone 4. One thing I did notice being jailbroken is that after you enter the contacts screen, I can make SBSettings appear. I have it disabled on the lockscreen but obviously enabled in apps. You could possibly access apps through SBSettings from the dock. You could disable wifi/phone to stop a remote wipe through MobileMe. Just considering worst case scenario, never assume stupidity, ignorance or non-malicious intent. __________________ Contact me for iPad/iPhone/iPod parts & repairs in the UK (West Midlands) Google Nexus One iPhone 4 32GB Black Macbook Pro 17" 500GB HDD & 2GB RAM
	0

Oct 25, 2010, 05:11 PM	#24
JD914 Banned Join Date: Sep 2007 Location: Dutchess County NY	iOS 4.1 Security Issue - Bypassing the Lock Screen to Make Calls Another issue that needs to be addressed by Apple http://www.youtube.com/watch?v=hq8Dok2Th2s Last edited by JD914; Oct 25, 2010 at 05:26 PM.
	0

Oct 25, 2010, 05:18 PM	#25
davidhawkins123 macrumors regular Join Date: Apr 2010 Location: England	just saw this on 9 to 5 mac __________________ Game Centre ID : davidhawkins iPhone 4, iPhone 3GS, iPod touch, Mac Mini
	0

Oct 23, 2010, 12:05 AM	#2
Runt888 macrumors 6502 Join Date: Nov 2008	Does the same with mine, non-jailbroken.
	0

Oct 23, 2010, 12:30 AM	#3
iluvifone macrumors 6502 Join Date: Jun 2010	yep, flawed here, i4 with 4.0.1.. congratulations sir! how in the heck did you find such a random combination of actions to test out? wow
	0

Oct 23, 2010, 01:06 AM	#5
strodda macrumors regular Join Date: Jul 2010	holy crap. awesome find. not that it matters to me personally... i never lock my phone.
	0

Oct 23, 2010, 01:25 AM	#8
Kristijan macrumors member Join Date: Aug 2007 Location: Melbourne, Australia	Works for me on my non-jb iPhone 4 running 4.1 Requires a reboot after though. -Kristijan
	0

Oct 23, 2010, 09:59 AM	#11
PNutts macrumors 68030 Join Date: Jul 2008 Location: Pacific Northwest, US	Whilst in the phone app I held down the home button and entered voice control mode where I started a song. What other interesting things can we do?
	0

Oct 23, 2010, 10:25 AM	#12
SnowDX macrumors 6502 Join Date: Jun 2010 Location: The Great White North	Works on mine running 4.1, (not jailbroken). If I proceed with making a call, I also get 3 beeps before the call connects that I do not get if I go through the proper procedure of unlocking the phone.
	0

Oct 23, 2010, 06:10 PM	#13
iluvifone macrumors 6502 Join Date: Jun 2010	Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!
	0

Oct 23, 2010, 07:22 PM	#15
jayducharme macrumors 68000 Join Date: Jun 2006 Location: The hinterlands	Weird. I can't make mine do it. Every time I hit the lock button, the phone just shuts off.
	0

Oct 23, 2010, 08:22 PM	#18
chembox macrumors 6502a Join Date: Feb 2010	I think this is quite useful for lost iPhones. If you needed to email the owner or dial the owner's mom/dad/wife, you could easily do so.
	0

Oct 23, 2010, 08:30 PM	#19
-Garry- macrumors 6502a Join Date: Oct 2005 Location: Manchester, UK	Reported to Apple.
	0

Oct 25, 2010, 02:23 PM	#22
macdim macrumors 6502 Join Date: Oct 2007 Location: Canada	Confirmed that it does not work on my girlfriend's iPhone 3G on 3.1.3 but works on my 4.1 iPhone 4.
	0

Oct 25, 2010, 04:17 PM	#23
ivan300 macrumors member Join Date: Aug 2010	i cant seem to do it, i tried like 20x. i4 4.1
	0

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
App Brings the iOS Lock Screen to Your Mac	Vcxz	Mac Applications and Mac App Store	4	Sep 21, 2011 09:19 AM
iOS 4.2: What Do YOU Prefer the Hardware Switch to be, Rotation Lock or Mute?	whocaresit	iPad	97	Jan 13, 2011 06:10 AM