iOS 7 Lock Screen Vulnerability Gives Access to Photos, Email

Discussion in ' News Discussion' started by MacRumors, Sep 19, 2013.

  1. macrumors bot


    Apr 12, 2001

    There appears to be a lock screen vulnerability in iOS 7 that allows access to a device's photos, email, and social networking accounts. According to Jose Rodriguez, who provided a video of the bug to Forbes, a simple set of gestures gives unwarranted access to a device running iOS 7.

    The exploit can be initiated by swiping upwards on the device's lock screen to access the Control Center and open the Clock app. Once the clock app is open, holding the phone's sleep button will cause the "Slide to Power Off" option to appear. Tapping on cancel at this juncture and then double clicking on the home button will open the phone's multitasking screen, providing access to the camera and the photos on the device. The key to the trick, however, is to access the camera app from the lock screen first, causing it to appear in the recently used apps list.

    Because the photos from the camera app can be shared via Flickr, Twitter, Facebook, and email, an intruder can also gain access to those apps using the sharing tools.

    Apple has been plagued by lock screen vulnerabilities multiple times over the course of the year, with a bug appearing in iOS 6.1 that allowed lock screen access to the phone when the emergency call function was manipulated.

    The current iOS 7 vulnerability can be avoided by preventing the Control Center from appearing on the lock screen. The setting can be turned on by opening the Settings app, selecting "Access on Lock Screen" and toggling it off.

    Update: Apple has told AllThingsD that it is working on a fix.
    Article Link: iOS 7 Lock Screen Vulnerability Gives Access to Photos, Email
  2. macrumors 6502a

    Sep 30, 2007
    Ft. Lauderdale, FL
    I've always wondered how people stumble upon these vulnerabilities, then turn around and are even able to recreate them.
  3. macrumors newbie

    Jun 17, 2011
    Working here on my 4S

    Unsettling to be able to see all my photos and contacts on a locked phone without entering my passcode.
  4. macrumors 6502a

    Sep 30, 2007
    Ft. Lauderdale, FL
    Maybe tomorrow's release of 7.0.1 will address this?
  5. macrumors 6502

    May 27, 2010
    Pick one that the Applelogists will go for:

    - Why are people keeping their Photos in the multitasking bar? :confused:
    - I've never had that problem!!! This guy is just looking to create trouble for Apple.
    - Go get an Android if you don't like the way the lock screen behaves.

    In reality though, I'm sure this'll be fixed in 7.0.1 or 7.0.2.
  6. macrumors 6502a


    Jun 17, 2009
    The CCTV Capital of the World
    Here we go again....

    One of the reasons I wait a week or two before upgrading.
  7. macrumors 6502

    Feb 4, 2011
    Elizabethtown, PA
    I'm thinking the exact same thing!!
  8. macrumors regular

    Oct 11, 2011
    I wish since I don't have a passcode, that when I access the camera from the lock screen I could have the share option available when looking at recently taken pictures.
  9. macrumors 65816

    May 25, 2012
    deja vu... feel like this same thing happened during iOS6
  10. macrumors 6502

    Feb 2, 2011
    Do people have nothing better to do than to try and find ways to break iOS?
  11. notjustjay, Sep 19, 2013
    Last edited: Sep 19, 2013

    macrumors 603


    Sep 19, 2003
    Canada, eh?
    Often just by playing around. Sometimes playing around leads to one thing which causes you to realize "Wait, what if I do this too?" and, whoops, you've stumbled on a path that nobody ever expected.

    Then you realize you're in the "bad" state (I can see photos and I'm not supposed to be able to!) and the next step is to try to recreate the actions that got you there, until you distill it down to exactly what the problem is.

    Then you file a problem report to the software guys and they can fix it...

    Locking down software is kind of like locking down a physical room. It's easy to set up the obvious stuff -- put locks on the doors and windows -- but then you have to start thinking about the more far-fetched scenarios. What if you gained access to the boiler room, then snuck up through the ceiling tile? What if someone manages to find the spare key to the lock that you left in the bedroom? Thorough testing, and/or reports from accidental discoveries like this, are what's needed to plug up all the holes.

    No software is perfect. Don't you want them to find the flaws so they can be fixed quickly?
  12. macrumors 6502a


    Mar 13, 2009
    Me too! Really, you swipe up to show the control center, then you turn your car on and off 6 times in succession, while jumping up and down on your left foot, while eating an apple (a Granny Smith, specifically) and humming the theme to 'Gilligan's Island" and you will be able to see internet photos of your own privates......

    WHO has the time to do this stuff?
  13. macrumors 6502

    Apr 10, 2012
    Sarajevo, Bosnia
  14. macrumors newbie

    Aug 7, 2013
    Easy fix - just turn off access to the control center from the lock screen.

    I too am amazed at how people figure this stuff out....ok, stand on one leg, wear an eye patch and bark like a dog. If you do those things then the software will hiccup.

  15. macrumors 6502a


    Mar 13, 2009
    Mine still says up to date..... Is that a 5?
  16. macrumors 68040


    Dec 19, 2004
    Apple really needs to implement a full lockdown lockscreen option. Where all you can do is swipe to unlock. No playing music, emergency dialing, answering calls, silencing alarm, &c. Just complete and total lockdown for people with sensitive information.
  17. macrumors 6502a

    Jun 10, 2007
    The first thing I turned off when I installed iOS 7.

    The control center is a bit too much power for someone to have over my phone if they don't know my passcode.
  18. macrumors newbie

    Aug 28, 2012
    cant make it work

    ive been trying to get this to happen, cant make it work on my 5.
  19. macrumors 65816

    Feb 4, 2011
    One moment you're getting praised for security, the next you're getting ripped for exploits :rolleyes:
  20. DavidLeblond, Sep 19, 2013
    Last edited: Sep 19, 2013

    macrumors 68020


    Jan 6, 2004
    Raleigh, NC
    7.0.1 is 5S and 5C only. That picture is clearly a 5S. Look at the home button.
  21. macrumors regular


    Sep 29, 2008
    Listen to this one then!

    Even if you have the password lock on when you connect the iphone to any mac and open Image Capture app you can see and transfer all the videos&photos... (i bet you can also do it on pc too)

    i thought this was gonna be fixed with ios 7 but it hasnt.

    basically because of this i never give my phone to charge on a laptop at hotels and restaurants!!!

    the funniest part: without entering the passcode if you take photos you can only see the ones you recently took... (i guess they wanted us to protect our photos here. thanks apple)
  22. macrumors member

    Jul 24, 2012
    It's out for the iPhone 5S and 5C. Nothing else. Notice the home button tells you this is the 5S
  23. Guest


    Jul 12, 2013
    Ha...what a joke...and the Betas accomplished what?
  24. macrumors 6502

    Jul 8, 2013
    I also have been trying to do this and it doesn't work on my iP5
  25. macrumors 6502a


    Mar 13, 2009
    That's because you forgot to put your left index finger in your right ear....:confused:

Share This Page