Lock Screen Bypass

Discussion in 'iOS 7' started by TheKrs1, Sep 19, 2013.

Thread Status:
Not open for further replies.
  1. TheKrs1, Sep 19, 2013
    Last edited: Sep 19, 2013

    macrumors 6502

    Joined:
    Apr 11, 2010
    #1
  2. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #2
    Seriously? This again? This is just like people claiming that going into the camera app and going into the gallery was an expoit to bypass locking. It wasn't. This is exactly the same. If you have your password lock set to immediately this doesn't work. As it shouldn't. If you have it set to anything other than immediately it will go into task switching from the lock screen apps...because YOUR PHONE ISN'T LOCKED!!!!

    Folder-ception, is however, real.
     
  3. macrumors P6

    Joined:
    Oct 17, 2011
    #3
    Doesn't seem like that's the case here actually.
     
  4. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #4
    This works with immediate lock set. It's definitely an exploit.

    I can reproduce this..
     
  5. macrumors 6502a

    Joined:
    Sep 10, 2013
    Location:
    Ottawa, Canada
    #5
    Watch the actual video linked on the front page.

    The phone is password protected, and locked.

    The access he gains is beyond just photos anyways.

    It is a pretty serious bug, although how one stumbles across it is fascinating.
     
  6. macrumors P6

    Joined:
    Oct 17, 2011
    #6
    To be fair it's not exactly serious in the sense that you can simply not have access to Control Center from the lock screen and that takes care of it.
     
  7. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #7
    I did watch it, and you are wrong.

    When passcode lock is set like this:
    [​IMG]

    it "works"
    [​IMG]

    But, when it is set like this:
    [​IMG]

    The app comes slamming down to the lock screen:
    [​IMG]

    When you don't have it set to lock immediately...your phone just simply isn't locked immediately. So you can swipe the screen to bypass the lock too at that point. The whole holding the power button is just for show, so it looks like an authentic exploit. It's to see people react like this to nothing. Kinda like last year, when people were convinced that the camera app was an exploit past the lock screen!!! Same deal.

    ----------

    No, it doesn't.
     
  8. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #8
    Mine is set exactly like that and I was able to reproduce the bug.

    Try again...
     
  9. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #9
    OK, so, have you actually tried accessing anything. I can actually get the multi-tasker to show up...but all the apps are locked. I can't see the screen shot...and I also can't access anything except camera...which is already accessible from the lock screen. So in reality the only access this gains someone, is seeing your apps.
     

    Attached Files:

  10. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #10
    You need to access the camera before you perform the rest of the bug, so that it shows up in the multitasking tray. You may also need to open the photo gallery from the camera; not too sure about this bit.

    Once I did this I was able to see all of my photos without unlocking the phone (by going into the camera in the multitasking tray and then hitting the photo gallery button in the bottom left corner).
     
  11. tgi
    macrumors 65816

    tgi

    Joined:
    Aug 29, 2012
    #11
    You can access not only the camera, but the camera roll as well. Which you can't access just by accessing the camera regularly from the lock screen.
     
  12. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #12
    OK, this is correct. So this is a problem, because your super important photos are going to allow someone to steal your identity? Everything important is still secure. This will be patched in under a week no doubt anyway.

    The only issue this poses for security, potentially is that it lets you send an email or text message without unlocking. So that's not cool.
     
  13. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #13
    I take photos of all sorts of things.. I don't want just anybody being able to see them.

    How can you say it's not a problem? :eek:

    Plus this is just the latest lockscreen bypass that has been found... how many more are there?
     
  14. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #14
    I guess I don't consider my photos to be super important. But I also don't have any photos on there I wouldn't want anyone to see. I couldn't care less if someone saw my photos.
     
  15. macrumors P6

    Joined:
    Oct 17, 2011
    #15
    It's still a problem. Maybe not a big one for some, maybe not even any kind of for others, but it doesn't make it any less of a problem as far as it not functioning correctly and getting through a security feature (even if partially).
     
  16. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #16
    Whether you care about them or not, they're supposed to be secure and protected by a lock screen. Does it not make you wonder what else people might be able to access using other tricks?

    I think bugs like this are very serious.
     
  17. macrumors P6

    Joined:
    Oct 17, 2011
    #17
    That's fine. It still doesn't mean that it's not a problem or not a security concern on some level (given that it bypasses security).

    You got it wrong in the beginning, it's been clarified now--no need to try to pull at random strands just to create some sort of supporting point to somehow indirectly justify your incorrect initial statement.
     
  18. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #18
    I agree. I do concede that this one is for real. I personally never let my phone out of my sight tho. I don't believe that any phone is actually secure.

    My only real concern with iOS 7 is that airplane mode is on the front screen. I wonder if they implemented a way of bypassing that if you put your phone in lost mode...

    I know that if you put it in lost mode it will become unusable...so unless you want to just look at it turned off you are going to have to eventually plug it in to something and that means you are going to have to activate it...and if its lost, it ain't happening. I would like to know how they counter that.
     
  19. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #19
    You can't access the notification centre or control centre in lost mode, which is good.

    I tried using the same method to get into the multitasking bar whilst in lost mode, because I thought you could probably get into control centre that way, but it doesn't seem to work.
     
  20. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #20
    That's good to know. But what if someone enables airplane mode as soon as they pick up your phone. Now it can't be tracked until it gets on a network again. When you enable lost mode does it turn on Wifi? Kinda like guest mode on a Mac.
     
  21. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #21
    I guess you can turn off control centre in the lockscreen to stop that from happening, but it's a convenient feature for sure.

    I'd like the ability to customise what appears in control centre, in both the lock screen and normally. I'd remove airplane mode from the lock screen one.
     
  22. macrumors 68030

    Joined:
    Jul 21, 2011
    Location:
    Los Angeles, CA
    #22
    Removing airplane mode would be a much better option. I like control center and it would be nice to see in the next point release the ability to select what options show up there. Airplane mode doesn't belong anywhere outside your device IMHO. Even Siri can activate it now...so if you are chasing your phone thief he can conveniently disable it hands free!

    They should add a Voice ID for Siri.

    Siri: Sorry, I don't recognize your voice...STRANGER DANGER!!!! LOCK DOWN!

    I actually wondered if the 5S will allow you to restrict Siri to only authorized finger scans. Seems logical.
     
  23. macrumors 601

    Joined:
    Mar 25, 2009
    Location:
    Lincoln, England
    #23
    Haha great idea! ..until you get a cold :p

    Only thing about that is Siri doesn't have to be activated with the home button. You can turn on the 'raise to speak' option or press a button on a bluetooth stereo/headset to activate Siri.
     
  24. Moderator

    dejo

    Staff Member

    Joined:
    Sep 2, 2004
    Location:
    The Centennial State
    #24
Thread Status:
Not open for further replies.

Share This Page