HUGE Security Flaw with Passcode Lock

[Walter Bell]

Well I have discovered a huge flaw in the Passcode unlock feature.

1) make sure you have your phone set to require a Passcode (for the sake of this test, set it to require a Passcode immediately).

2) ensure a Passcode is required to unlock the phone by sliding the slider and being prompted to enter a code. Once prompted, cancel.

3) Now double click your home button to have the camera shortcut shown.

4) select the shortcut, take a picture, then click the icon in the bottom left corner to go to your camera roll.

5) once you are viewing your camera roll, click your home button.

After all of this, where do you end up? I end up at my home screen without having entered my Passcode. Nothing is restricted and I can access everything on my phone. Definitely a major flaw and defeats the purpose of having a Passcode. Hope apple fixes this soon.

 

[dieburnbot]

I just tried this and I ended up back at the lock screen. I use the non-simple passcode.

 

[Peace]

Try waiting the period of time you set before the lock screen activates.

This has been debunked over and over.

 

[alphaod]

Mine still requires me to enter the unlock code after going to the photo album and then hitting the home button.

 

[thatdrewguy]

i've discovered a huge flaw too, but it's not my phone...

 

[eyespii]

Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

I get back to the lock screen if I try what u wrote.

 

[martinlird]

Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

Yep, straight back to the lock screen

 

[Advil]

i smell iOS 5.0.1

 

[stw85]

Mine did NOT go back to the locked screen. I agree with OP. Unless I just did something wrong without knowing.

 

[rgarjr]

Mine says your phone is locked so u can't view the cam roll pics and does not go to home screen.

 

[204353]

I don't think this happens all the time, but I think I might've experienced what the OP describes when using previous beta versions of iOS 5. Maybe that bug lingers occasionally in the current release?

 

[Goldinboy17]

Tried and tried again. This is the end result:

 

[thenerdal]

I have to aware people on this thread that, by default, people can use your phone even with the passcode on if you have the 4S, with Siri.

So in the Passcode Lock settings, all you have to do is switch Siri to "Off". You'll still be able to use Siri, just not when the phone is locked.

Just to people who don't know.

 

[ApplesAndOrangs]

I have to aware people on this thread that, by default, people can unlock your phone even with the passcode on if you have the 4S, with Siri.

So in the Passcode Lock settings, all you have to do is switch Siri to "Off". You'll still be able to use Siri, just not when the phone is locked.

Just to people who don't know.

And how is that?

 

[thenerdal]

And how is that?

http://news.cnet.com/8301-27080_3-20122632-245/bad-siri-shell-let-anyone-use-a-locked-iphone-4s/

 

[abz1981]

Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

Hi
I have discovered on an iPhone 4 with ios5 that you can still make calls using voicecontroll even if pass code lock is active.

 

[ApplesAndOrangs]

http://news.cnet.com/8301-27080_3-20122632-245/bad-siri-shell-let-anyone-use-a-locked-iphone-4s/

I mean how can a thief unlock your phone with Siri? Isnt that what you implied.

I don't really care if a thief calls John Doe or sends a txt msg to my mom. I would be disabling the sim ASAP.

But yeh if you ask Siri who am I, it gives you your name and address. Now that is scary. (assuming you have added the info)

 

[HappyVirus]

Nope. does not work on my phone. it takes me back to the passcode lock.

This is on my ip4s

 

[dave420]

Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

Hi
I have discovered on an iPhone 4 with ios5 that you can still make calls using voicecontroll even if pass code lock is active.

The funny thing is you can do the same thing in ios4.

 

[BCurry1]

Tried your instructions several times on my iPhone 4S, and it brings up the lock screen every time.

 

[ah123]

How about if you have a missed call, then you swipe the missed call on the lock screen - it lets you call without entering your passcode - then upon hanging up the call, you are at your homescreen.

 

[CavemanUK]

Well I have discovered a huge flaw in the Passcode unlock feature.

1) make sure you have your phone set to require a Passcode (for the sake of this test, set it to require a Passcode immediately).

2) ensure a Passcode is required to unlock the phone by sliding the slider and being prompted to enter a code. Once prompted, cancel.

3) Now double click your home button to have the camera shortcut shown.

4) select the shortcut, take a picture, then click the icon in the bottom left corner to go to your camera roll.

5) once you are viewing your camera roll, click your home button.

After all of this, where do you end up? I end up at my home screen without having entered my Passcode. Nothing is restricted and I can access everything on my phone. Definitely a major flaw and defeats the purpose of having a Passcode. Hope apple fixes this soon.

Mine definitely does not do that. like others have said it goes back to lock screen. Are you sure you are not using a pre-release version or jailbroken?

 

[JRoDDz]

Fail. Mine goes right back to lock screen.

 

[Type X]

OP=

 

[elistan]

After all of this, where do you end up?

Right back to the lock screen.