HUGE Security Flaw with Passcode Lock

Discussion in 'iPhone' started by Walter Bell, Oct 21, 2011.

  1. Walter Bell macrumors regular

    Joined:
    Mar 25, 2010
    #1
    Well I have discovered a huge flaw in the Passcode unlock feature.

    1) make sure you have your phone set to require a Passcode (for the sake of this test, set it to require a Passcode immediately).

    2) ensure a Passcode is required to unlock the phone by sliding the slider and being prompted to enter a code. Once prompted, cancel.

    3) Now double click your home button to have the camera shortcut shown.

    4) select the shortcut, take a picture, then click the icon in the bottom left corner to go to your camera roll.

    5) once you are viewing your camera roll, click your home button.

    After all of this, where do you end up? I end up at my home screen without having entered my Passcode. Nothing is restricted and I can access everything on my phone. Definitely a major flaw and defeats the purpose of having a Passcode. Hope apple fixes this soon.
     
  2. dieburnbot macrumors 6502a

    dieburnbot

    Joined:
    Aug 18, 2008
    Location:
    CA
    #2
    I just tried this and I ended up back at the lock screen. I use the non-simple passcode.
     
  3. Peace macrumors Core

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #3
    Try waiting the period of time you set before the lock screen activates.

    This has been debunked over and over.
     
  4. alphaod macrumors Core

    alphaod

    Joined:
    Feb 9, 2008
    Location:
    NYC
    #4
    Mine still requires me to enter the unlock code after going to the photo album and then hitting the home button.
     
  5. thatdrewguy macrumors regular

    Joined:
    Mar 14, 2009
    #5
    i've discovered a huge flaw too, but it's not my phone...
     
  6. eyespii macrumors 6502

    Joined:
    Mar 8, 2008
    #6
    Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

    I get back to the lock screen if I try what u wrote.
     
  7. martinlird macrumors member

    Joined:
    Oct 7, 2011
    #7
    Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

    Yep, straight back to the lock screen
     
  8. Advil macrumors 6502a

    Joined:
    Oct 4, 2008
  9. stw85 macrumors member

    Joined:
    Oct 7, 2011
    Location:
    Brooklyn
    #9
    Mine did NOT go back to the locked screen. I agree with OP. Unless I just did something wrong without knowing.
     
  10. rgarjr macrumors 603

    rgarjr

    Joined:
    Apr 2, 2009
    Location:
    Southern Cal
    #10
    Mine says your phone is locked so u can't view the cam roll pics and does not go to home screen.
     
  11. MarcBook macrumors 6502a

    MarcBook

    Joined:
    Jul 13, 2008
    Location:
    Jersey, Channel Islands
    #11
    I don't think this happens all the time, but I think I might've experienced what the OP describes when using previous beta versions of iOS 5. Maybe that bug lingers occasionally in the current release?
     
  12. Goldinboy17 macrumors 65816

    Goldinboy17

    Joined:
    Jun 21, 2010
    Location:
    San Francisco, Ca
    #12
    Tried and tried again. This is the end result:
     

    Attached Files:

  13. thenerdal, Oct 21, 2011
    Last edited: Oct 21, 2011

    thenerdal macrumors 65816

    Joined:
    Oct 14, 2011
    #13
    I have to aware people on this thread that, by default, people can use your phone even with the passcode on if you have the 4S, with Siri.

    So in the Passcode Lock settings, all you have to do is switch Siri to "Off". You'll still be able to use Siri, just not when the phone is locked.

    Just to people who don't know.
     
  14. ApplesAndOrangs macrumors regular

    Joined:
    Sep 30, 2011
    #14
    And how is that?
     
  15. abz1981 macrumors 65816

    Joined:
    Jan 3, 2011
    #16
    Wirelessly posted (Mozilla/5.0 (iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A334 Safari/7534.48.3)

    Hi
    I have discovered on an iPhone 4 with ios5 that you can still make calls using voicecontroll even if pass code lock is active.
     
  16. ApplesAndOrangs macrumors regular

    Joined:
    Sep 30, 2011
    #17
  17. HappyVirus macrumors member

    Joined:
    Aug 27, 2008
    #18
    Nope. does not work on my phone. it takes me back to the passcode lock.

    This is on my ip4s
     
  18. dave420 macrumors 65816

    Joined:
    Jun 15, 2010
    #19
    The funny thing is you can do the same thing in ios4.
     
  19. BCurry1 macrumors member

    Joined:
    Jun 12, 2009
    Location:
    Oklahoma
    #20
    Tried your instructions several times on my iPhone 4S, and it brings up the lock screen every time.
     
  20. ah123 macrumors regular

    Joined:
    Jul 5, 2011
    #21
    How about if you have a missed call, then you swipe the missed call on the lock screen - it lets you call without entering your passcode - then upon hanging up the call, you are at your homescreen.
     
  21. CavemanUK macrumors 6502

    CavemanUK

    Joined:
    Jun 29, 2006
    Location:
    Rhyl, North Wales
    #22
    Mine definitely does not do that. like others have said it goes back to lock screen. Are you sure you are not using a pre-release version or jailbroken?
     
  22. JRoDDz macrumors 68000

    JRoDDz

    Joined:
    Jul 2, 2009
    Location:
    NJ
  23. elistan macrumors 6502a

    Joined:
    Jun 30, 2007
    Location:
    Denver/Boulder, CO
    #25
    Right back to the lock screen.
     

Share This Page