iOS 4.1 Security Issue - Bypassing the Lock Screen to Make Calls

[/\/\]

iPhone 3GS iOS 4.1 not working on my phone

 

[mattwolfmatt]

Good news, mine is extra secure and won't make unauthorized calls. When I try to replicate this problem, I try and dial a number, it appears to attempt to dial. After a few seconds it beeps and says "Call Failed".

Thanks Apple and AT&T! Your security is top notch!

 

[MacKeeperFanMod]

This isn't really surprising.The situation has always been that if somebody gets physical access to any piece of hardware, whether phone or computer, it's theirs.

Want to show me a real security flaw? Access the contents of iPhone, iPad, or Mac Pro at a distance (without owner participation, of course).

 

[chagla]

This isn't really surprising.The situation has always been that if somebody gets physical access to any piece of hardware, whether phone or computer, it's theirs.

Want to show me a real security flaw? Access the contents of iPhone, iPad, or Mac Pro at a distance (without owner participation, of course).

http://www.tuaw.com/2010/03/24/iphone-and-sms-database-hacked-at-pwn2own-contest/

http://en.wikipedia.org/wiki/Pwn2Own

same person hijacking Safari, 3 times in a row, http://www.zdnet.com/blog/security/...cks-safari-again/5846?tag=mantle_skin;content

 

[Digital Dude]

The plot thickens...

The continued cascade of iPhone-4 related screw-ups’ continues. As stated elsewhere, the iPhone-4 is fast becoming Apple’s Vista.

Oh, before I get lambasted by the fanboys, I've been an Apple consumer since 1984. Still, I may well buy the damn thing' because I need it, rather than want it. I travel to Europe and it's still the best available when the ATT International rates are considered. Hmm, come to think of it, maybe the Windows-7 phone is a possibility.

 

[kunal123]

Doesn't work on my mom's 2.0. Great find though.

 

[seamer]

I don't see why music playback is such a hairy beast. You turn the screen on, double-tap the menu button and the ipod controls will display.

 

[Roessnakhan]

I always double tap the home button when in lock mode to access the iPod when driving. Hope don't see this as a flaw and get rid of it.

That's intentional.

 

[PBUser167]

That's what I did. Voice Control has full functionality, so calling people or dialing numbers is also possible.

Ummm, voice control has full access to call folks without exploiting this bug.

Edit: and saying "call" followed by a numeric number works just fine.

 

[NinjaHERO]

Didn't work on mine. I got a 3g though. Maybe it's only on the newer phones?

 

[ujupanti]

wow

wow..

it works on my iphone!

1) ability to view all contacts
2) edit the contacts (eg. change photo - access Photo albums or use Camera to snap photo
3) share Contact via Email (email to anyone)
4) share Contact via MMS (can sms/mms anyone, snap Photo or capture Video)
5) ability to call any number
6) voice control, practically anything from dialing numbers to "play music"

lol

 

[justroach]

can't reproduce on 3GS

I have been using a "complex" password instead of the simple one, but even when I turn that off I still cannot reproduce on a jailbroken 4.1 3GS.

Update: Looks like it was a timing issue. I got this to work after changing the time between pressing call and the lock button.

 

[mbrannon47]

Let it also be noted that you can access Voice Control through this contacts workaround.

 

[mbrannon47]

Let it also be noted that you can access Voice Control through this contacts workaround.

Nevermind. It's an option in the lock screen settings; always available!

 

[mbrannon47]

Nevermind. It's an option in the lock screen settings; always available!

Wait a second...my phone is locked, and passcoded, but I can still call whoever I want with Voice Control?

 

[aardwolf]

You can also "Share contact" from Contacts and send an e-mail to anyone you want.

 

[MOO5E]

Open a contact, share contact >
Can also send MMS and Email and also view and take new photos.

 

[mattwolfmatt]

Open a contact, share contact >
Can also send MMS and Email and also view and take new photos.

THIS is how those photos came from Bert Farve's phone!! It wasn't him, his phone was hi-jacked!

 

[TheKrs1]

I can't reproduce on iPhone 4 running 4.2 (8C5115C)

 

[Dopeyman]

Yup... I tried this on my jb i4 with 401... It bounced me to the dialing keypad and was able to make a call...

 

[acidblue]

i0S 4.2 Beta 3 Can't Reproduce

Confirmed in 4.1 but, cannot reproduce on iPhone 4, 32GB iOS 4.2 beta 3. Funny stuff!

 

[griz]

Wired is reporting this will be fixed in 4.2.
http://www.wired.com/threatlevel/2010/10/iphone-snoop/

 

[lakemoore]

Text Messages

You can send text messages if you go to a contact then tap on share contact. Email too.

 

[MacRacer]

iPhone 3GS too. DARN

I just read his and tried it on a non-jailbroken 3GS and it works with iOS 4.1. I can't believe there is such a security hole.

 

[MacRacer]

I just read his and tried it on a non-jailbroken 3GS and it works with iOS 4.1. I can't believe there is such a security hole.

You have to be quick , REAL QUICK, to make the loop hole activate to get to the key pad.