iOS 4.1 Security Issue - Bypassing the Lock Screen to Make Calls

[philstubbington]

Normal service is resumed after you try to dial any number.

It also seems to lock you out from doing anything else, even putting it to sleep. I had to power mine off.


I just did even if he didn't.

Normal service is resumed after you try to dial any number.

 

[miketymikey]

I can't reproduce this. Appears to already be fixed in the latest 4.2 beta build 8C5115c.

 

[mcbagel]

Tried it on iPhone 3GS non-jailbroken, this seems to be 4.1 OS issues. Also played around with it as well, able to send text messages / send emails to anyone you want as well. Text message and email tab won't work, but if you go under any contact on their list, then share contact, mms, then back space the (contact bubble) your able to send a text, same applies to email. Pretty sneaky but the security risk isn't just Calls/Voicemail. Also able to receive the text message from them back, just no reply option instead its "Ok".

 

[NXTMIKE]

Full features unlocked from using emergency call exploit:

1) View and Edit (or delete) Contacts
2) Make Phone Calls
3) Voice Mail
4) Photo Gallery
5) Camera App
6) Write an Email from their Email Address
(and send the email!)
7) Send an MMS

 

[alphaod]

Does not work on my phone… iOS 4.2 build 8C5115c

 

[casrenski]

Can anyone recommend any ways to get-around this security flaw until apple fixes it? such as addon's or something via cydia that will make you draw a pattern instead of inputting a number or w/e.. thanks!

i have (spirit) jb iOS3.2 with LockCalendar cydia addon and I am not affected. However, once I enter my PIN the phone app is running and open instead of just being taken to the last open app or homescreen.

 

[revnolo]

hmm

Interesting. Though.. since you need physical access to the phone anyways, seems you have a bit of privacy. Why not just call the victims number and pick up and continue from there. I believe you still have the same access. Last I checked.

 

[Dragonlance1561]

Not sure If anyone posted this, but you can access voice control from the lock screen, you don't need to get into the phone app. Just hold the home button as usual and it pops up.

P.S iPhone 3GS iOS 4.1

 

[twoodcc]

well i don't have a passcode on my phone, so this isn't a big deal to me, but i still hope that apple fixes this soon

 

[StuartShields]

The security flaw is still in iOS 4.2 beta 3.

It's just that you need 3 numbers to be able to do it. A lot of people are saying "random" numbers make it work.

I've been able to do it with 911 and 000 (emergency numbers), with both the passcode (4-digit) and passphrase (the passcode that allows letters).

I think this means that Apple will be releasing a 4.2 beta 4 or a fix in 4.2 without releasing a beta.

Check out my proof of concept here:

http://stuartshields.com.au/blog/ip...rks-in-iphone-4.2-beta-3-and-also-passphrase/

Also I appologise for how I was talking it was 2am when the video was made!

 

[trigga71]

I tried it on my wife's jail broken 3GS with 3.1.3 (7E18) and it worked as well.
I tried it on my jail broken 3GS with 3.1.2 (7D11) and it worked also.

 

[Robdup]

Voice control let's me make phonecalls when locked

I think I just found a security flaw in ios 4.1.

When you iPhone is locked with a passcode tap Emergency Call, then enter a non-emergency number such as ###. Next tap the call button and immediately hit the lock button. It should open up the Phone app where you can see all your contacts, call any number, etc.

My iPhone is jailbroken so that could be causing it. Can anyone confirm that it works on non-jailbroken iPhones?

Not sure if this is a flaw too, but I can make phone calls when my phone is locked by holding the home button and using Voice control.