Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
iOS 7 Bug Allows Disabling of 'Find My iPhone' Without Password
- Thread starter MacRumors
- Start date
- Sort by reaction score
Sad reflection on the comment system that this garbage is the top comment. This exploit can be easily prevented so it is in the public good to get the word out. Furthermore, it cannot disable activation lock.
What did it take, physical access to the phone and about 75 steps while chanting and doing a rain dance and the hokey pokey at the same time?
What good is there in disabling the control centre besides inconveniencing yourself? A thief can easily power the device down until the SIM card can be pulled. Think please.
"The bypass only works on a device that does not have Touch ID or a Passcode enabled"
I will find some way to control my panic until the fix
(If they already have my phone, AND I don't have the phone locked, then Find My Phone never mattered and never will, except for getting my hardware back. My personal data? Already gone. They can now email my grandmother, knowing all kinds of personal stuff about me, and ask for money. Or whatever ID-related scam they want. Now, granted, the physical phone's value ain't peanuts! Find My Phone is great. But it's solving the smaller of two potential "thefts." Lock your phone, people!)
I do think it's more responsible to report the DETAILS only AFTER the fix. Report that there IS an issue, and how to fix it (lock code), then wait a reasonable time. That would be responsible security reporting (vs. maximizing ad views).
I will find some way to control my panic until the fix
(If they already have my phone, AND I don't have the phone locked, then Find My Phone never mattered and never will, except for getting my hardware back. My personal data? Already gone. They can now email my grandmother, knowing all kinds of personal stuff about me, and ask for money. Or whatever ID-related scam they want. Now, granted, the physical phone's value ain't peanuts! Find My Phone is great. But it's solving the smaller of two potential "thefts." Lock your phone, people!)
I do think it's more responsible to report the DETAILS only AFTER the fix. Report that there IS an issue, and how to fix it (lock code), then wait a reasonable time. That would be responsible security reporting (vs. maximizing ad views).
That's right. Because we as consumers have no right to know about any security issues on our phones... let's just hush it all up because ignorance is bliss.
Sounds like a good enough excuse for a lawsuit as any. COMEON, EVERYONE! LET'S SUE MACRUMORS!
Duh? OMG you are so smart for figuring that one out. I thought the point was keeping the device powered on and preventing it from being found.
I don't keep a password on my iPhone but this could never happen to me.
Settings, General, Restrictions, Accounts, DO NOT ALLOW CHANGES
This means iCloud along with all my email accounts, etc. are "greyed out" in Settings and cannot be modified without enabling changes in Restrictions which requires my passcode.
Thanks!
It's good to know that having a passcode/Touch ID will prevent this bug from being an issue though. If you're worried about theft, you should have those enabled in the first place, since even without the bug, a thief could do a lot of bad things with your phone.
As far as I'm concerned you're an idiot if you don't have a passcode on your phone. It's just like leaving your house unlocked.
Sure they have. No amount of testing can find every possible outcome. Sorry, technology is too complicated.
This requires an unauthorized user gain access to your phone without it already locked. So, really not "that" big of a security concern.
Yes, but they've also tipped off users to the fact that a passcode will prevent it, and let them know that it will be fixed in 7.1...
I thought that, but the guy who made the video told us it was a MAJOR security flaw on Apple's PRIZED iOS 7 iCloud lock.
I distinctly remember Apple featuring that password check for turning off Find my iPhone in their commercials. /s
Seriously, if you have to get past Touch ID or passcode to even get in the phone, then there is nothing to see here. This is a minor flaw that is apparently already fixed in iOS 7.1.
If somebody really wants to thwart Find my iPhone the proper way is to power down the phone or pull the SIM.
Good to know. I'll be updating to 7.1 as soon as it is released. In the meantime, adding an unlock passcode seems to make this "hack" pointless.
I don't keep a password on my iPhone but this could never happen to me.
Settings, General, Restrictions, Accounts, DO NOT ALLOW CHANGES
This means iCloud along with all my email accounts, etc. are "greyed out" in Settings and cannot be modified without enabling changes in Restrictions which requires my passcode.
thanks, my wife hates passcodes
If all fixes were easy, they would happen quickly.
Since Apple rarely communicates about specific items fixed, I 'd say they don't have a great record of telling us about fixes.
Also, there are so many combinations of apps and system programming code components, that I find fit impossible for anybody to catch every random bug.
So, every once in a while somebody stumbles on something and wants their 5 minutes of fame.
It will be fixed!