Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
That's right. Because we as consumers have no right to know about any security issues on our phones... let's just hush it all up because ignorance is bliss. :rolleyes:

They don't have to post the instructions. Posting an alert that there is a way to defeat the FMIP, that Apple has been notified and encouraging owners to use a passcode lock would have been more responsible.

----------

Sad reflection on the comment system that this garbage is the top comment. This exploit can be easily prevented so it is in the public good to get the word out. Furthermore, it cannot disable activation lock.

First of all, it's a valid post. Just because you don't agree with it doesn't permit you to call it "garbage". Check the forum rules, insults are not allowed.
 
First of all, it's a valid post. Just because you don't agree with it doesn't allow you to call it "garbage". Check the forum rules, insults are not allowed.

First of all, it's not valid. It's better to push security vulnerabilities out in the open both as a way to pressure Apple to do something about it, and to inform those who might be susceptible to take steps to protect themselves.

Secondly, he didn't insult you directly, so it's not against forum rules.
 
BUT... What I want to know is this: Does doing this trick cause the device's activation lock to be disabled?
 
Good point. But the possibility that some random act can switch off Find My iPhone feature is upsetting me.

Then restrict account changes in the settings. It's a bad bug but this is a workaround that most people should probably keep enabled already.
 
MacRumors should keep it a secret, not go telling everyone how it's done so people can go steal iPhones and iPads.
 
No, you don't. I have beta 5 and there are still quite a few bugs left to fix. It will be released when it is ready.

Too true. Still the occasional Apple logo crash bug, even just using Apple's stock apps. Tried to open the camera app a couple of days ago and boom - Apple logo crash for a few seconds. Needed to take a picture quickly, too. :( Such is life...
 
MacRumors should keep it a secret, not go telling everyone how it's done so people can go steal iPhones and iPads.
The only people vulnerable are those who leave passcode protection off — they're just asking for trouble anyway.
 
No, you don't. I have beta 5 and there are still quite a few bugs left to fix. It will be released when it is ready.

It's a beta, they're always glitchy, once it's in GM all of the known issues get fixed and it will be fine. Apple should have released an update sooner.
 
Its easier than that

Just power the phone down. and all of the security features are disabled.
 
Gotta agree with others, set your passcode.

Also bad: allowing Control Center to work on the lock screen. If a thief steals your iPhone, the first thing they can do is put it in Airplane mode by swiping up from the bottom and tapping Airplane.

Then Find My Phone, Remote Wipe, etc. will not work at all. And Apple provides no way to authenticate Airplane mode or remove that button from Control Center. You pretty much have to disable its use on the lock screen, losing all of the other features in the process.
 
Sweet! Maybe now I can finally fix my sister-in-law's icloud setup since she forgot the password and doesn't have access to the old email address!
 
There is always some obscure security bug that affects iOS. I find it astonishing that Apple done know about them and equally that people find them.

Apple doesn't talk about them but that doesn't mean they do nothing. They might not be discussing it because they don't want more information to get out and someone to find something even worse.
 
Don't you folks at MacRumors realize that by posting a thread like this, you tip off thieves to a way of successfully thwarting Apple's find-my-iphone security. Maybe this should not be posted?!?!?!? Now you've given every thief who monitors this site a head start until Apple fixes. Well done MacRumors!!!!

Um - this lets people like us know to put a password/touch print on our phones and when 7.1 becomes available, to update it.

without this notice, it could be worse than not publicly informing everyone.
 
Apple haven't really had a great record of fixing things quickly. Also I'm sure they could devise some software that could run through combinations of keystrokes etc to find things like this.
They should do better!

Nope. In reality, history shows that Apple fix these types of problems quickly.

In addition, iOS is the only mainstream mobile OS that provides official security updates that end user can install on all compatible devices up to 3 years old.
 
But...you would have to already have access to the phone. If I'm not using my phone it's locked with TouchID and a 13 character password...if I leave it behind, no one can even get in to do this.
 
It's a beta, they're always glitchy, once it's in GM all of the known issues get fixed and it will be fine. Apple should have released an update sooner.
Wow, talk about getting it backwards. GM is declared AFTER the critical issues are fixed- the act of declaring GM doesn't magically fix anything. If Apple could do that, they would.
 
Some clarification, please: If a thief gets to your phone while it is currently in a "passcode unlock" phase (like, mine prompts for passcode after an hour), will the passcode still thwart the thief at disabling find my phone? Thanks.
 
This is why I have my Restrictions set to not allow changes to accounts on the device...
 
If you enable restrictions and lock the ability to change accounts it will gray out iCloud. So effectively stopping anyone from being able to change it permanently.


Also...... What this doesn't show is how a thief bypassed the lock screen to begin with.
 
Don't you folks at MacRumors realize that by posting a thread like this, you tip off thieves to a way of successfully thwarting Apple's find-my-iphone security. Maybe this should not be posted?!?!?!? Now you've given every thief who monitors this site a head start until Apple fixes. Well done MacRumors!!!!

It was not Macrumors who made the Youtube video, which has been available since yesterday.

Knowledge of the exploit was already made public by someone other than them, and they are merely disseminating it further. Once a threat is known, it's better to fully publicize it than to try to limit its exposure. "The enemy knows the system." - Claude Shannon

Anyway, what kind of criminal do you imagine reads Macrumors for tips on how to bypass your phone's security? They have much better sources (and more efficient means of information dissemination) than that. :D
 
Nope. In reality, history shows that Apple fix these types of problems quickly.

In addition, iOS is the only mainstream mobile OS that provides official security updates that end user can install on all compatible devices up to 3 years old.

Agreed. Although I would've preferred it if iOS gave me the option to install security updates separately and automatically instead of waiting for them to push a new iOS version, a bit like how OS X has a similar option with the malware definition thing. Although jailbreakers might disagree with me...
 
Last edited:
Some clarification, please: If a thief gets to your phone while it is currently in a "passcode unlock" phase (like, mine prompts for passcode after an hour), will the passcode still thwart the thief at disabling find my phone? Thanks.


They can simply turn airplane mode on (using the swipe up control center menu and assuming you left it on) or turn the phone off.
 
I can tell you I had a friend robbed at gunpoint and the thief asked for his wallet and phone. When he saw it was an iPhone he proceeded to tell him to disable passlock and disable Find My iPhone and then delete his iCloud account. This was in Koreatown in LA. Now thieves will get smarter. I know I don't have a passcode on my iPhone despite all this, but maybe Apple can do something like home security systems where there is a separate code than your own which will act like it disabling your system, but instead sending a silent alert. You would enter this code on the unlock screen and it would "unlock" the phone, but somehow already send an alert to Apple so that no matter what the guy does, it still has everything on and tracking to be wiped later.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.