iOS 7 Lock Screen Vulnerability Gives Access to Photos, Email

[kas23]

Good thing the new iPhone will have a fingerprint scanner!

Seriously, you would think by now Apple would sit down, on the eve iOS release, and try to access stuff through the lock screen. And how do people figure these things out every single friggin time. Makes you wonder if these are intentional internal leaks.

 

[ATC]

This!

Only when I have "require passcode" set to anything other than "immediately" am I able to get the "exploit" to work. And then it's only because the required amount of time since I locked it hasn't elapsed yet to actually require a passcode to unlock it.

Wish that was the same for me. I have it also set to "immediately" and can get the exploit to work perfectly.

 

[meistervu]

I just found another flaw

From the lock screen, swipe up the camera icon, from there access the photo library, use your phone and take a picture of whatever photo you want, then you have full access to a photo of that photo

But seriously, life is too short to worry about such things.

 

[i4m]

Do people have nothing better to do than to try and find ways to break iOS?

he didn't break it. quite a good find though.

 

[coolfactor]

I believe that it works I just cannot replicate it at all. Tried over 15 times! Oh well, suppose that's not a bad thing haha

I was finally able to reproduce it on my iPhone 4 with the Passcode required "Immediately". It was suspected that this was the reason it wasn't working for some people. It really does require quick finger work to gain access. I was able to see the photos in my Camera Roll.

The second click on the Home button needs to be longer than the first.

 

[i4m]

Easy fix - just turn off access to the control center from the lock screen.

I too am amazed at how people figure this stuff out....ok, stand on one leg, wear an eye patch and bark like a dog. If you do those things then the software will hiccup.

more like a band-aid until the fix is released...

 

[OlMighty]

For all those who can't replicate the bug. First try turn off your "Accessibility Shortcut" (triple-click home button) in Accessibility.

So basically, what you're saying is if the shortcut is enabled, this isn't possible. Sounds like an easy fix.

 

[i4m]

7.0.1 is out.

Image

wouldn't fixing a bug make that bug healthy and the product worse-off?

 

[Todd B.]

Yawn.

The site must really be hurting for page views if they keep posting these worthless items and sensationalising them by calling them "exploits".

 

[thebeans]

Thanks, I noticed there was an extra 'something' next to the ear speaker that my 5 doesn't have but failed to notice the fingerprint reader.

Uhhh.....the 5 has that "extra something" too

 

[bigchrisfgb]

A little bug but will be fixed on an update so no need to worry about it. If your phone is stolen then find my iPhone locks your phone completely, and as I don't use the pass ode to unlock on my iPhone I guess it's no more vulnerable with this big than it is in anyway, no big deal for me.

 

[autrefois]

The first thing I turned off when I installed iOS 7.

The control center is a bit too much power for someone to have over my phone if they don't know my passcode.

It was one of the first things I did when upgrading as well. This should either be off by default, or tapping certain sensitive features (such as airplane mode) should require entering the passcode.

Me too; as soon as I saw the new settings for the Control Center in Settings, I disabled it.

However, you can still ask Siri to do a lot of stuff, including revealing the contents of your address book, etc. even when locked.

Thank you for the heads-up about this. I definitely do not like this. Is that new with iOS 7 and can it similarly be disabled from working when the phone is locked? I'm upgrading from an iPhone 4 soon so I haven't used Siri before. I am really looking forward to Siri, but if random people can activate it I may have to be careful about turning on/off in the settings each time.

 

[FlatlinerG]

Pick one that the Applelogists will go for:

- Why are people keeping their Photos in the multitasking bar?
- I've never had that problem!!! This guy is just looking to create trouble for Apple.
- Go get an Android if you don't like the way the lock screen behaves.

In reality though, I'm sure this'll be fixed in 7.0.1 or 7.0.2.

As an avid and proud Apple user I don't think your judgement of Apple fans is correct. I would say that most of us are just as shocked about this as no one wants their personal lives wide open to vulnerabilities like this. Otherwise, my main response has been, "who the heck figures this stuff out?".

 

[rictus007]

I guess he was looking for a way to see his pictures and post them to facebook with the looked screen. Now I'm worried how access to my pictures can affect national security. BTW Now I'll get an Android, that for sure is backed by a company that does not spy their users. .... Just a review of the hate on previous posts

 

[identity]

The article below this one was praising Apple's security. Classic

 

[chrismac2]

I was finally able to reproduce it on my iPhone 4 with the Passcode required "Immediately". It was suspected that this was the reason it wasn't working for some people. It really does require quick finger work to gain access. I was able to see the photos in my Camera Roll.

The second click on the Home button needs to be longer than the first.

Okay, I too finally was able to get the "exploit" to work even set to "immediately". The task switcher came up, but all previews except for the clock and the camera app (as long as you used the camera from the lock screen) are blanked out and inaccessible.

Indeed all photos, not just ones taken from the lock screen, are then visible from the camera roll.

So I stand corrected, it is an exploit. But not one that I'm really very concerned about. I'm sure Apple will fix it soon.

 

[mdrndm]

doesn't work on mine either. ip5/iOS7.0GM

doing the cancel shutdown and double tap takes me to lock screen every time, no matter how quickly after pressing cancel i do it. holding bit longer on second press takes me to siri, and then lock screen when i cancel out or double tap.

i see several people saying this bug happens on their phones. wonder if there's another condition that needs to be present..hm.

D'OH - EDIT - yes, did it when i used two fingers (thumbs), one to press cancel, the other to double tap home almost simul. bug caught.

Ahah, That is what I needed. Yep.. confirmed *doh*

 

[leftynaut]

control center needs to be more limited on the lock screen.

i don't want to disable it and lose music and flashlight functionality.

but i don't see the need for bt/airplane/wifi/brightness buttons without knowing my passcode...

 

[Raizen.Z09]

So basically, what you're saying is if the shortcut is enabled, this isn't possible. Sounds like an easy fix.

Yep, in fact this is exactly what I did to prevent the access bypass for the time being.

 

[RedRaven571]

Uhhh.....the 5 has that "extra something" too

To the left of the speaker, in the photo, there is a round 'something' that my iPhone 5 doesn't have?

Flash for front camera?

 

[dwsolberg]

It's annoying that the the lock screen bugs and the time zone / New Year's bugs keep appearing year after year.

Software has bugs, and that's just the way it is, but after fixing something for the second or third time, they really need to be paying more attention to this stuff in their testing.

 

[jm001]

Followed the article but couldn't replicate it.

 

[KarateMonkey]

Developer/Beta question...

iOS 7 has been out for a few months now - WHY has this obvious issue not been detected before now?

 

[Renzatic]

One moment you're getting praised for security, the next you're getting ripped for exploits

I know! It's almost like nothing's perfect, right?

 

[zapnyc]

...somebody has tooooo much time on their hands...