Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Lost iPhone in Iraq returned!
- Thread starter Tyco
- Start date
- Sort by reaction score
Okay, I searched for an hour, but finally found it.
When I read the OP's post, something in me said, "I just read that there was a way to view all the data on a passcode locked iPhone," but I couldn't find where I saw it. Then I found it late last night, wayyyyyyy down on like, page 7 of Engadget:
http://www.engadget.com/2010/05/27/iphone-vulnerability-leaves-your-data-wide-open-even-when-using/
iPhone vulnerability leaves your data wide open, even when using a PIN
By Tim Stevens posted May 27th 2010 6:47AM
If you feel like going through the process of typing in your PIN every time you unlock your iPhone is worth it thanks to the unconquerable security it implies, you might want to read this report from Bernd Marienfeldt about the chosen one's security model. Yes, a PIN will keep casual users from picking up your phone and making a call with it, or firing off an e-mail to your co-workers saying that you're quitting and becoming an exotic dancer, but it won't keep someone from accessing all your data. Bernd and fellow security guru Jim Herbeck have discovered that plugging even a fully up-to-date, non-jailbroken iPhone 3GS into a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone's storage -- even when it's locked. The belief is that they're just a buffer overflow away from full write access as well, which would surely open the door to making calls. Bernd believes the iPhone's lack of data encryption for content is a real problem, and also cites the inability to digitally sign e-mails as reasons why the iPhone is still not ready for prime time in the enterprise.
[Thanks, Amit]
Bernd Marienfeldt There are over 125 posts on this topic in the Engadget forums.
When I read the OP's post, something in me said, "I just read that there was a way to view all the data on a passcode locked iPhone," but I couldn't find where I saw it. Then I found it late last night, wayyyyyyy down on like, page 7 of Engadget:
http://www.engadget.com/2010/05/27/iphone-vulnerability-leaves-your-data-wide-open-even-when-using/
iPhone vulnerability leaves your data wide open, even when using a PIN
By Tim Stevens posted May 27th 2010 6:47AM
If you feel like going through the process of typing in your PIN every time you unlock your iPhone is worth it thanks to the unconquerable security it implies, you might want to read this report from Bernd Marienfeldt about the chosen one's security model. Yes, a PIN will keep casual users from picking up your phone and making a call with it, or firing off an e-mail to your co-workers saying that you're quitting and becoming an exotic dancer, but it won't keep someone from accessing all your data. Bernd and fellow security guru Jim Herbeck have discovered that plugging even a fully up-to-date, non-jailbroken iPhone 3GS into a computer running Ubuntu Lucid Lynx allows nearly full read access to the phone's storage -- even when it's locked. The belief is that they're just a buffer overflow away from full write access as well, which would surely open the door to making calls. Bernd believes the iPhone's lack of data encryption for content is a real problem, and also cites the inability to digitally sign e-mails as reasons why the iPhone is still not ready for prime time in the enterprise.
[Thanks, Amit]
Bernd Marienfeldt There are over 125 posts on this topic in the Engadget forums.
Awesome news Tyco, I'm really pleased for you! Look after your iPhone now on and I'd like to add I have nothing but respect for what you do in the armed forces. 
Happy ending FTW!
Happy ending FTW!