Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Major Security Flaw in 2.0.2
- Thread starter greenmymac
- Start date
- Sort by reaction score
I hope we see 2.0.3 really soon or 2.1 and watch if they do release 2.0.3 it will be like 248mb rather than a 1mb fix
Wasn't this a way to get into the phone to "Hacktivate" it a long time ago?
Either way, this is been known for a while I'm sure. But saying that, if anyone steals your iPhone, they can get anything off it by jailbreaking, and like someone said, a passcode screen isn't going to deter a thief, or anyone that wants to take your personal info.
Either way, this is been known for a while I'm sure. But saying that, if anyone steals your iPhone, they can get anything off it by jailbreaking, and like someone said, a passcode screen isn't going to deter a thief, or anyone that wants to take your personal info.
Probaby not. It's well known that a million beta testers will find stuff that a software QC department never will. And as long as no one has sued because they lost critical info because of this flaw, it's just something to fix in the next rev.
But it does point out once again, that the reason IT departments are willing to go with Blackberries and WinMo, is that those systems have had a decade of users finding security bugs. The iPhone is still a big unknown, and has to earn its bones over time like everyone else. Ditto for Android.
Difference is, this is something that enables casual spying by someone who doesn't intend to steal the phone, but is otherwise a snoop. It's one thing to nab the phone, hook it up to another computer and jailbreak...it's another to pick up the phone off a desk and quickly scan someone's SMSs/email/safari history. This is something that could be done repeatedly without raising suspicion.
Let it be known that I said: Apple's popularity is going up, customer satisfaction is plummeting
We can only hope... Although if this is the only fix they throw in, I wouldn't even bother installing it.
This is not a bug in 2.0.2, I have a 2.0.1 and viewed similar behavior. But I guess this only works if you set your double tap to be your favorites (default). I've set mine to iPod. If someone wants to listen to my tunes or watch my videos if I lose my phone, so be it.
But if people do leave the default setting, I can see how this would be a problem!
Weird, I have a new game on my screen after logging in. Global Thermonuclear War. Looks better than that other tic tac toe game I had...
This is not a bug in 2.0.2, I have a 2.0.1 and viewed similar behavior. But I guess this only works if you set your double tap to be your favorites (default). I've set mine to iPod. If someone wants to listen to my tunes or watch my videos if I lose my phone, so be it.
But if people do leave the default setting, I can see how this would be a problem!
1.0 or 2.0.1 or 2.0.2 its still a bad bug
Yes, but should you loose your iPhone (a lot easier to do since it's smaller than a laptop), at least having the passcode will deter most curious parties from tinkering should they find your phone. Will it deter the most determined hacker? heck no but at least it's something.
1.0 or 2.0.1 or 2.0.2 its still a bad bug
Yeah, I think it started with 1.1.4? Whenever they enabled the double tap option on the Home Button.
I just showed my coworker who has a phone too and he was surprised. Yikes, this is bad since a lot of folks keep their lives on their phones. I start my masters in Forensic Computing today, this may make for a great discussion!
Yeah, I think it started with 1.1.4? Whenever they enabled the double tap option on the Home Button.
I just showed my coworker who has a phone too and he was surprised. Yikes, this is bad since a lot of folks keep their lives on their phones. I start my masters in Forensic Computing today, this may make for a great discussion!
Glad I could help now if your class would solve the problem and then send it to Apple we would all be happy! LOL
I don't lock my iPhone either.
The point is that Apple shouldn't have overlooked this major flaw. It's not whether this slip-through will cause any harm...it's the fact that there's a slip-through!
You know what, this may have been a largely unknown issue, even since the 1.1.1 firmware, when double-tap home and double-space for period was introduced.
Anyone have a 1.1.x iPhone to test?
Anyone have a 1.1.x iPhone to test?
iTunes always goes into Not Responding mode when I plug in my iPhone while the passlock is enabled. So I then unplug it, iTunes then stops hanging, unlock the phone, plug back in and we're all good.
That actually couldn't be further from the truth as Apple was ranked #1 in customer satisfaction, again.
Well, here is my problem with apple.
We had our first child last year and were in the hospital for 2 weeks due to issues with the baby. We took all our pictures on our iphone. Then I came home and accidentally dropped it in the bathtub. I let it dry for days and then tried turning it on. The entire screen would show but only the touch censors on the top half worked. Having my phone password protected, I couldn't access anything because I couldn't type in the bottom keys. So all my pictures were sitting on the phone but I could not sync them to my computer or view them.
I called apple to find out if they have a way of bypassing the password. Negative! They claimed they had no way to help me whatsoever. There should be a way to type in the password via your keyboard on your computer I said... they agreed but it wasn't possible.
After that I demanded to speak with an apples supervisors, supervisors, supervisor where he came up with this great idea to try iphonedrive software. It allowed me to access everything that was on my iphone and without my password. Scary, but due to my circumstances and apples stupidity on this issue... it saved me!
So, apple needs to prevent leaks but it also needs to be sure there is a backup plan should a problem like mine arise.
We had our first child last year and were in the hospital for 2 weeks due to issues with the baby. We took all our pictures on our iphone. Then I came home and accidentally dropped it in the bathtub. I let it dry for days and then tried turning it on. The entire screen would show but only the touch censors on the top half worked. Having my phone password protected, I couldn't access anything because I couldn't type in the bottom keys. So all my pictures were sitting on the phone but I could not sync them to my computer or view them.
I called apple to find out if they have a way of bypassing the password. Negative! They claimed they had no way to help me whatsoever. There should be a way to type in the password via your keyboard on your computer I said... they agreed but it wasn't possible.
After that I demanded to speak with an apples supervisors, supervisors, supervisor where he came up with this great idea to try iphonedrive software. It allowed me to access everything that was on my iphone and without my password. Scary, but due to my circumstances and apples stupidity on this issue... it saved me!
So, apple needs to prevent leaks but it also needs to be sure there is a backup plan should a problem like mine arise.
Except in your situation, it was your fault of the damage, not Apple's. Apple cannot safeguard every possible user-caused problem, and they should not be expected to, you just got lucky that there was a way for them to help you.
How exactly is this something that is going to make customer satisfaction plummet? All things in technology have their bugs, granted, this is a big bug, but not the easiest to figure out. Look at Vista, that was something that all around had major problems and that was what made Microsoft's customer satisfaction plummet. The iPhone 3G and the 2.0 software both have their fair share of problems, but the device still works. I do not think that this is going to make customer satisfaction plummet in any major way, after all, I bet that 90% of iPhone users won't even hear about this, it will just be listed in the software update details as a security patch.
LOL.
You took all your baby pics with a crappy phone camera instead of a real camera. Mistake 1.
You dropped it in a bathtub. Mistake 2.
You broke the phone and your password can't be entered, so you ask Apple to help you crack it.
They do help you get past the password and you get your photos, but that makes them stupid.
Apple needs to keep the phone secure, unless someone *really* needs to get inside it.
Waaay too funny. Do you have any idea how preposterously priceless your entire post is? The customer service rep who fielded your call deserves a raise.
This is a flaw. But.
If a person loses his/her iPhone all they have to do is call AT&T or whatever carrier they are using and have it remotely wiped.
Until Apple fixes this keep your phone close and don't let others use it if you have it pass code locked.
If a person loses his/her iPhone all they have to do is call AT&T or whatever carrier they are using and have it remotely wiped.
Until Apple fixes this keep your phone close and don't let others use it if you have it pass code locked.
not a surprise for me
I thought this was found since last year
i use this method to hack into my iPhone first time in February 2008
that was even 1.13
this hack was widely available on the internet until ZiPhone came out in Feb
i googled through " iPhone unlock" to get this hack
I thought this was found since last year
i use this method to hack into my iPhone first time in February 2008
that was even 1.13
this hack was widely available on the internet until ZiPhone came out in Feb
i googled through " iPhone unlock" to get this hack