Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
As predicted, the first page or so is "Shoot the messenger".

I'm happy this vulnerability has been found - Apple can now fix it.


I would be interested in knowing how such vulnerabilities are found.

Could be someone's job.
 
Last edited:
So if I'm reading this right, then Verizon and Sprint iPhone 4's are not affected, correct?
 
A Security Leak isn't Front Page News anymore?

I find it pretty hard to believe that MacRumors posted this story in "More MacRumors Stories".

It's not just the iPhone 4 it's the iPhone 5 as well.

This should be a feature article not "Oh, by the way... Your iPhone has another security flaw the day after Apple fixed the last security flaw.

Companies have high level cell numbers in their contacts and many have secure photos as well.

Apple continues to drop the ball. Maybe Tim Cook and group should be worried less about slamming Samsung and more about the security of their own phone.
 
Iphones don't suddenly expire when a new comes out you know...My wife has a 4 and it works perfectly, she has absolutely no desire or need whatsoever to upgrade..for what!

I love my iPhone 4. My contract is due up for renewal in April and I have no intention of upgrading anytime soon.
 
Actually, it is more cost-effective to sell your 2 year old iPhone when the contract is up and upgrade. You can usually sell the old one on eBay for $250-ish (done this twice now, with a 3G and a 4). Of course, this assumes you like your carrier and aren't opposed to ponying up for another 2 year contract.

And yes, you still pay a subsidy even when your 2 year contract is up. I know because I got an iPhone 4 day one, and my bill didn't go down for the few months my contract was expired before upgrading to the 5.

Yep, in the US they essentially force the upgrade as the best financial decision.

I was at the end of the 2 year mark with AT&T and called pissed that they don't reduce the rate due to the exhaustion of the subsidy. So I went prepaid with my 4 instead of buying a new phone.

If one intends on staying with their carrier, you should really sell your current phone and upgrade at every renewal. Or at the very least, pick up a 4S when it gets pushed to the Free w/ Contract slot.
 
Can't believe so many people are blowing this off because they consider it such a "complicated" way to gain access to an iPhone.

It's not complicated. Who cares how it was figured out?

I doubt that some kid sits in his basement rubbing his iPhone in different ways trying to find a way to crack it.

It's more likely that some kind of flaw was found in the code somewhere, or they noticed something and inferred that that specific order or something like it would be able to breach the iOS security model.
 
The data is stored in an encrypted format on the device (in the flash memory), but the operating system can decrypt it at any time. That's all you're seeing here.

This is true but only for Mail and applications using the data protection API. Not all data is encrypted permanently when the device is running

And this is important for those with corporate data on their device who might hold sensitive data. Those that might actually be targeted such as a CEO etc

I reckon we will see more like this as a lot of worldwide businesses introduce the iPhone as a corporate device
 
Does anyone even use the iPhone 4 anymore?

According to Apple yea.

Hey the iPhone 4 is even more popular than the iPhone 5 for a camera.

http://www.apple.com/iphone/why-iphone/

You act like everyone religiously upgrades their perfectly good iPhone every year to get the latest one.

Normal people usually use their iPhone for 2 years and then upgrade.

Insecure tech nerds upgrade every year thinking they can beat the rate of technology.
 
That was Siri's predecessor.

Also there are quite a few other "vulnerabilities" I found that may be worth considering. Where would/should I post those?
Seems like things are being posted in the open (YouTube, sent to tech news sites, etc.), so you might as well post them here.

That said, you can and likely should notify Apple as well--not sure if doing it simply via feedback at http://www.apple.com/feedback/ and/or by contacting some part of Apple via contact information at http://www.apple.com/contact/ would do the trick.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.