Security

iPhone Passcode Lock Security Flaw Revealed

Your iPhone personal data is protected by the passcode lock screen at all times, right? Turns out that it's pretty simple to bypass the four-digit passcode to access the phone app revealing contacts, email information, recent calls and even visual voicemail. The process to circumvent the passcode lock revolves around the emergency call feature built into iPhones to allow 911 calls on a locked phone.

apple iphone lock screen emergency call security hole

MacRumors forum user jordand321 announced the security flaw this weekend. The problem happens when the iPhone is locked but you enter the emergency call screen. Type any non-emergency number and touch the call button.

Can I recover a forgotten iPhone restrictions passcode?

The purpose of iPhone restrictions is to lock certain functions of the device. They are also referred to as Parental Controls, capable of hiding songs with explicit lyrics, preventing YouTube from running, etc.

Without the four-digit passcode restrictions can't be changed. If you have forgotten your restrictions passcode you must restore your iPhone using iTunes to reset the passcode. When asked, do not restore the iPhone from backup, otherwise the old passcode you don't know will be enabled.

How do I set an iPhone password / passcode?

To protect your information in the event your iPhone falls into the wrong hands, set a passcode. If set properly, the iPhone passcode must be entered before the iPhone can be used.

1. Touch Settings -> Passcode -> Turn Passcode On
2. Enter a four-digit passcode
3. Re-enter the passcode for verification
4. Choose a time interval under Require Passcode
5. Select ON or OFF for the Voice Dial and Erase Data options

The shorter the Require Passcode time interval, the more secure your iPhone will be. Longer times mean longer spans during which unauthorized access can occur.

Personal Data Compromised by iPhone Worm

Jailbroken iPhones have been attacked again. iBotnet.A is the latest in a string of attacks to exploit the root password common to iPhones running SSH. The only way to insure security (besides NOT jailbreaking your iPhone) is to change your root password.

iBotnet.A (also known as Ikee.B or the "Duh" virus) spreads from iPhone to iPhone across the network sending personal data to a server located in Lithuania. Address ranges from service providers in Portugal, Hungary, Australia and the Netherlands have been targeted.

Pages

Subscribe to RSS - Security