Serious Security Risk in 2.0.2 iPhone Software

POST

MAIL

Posted August 27, 2008 at 12:23pm by iClarified

A serious security risk has been found in the 2.0.2 software which allows anyone to gain access to a password protected iPhone, according to a MacRumors forum post.

This simple trick will bypass the passcode and give you access to all of the personal information on the phone including Mail, SMS, Contacts and Safari.

To duplicate this hack simply set a password on your iPhone then on the passcode lock screen follow these directions.

Step One: Tap the Emergency Call button
Step Two: Double Press the Home Button.

These steps will bring up the Favorites Menu. From here you can call your favorites or tap blue arrow next to contact's name. You now have full access to applications such as Safari, complete Contacts list, SMS, Maps, "full" Phone access, and Mail by accessing various entries on the Favorite's page, i.e. tapping their home page brings up a full, unrestricted Safari.

This security flaw makes your iPhone's password lock useless so take appropriate steps to secure your phone!

Read More

Serious Security Risk in 2.0.2 iPhone Software

Follow iClarified

beast - August 29, 2008 at 2:57am

No problem here on 2.0.1! I don't use a favorites list. I just make up another list for my best friends.

Reply · Like

Josh - August 28, 2008 at 7:07pm

This does not give you FULL access as this post suggests. Depending on which contacts are in your favorites and what types of info is stored in them you can gain access to Mail, Safari, SMS and Maps. You are not able, as far as I could tell, to get to the actual Home screen. This is not quite FULL access but still not good. Also one thing to note is that this was intended to be a feature and is not an overlooked security flaw. That said it indeed does allow free access to much of your personal information so is bad.

fook - August 28, 2008 at 4:31am

It depends on the settings of the HOME button;-). Set the HOME button to "ipod" and your data are safe. not the music:-))).

Chris - August 28, 2008 at 3:51am

I dont seem to have a problem because I dot have any contact favorites.

Kannan K P - August 27, 2008 at 10:12pm

Security Risk in 2.0.2 can be found in 2.0.1 as well. I have a 2G unlocked and jailbroken iPhone running 2.0.1. After reading about the threat I tried it out on my phone and found it worked exactly the same way as described. Thank you for pointing this out.

miskol - August 27, 2008 at 8:55pm

i have long discovered this on 1.1.4

Peaf - August 27, 2008 at 6:48pm

Also exchange mail is not working in 2.0.2... anyone with this problem?

jreid - August 27, 2008 at 5:14pm

tested on 2.0.1 and it works.

jreid - August 27, 2008 at 4:54pm

jreid - August 27, 2008 at 4:16pm

jreid - August 27, 2008 at 3:37pm

Awayze - August 27, 2008 at 2:39pm

It wasn't working because I had double pressing home button set to "Home", the bypass did work when I changed it to "iPhone favourites". Apple fix this issue NOW!!!!!

Daniel - August 27, 2008 at 2:33pm

if you have not contacts in favorites menue it´s also save on 2.0.2 .. cheers

iClarified - August 27, 2008 at 2:09pm

I have tested this on my own phone and unfortunately the bypass did work. @kloquewerk, good idea!

kloquewerk - August 27, 2008 at 2:05pm

if you have your home buttom setup to access your music instead of favorites, then you're fine.

Danno - August 27, 2008 at 1:59pm

Scary-access to full phone with password bypass....

Awayze - August 27, 2008 at 1:29pm

The hack doesn't work on my iPhone and I am on 2.0.2 :-)

andre - August 27, 2008 at 1:14pm

i just added the lock down app and everything i ok