iPhone security flaw bypasses passcode lock
By Chris Ziegler 
posted Aug 27th 2008 1:28PM
posted Aug 27th 2008 1:28PM
Let's be real: a four-digit code isn't very much separating a determined bandit from your data, which is all that the iPhone affords. Granted, the phone locks up after a few attempts to slow your arch-nemeses down a notch or two, but if your code is your birthday or the last four digits of your phone number -- and you know it is, so just admit it -- they'll eventually figure it out anyway. On second thought, though, never mind, because it turns out there's a pretty effective way around these formalities -- 2.0.1 and 2.0.2 have both been confirmed to let you around the passcode lock simply by hitting Emergency Call and double-clicking the home button. At this point, the user will have access to your Favorites list, which is pretty bad as-is, but from here, they'll be able to click on an arrow and use links within your contacts to get out to the SMS, Maps, or Safari apps. If you change the home button functionality from the default (Favorites) to Home, then nothing will happen at the Emergency Call screen -- your phone is safe from prying eyes, we guess. The iPod option will kick the user into the iPod app, though, which we think is almost as bad as the Favorites exploit, because we'd really rather not our thieves know that we listen to Hannah Montana. MacRumors is reporting that it may have already been fixed for a future firmware release, so yeah, any minute now would be just great, Apple.[Thanks to everyone who sent this in]
At least on 2.0.1, it does not open the iPod if you double click the home button.
So that's Apple's approach to security when it comes to the iPhone eh...which is based on Mac OS X...hmmm, and they claim their Mac OS is more secure than Vista? I find that hard to believe. If they can't secure small devices to simply not let people access your contacts, then what do you expect when it comes to security in a full-fledged OS?
Any time a product is as massively popular and new like the iPhone, people are gonna figure out ways to bypass security. Any give Apple a break, they've only had their OS on that phone for a couple years. When Microsoft can get a full version of Windows Vista Ultimate on a phone and not have it explode in the process, then we'll talk.
Mine is 1234... damnit... no it isn't! Uhhhh uhhh... it's in a bank... guarded by robots.
Heh... J/K I don't have an iphone.
@ Patrick
Great Avatar!
"Bah!"
I took the security code off anyway: it's annoying to have to punch it in every time I want to get to something and it screws the whole reason for having an ICE entry in my contacts. I use the ICE entry for emergency contacts and allergy info in case I get hit by someone driving while using their iPhone.
And I use iWallet for things that really need to be secure.
It also gets you into the mail app if one of your favorites has an e-mail address.... That's the biggest issue in my mind, since I only use the passcode in order to secure my work e-mail....
Just changed mine back to the home button....
Oh, and can't you access all of someone's music when the phone's locked anyway, just by double-clicking the home button and then pressing the on-screen play button that appears?
Looks like that Hannah Montana collection isn't safe after all....