Thursday, September 19, 2013

iPhone's iOS 7 Lockscreen hack allows to bypass Security

Like most iOS lock screen vulnerabilities, the passcode lock screen on iOS 7 also suffers from a bug that allows anyone with direct access to the iPhone or iPad.

Although Apple claims to have fixed 80 security vulnerabilities with iOS 7, including the ability to bypass the lock sceen in iOS 6.1.3, the same person who found the previous vulnerability has found yet in another iOS 7 .

Discovered by 'Jose Rodriquez', an iPhone user reported a security flaw in iOS that lets anyone bypass the lockscreen passcode and accesss sensitive information stored in photos, Twitter, email and more.

The flaw resides on users who lock their devices with a traditional PIN code or password. The security flaw is demonstrated in the instructions below and soon on my youtube channel :
Swipe up from the bottom of the lockscreen to open Control Center and Launch the Clock App.

Open the Alarm Clock section of the Clock app and Hold down the power button.

Quickly tap Cancel the immediately double-click the Home button and Hold down for a bit longer on the second click.
From Here you can access the camera and stored photod. You can share these photos on Facebook, Twitter,Flickr or via email.
The exploit has been tested successfully on ios 7 when running on the iPone 4S,5,5C,and 5S, and the most recent iPad model.
Until an official fix is available from Apple, iOS 7 users can Avoid this security hole by disabling the control center of the lock screen in their device settings :P

No comments:

Post a Comment