Major Sercurity Flaw: iPhone 2.0.2 – [Updated]

Posted on August 27th, 2008. Written by Arron.

[UPDATE] – 27.08.08 (20.08pm GMT)

Footage Found:

Original Article:
Gizmodo has publicly reported on a major security flaw within the iPhone 2.0.2 software …

According to Greenmymac of Mac Rumors

“Steps to Reproduce

Set iPhone to use passcode lock, have contacts marked as Favorites with links, phone numbers, addresses, etc in address book entry.

Tap “Emergency Call” keypad from passcode entry screen.

Double-tap home button.

Tap blue arrow next to contact’s name. You now have full access to applications such as Safari, complete Contacts list, SMS, Maps, “full” Phone access, and Mail by accessing various entries on the Favorite’s page, i.e. tapping their home page brings up a full, unrestricted Safari.”

This flaw essentially means unauthorised users can access your contacts, mail and gain access to the Safari web browser, while you have the phone protected by the ‘Passcode lock’ setting.

Apple is aware of the issue and promises that a fix is already considered for a future update to the iPhone software. Users are advised to set their ‘Home Button’ double-click action to either ‘iPod’ or ‘Home’ while the issues are resolved.

To set your home button action, goto Settings > General > Home Button.

Via: Gizmodo / Mac Rumors

R-Fly

---

---