Following yesterday's release of iOS 6.1.3, which fixed two bugs allowing the iPhone's passcode lock to be bypassed, another passcode security flaw has been discovered.
The vulnerability, which only affects the iPhone 4, involves the Voice Dial command, as demonstrated in the video below from YouTube user videosdebarraquito.
iPhoneinCanada tested the method in the video using an iPhone 4 running iOS 6.1.3 and found that the security flaw does indeed exist, giving a potential intruder access to both contacts and photos.
Like the previous passcode vulnerability, the current hack involves a complicated set of steps that includes initiating Voice Dial command and quickly ejecting the phone's SIM card.
When the SIM card is removed, the phone opens the recent call log, which gives access to the contact list. In the contact list, adding a photo also gives access to all of the pictures on the device.
The previous passcode vulnerability was discovered in mid-February, and it took Apple more than a month to push a fix. An update for the current bypass could follow a similar timeline, but the vulnerability can be fixed by disabling Voice Dial from the Passcode Lock menu.
At this time, the vulnerability has only been shown to work with the iPhone 4. We were unable to reproduce the results with an iPhone 5 with Siri disabled, though the bug may potentially affect the pre-Siri iPhone 3GS as well.
Update 1:07 PM: iPhoneBlog.de reports that it has reproduced the issue on an iPhone 5 with Siri disabled, although we have still been unable to do so.
92 comments
American department store JCPenney has quietly removed support for Apple Pay from its retail stores, it has emerged.
The withdrawal of support for Apple's digital payment system was...
SlashLeaks posts an image that is alleged to be iPhone XI and XI Max molds for 3rd party case production.
These physical molds are presumably produced by case manufacturers based on leaked...
Apple has removed the 4K LG UltraFine Displays from its online Apple Store in the United States, continuing a trend of pulling the display from its online stores around the world. Before disappearing...
iOS apps and features including Shortcuts, Screen Time, and iMessage effects will be coming to macOS later this year, after they're first unveiled at Apple's Worldwide Developer's...
Apple supplier Foxconn today said that it remains committed to its contract to build a display plant and research facility in Wisconsin (via Reuters). The company's comment comes a few days after...
Will Smith, his wife Jada Smith, and his son Jaden Smith today visited Apple Park to discuss the environment and Jaden's Just Water company, according to a tweet Apple CEO Tim Cook shared on...
Back in March, Facebook announced that millions of Facebook passwords were stored on its servers in plain text with no encryption. At the time, Facebook also said that "tens of thousands" of...
Apple likely paid somewhere around $5 to $6 billion to settle its ongoing legal battle with Qualcomm, according to estimates shared today by UBS analyst Timothy Arcuri (via CNBC).
The...
