iOS 10.3 Fixes Exploit That Caused iPhones to Repeatedly Dial 911

iOS 10.3, released earlier this week, fixes a major vulnerability that could cause iPhones to repeatedly dial 911, reports The Wall Street Journal. In the United States, 911 is an emergency telephone number that summons police, fire, and EMS services.

The 911 security flaw surfaced in October after an 18-year-old iOS developer in Arizona discovered and published code that would cause an iPhone to dial 911 over and over again. The teenager was arrested after the 911 system in Surprise, Arizona was overwhelmed with more than 100 hang-up calls in just minutes.

iphonelinkcall
Because the code was published online, thousands of accidental 911 calls were placed across the United States, demonstrating an effective cyberattack method that could severely disrupt emergency services.

The code exploited an iPhone feature that allows users to click on a phone number in a text message or on a webpage and immediately dial that number. With the iOS 10.3 update, iPhones always require secondary confirmation before automatically calling a number using that method.

Apple says the update supersedes that capability and now requires users to always press a second confirmation before initiating a call.

Apple says it initially worked with app developers to fix the vulnerability, and this update will now prevent it from happening even on apps that hadn't already fixed the issue.

iOS 10.3, which introduces features like Find My AirPods and a new Apple Filesystem, also includes dozens of major security fixes. Another major iOS 10.3 bug fix, which could result in endless Safari pop-ups that "locked" the Safari app, was outlined earlier this week.

Top Rated Comments

cicalinarrot Avatar
50 months ago
I'd feel much more comfortable with a phone that explodes.
Well, if you have both an iPhone and a Galaxy Note 7, the iPhone can call the police for you when the Note explodes.
Score: 9 Votes (Like | Disagree)
l00pback Avatar
50 months ago

It would be really nice if these articles could offer more accurate regional details.

Enhanced 911 is currently deployed in most metropolitan areas in the United States, Canada, and Mexico as well as all of the Cayman Islands. Also, Davao City in the Philippines.

This site is for news and rumors about Apple-related products and services. It's not Wikipedia.
Score: 5 Votes (Like | Disagree)
sudo1996 Avatar
50 months ago

There was a very unfortunate case recently in the Dallas area where a child died when 911 couldn't be reached due to massive #'s of calls being made in to the system and it couldn't keep up. Hold times for 911 response were at times as much as 45 mim... Related?

There's a vulnerability in Android systems that allows unprivileged apps to spoof the cellular ID that the phone uses to identify itself on the LTE network, plus Android lets those apps make phone calls. And there's a vulnerability in LTE systems where someone can spoof a bunch of random cell IDs with fake security keys that the carrier won't check IFF they're requesting a 911 call; in fact, that phone doesn't even need to be a subscriber to that carrier. And the 911 systems have no way of telling which calls are legitimate. So it could be that.

The worst part? Even if they fix this in Android,
1. Attackers can still get away with using their own devices, and any kind of fix for this on the LTE network would require phones to be updated so they can make legit 911 calls...
2. Nobody updates their Android phones.
[doublepost=1490914369][/doublepost]

It would be really nice if these articles could offer more accurate regional details. There seems to be a huge focus on the US, maybe because the publication is based out of the US? Remember that you are reaching a global audience.

Enhanced 911 is currently deployed in most metropolitan areas in the United States, Canada, and Mexico as well as all of the Cayman Islands. Also, Davao City in the Philippines.

Knowing that this 911 bug happened elsewhere, not just the US, broadens how many people and countries that it may have impacted.

The article should really say that this bug has nothing to do with 911 and is just an exploit to force the iPhone to call any number, regardless of your service provider.
Score: 4 Votes (Like | Disagree)
thisisnotmyname Avatar
50 months ago
The article is unclear, was he arrested for publishing the vulnerability or did he exploit it himself to DoS the 911 system?
Score: 4 Votes (Like | Disagree)
6foot5foot Avatar
50 months ago

That's what I want to know too, my iPhone 6 is running fine on iOS 9.3.5, I doubt jumping to 10 will do anything but slow it down and create bugs, of course, I will be happy to be told otherwise.

I think it's a superb idea to stay with an outdated OS, leaving yourself wide open to security exploits and vulnerable... I'd advise ANYONE to do this, and whilst you're about it, go and open your front door, leave it wide open when you go to bed, and then I would post ALL your personal and financial details, website & app logins to pastebin and put them on Twitter - may as well go all out. Next, install "TeamViewer" and call any "Indian Microsoft agents" you can find by Googling that phrase, and give them your TeamViewer ID, then naively hope they're honest and won't ruin your computer.

Yes, security updates and stability patches are for mugs - be scared and cautious and stay out of date, that's the spirit, and I am sure Steve Gibson of GRC.com will advise you of the same.

I won't add the redundant "sarcasm" tag, I think you got the point.


PS: Would you like some FREE flash drives? Let me know what OS you and your friends are running, and I'll send you as many as you like :p

PS!

Please accept my gift of a free gold mercedes, shipped direct to your door for a small £100 admin fee, by clicking here:

http://adf.ly/genuinefreegoldmercedescars ('http://http://adf.ly/genuinefreegoldmercedescars')

Score: 4 Votes (Like | Disagree)
Analog Kid Avatar
50 months ago

I read about this a while ago. To be clear, this vulnerability didn't just affect 911 calls. You could force the iPhone to make a call to any number.

Nice. So he didn't have to attack critical emergency services, he just chose to do so?

"To show the seriousness" he aimed at 911. Basically, "let me hurt innocent people so you understand this could seriously hurt innocent people".

Thinking about the connection between actions and consequence is what jail is for, after all...
Score: 3 Votes (Like | Disagree)

Top Stories

16inchmacbookpromain

Kuo: New MacBook Pro Models to Feature Flat-Edged Design, MagSafe, No Touch Bar and More Ports

Thursday January 14, 2021 9:32 pm PST by
Apple is working on two new MacBook Pro models that will feature significant design changes, well-respected Apple analyst Ming-Chi Kuo said today in a note to investors that was obtained by MacRumors. According to Kuo, Apple is developing two models in 14 and 16-inch size options. The new MacBook Pro machines will feature a flat-edged design, which Kuo describes as "similar to the iPhone 12" ...
foldable iPhone concept feature

Apple Testing In-Display Fingerprint Sensor for iPhone 13, Foldable iPhone Also in the Works

Friday January 15, 2021 1:46 pm PST by
Apple has started "early work" on an iPhone that has a foldable display, according to a new report from Bloomberg's Mark Gurman. Though testing of a foldable iPhone has begun, Apple has not committed to releasing a device that has a foldable display. Development has not yet expanded beyond a display and Apple does not have full foldable iPhone prototypes in its labs. Like foldable...
iphone x camera close

iOS 14.4 Will Introduce Warning on iPhones With Non-Genuine Cameras

Thursday January 14, 2021 8:07 am PST by
In the second beta of iOS 14.4 seeded to developers and public testers this week, MacRumors contributor Steve Moser has discovered code indicating that Apple will be introducing a new warning on iPhones that have had their camera repaired or replaced with aftermarket components rather than genuine Apple components. "Unable to verify this iPhone has a genuine Apple camera," the message will...
iP12 charge airpods feature 2

Hidden iPhone 12 Hardware Feature Could Still be Unlocked

Thursday January 14, 2021 2:51 am PST by
All iPhone 12 and iPhone 12 Pro models purportedly have a hidden reverse wireless charging feature, according to an FCC filing. The feature has not yet been activated, but could yet be unlocked for an upcoming Apple accessory. The FCC filing suggests that iPhone 12 models contain the hardware for Wireless Power Transfer (WPT) to accessories: In addition to being able to be charged by a...
Top Stories 43 Feature

Top Stories: MacBook Pro, iMac, Mac Pro, and iPhone Rumors, Best of CES 2021

Saturday January 16, 2021 6:00 am PST by
This week was sure a busy one in the Apple world, with a flurry of announcements out of CES early in the week followed by a rash of Mac- and iPhone-related rumors later in the week. The new rumors this week included details on updated MacBook Pro, iMac, and Mac Pro models, as well as a few other tidbits, so make sure to read on below to get caught up! Kuo: New MacBook Pro Models to...
iphone 5s black slate

Images of Unreleased iPhone 5s in Black and Slate Shared Online

Sunday January 17, 2021 9:47 am PST by
Twitter user @DongleBookPro has today shared images of a prototype iPhone 5s in an unreleased Black and Slate color. The iPhone 5s was launched in September 2013. The device featured Touch ID, a 64-bit processor, and a True Tone LED flash for the first time. Other new features included a five-element lens with an f/2.2 aperture, a 15 percent larger camera sensor, Burst Mode, and Slo-Mo...
Apple TV Ray Light 2 Triad

Apple Extends Free Apple TV+ Trials Until July

Friday January 15, 2021 10:50 am PST by
Apple is once again planning to extend its free Apple TV+ trial subscriptions, this time until July. When Apple TV+ launched in November 2019, Apple offered free Apple TV+ subscriptions to those who purchased a new Apple device in or after September 2019. Those free subscriptions were set to expire in November 2020, but in October 2020, Apple announced that it was extending free trials...
pat gelsinger intel

Incoming Intel CEO Derides Company's Inability to 'Deliver Better Products' Than Apple's M1 Chip

Friday January 15, 2021 6:17 am PST by
Incoming Intel CEO Pat Gelsinger has said that the company must "deliver better products" than Apple, which he described as a "lifestyle company," and says that Intel's best days are "in front of it" (via The Oregonian). Speaking at an Intel all-hands meeting yesterday, Gelsinger derisively implied that Apple is merely a "lifestyle company," so Intel must be able to surpass its technology: ...
mac pro mini feature

Apple Working on Two New Mac Pro Desktops, One of Which Will Be Reminiscent of Power Mac G4 Cube

Friday January 15, 2021 10:23 am PST by
Apple is developing two versions of the Mac Pro to succeed the Mac Pro that was first released in December 2019, according to a new report from Bloomberg. The first updated Mac Pro is a direct successor to the current Mac Pro and it will use the same design. It may also be equipped with Intel processors rather than Apple silicon chips, and it could be one of the sole machines in the Mac...
macbook pro 16 inch thunderbolt

Bloomberg: Next-Generation MacBook Pro to Offer Improved Displays, Faster Charging Over MagSafe

Thursday January 14, 2021 11:36 pm PST by
Following today's report from analyst Ming-Chi Kuo outlining major changes for the next-generation MacBook Pro models coming in the third quarter of this year, Bloomberg's Mark Gurman has weighed in with his own report corroborating some of the details but seemingly differing a bit on others. First, Gurman shares more details on the return of MagSafe charging to the MacBook Pro, indicating...