also @ TechSpot: Samsung to debut 3200x1800, 298 PPI 13.3" LCD panel (and more)

Second passcode bypass flaw discovered in iOS 6.1 this month

By

On February 26, 2013, 11:19 AM

Apple released iOS 6.1.2 one week ago to address, among other things, a flaw that allowed anyone to bypass the iPhone passcode lock screen and access select data on the device. But much to the dismay of Apple, yet another passcode bypass vulnerability has been discovered that once again lets users in the know access a locked device without knowing the four-digit pin.

The second vulnerability to surface this month is similar to the first in that it involved using the phone’s screenshot function, emergency call feature and the power button to circumvent the lock screen. From there, however, reports vary as to the level of access you may have.

The original note on the Full Disclosure blog says this new method allows an attacker to gain access to the phone’s voicemail list and contacts list. Connect the handset to a computer using a USB cable and you can even reportedly access other data like photos without the passcode. The latter, however, may only be partially true.

According to TNW, the user file system is encrypted and unviewable on a computer when an iPhone has a passcode enabled. The catch here is that if the iPhone has been connected to a computer and unlocked once, then its file system will always be viewable on that machine. If the phone has never been connected to a particular computer and unlocked, this hack won’t grant any magical access.

In related iOS news, Apple is beta testing the latest version of the software which prevents the use of the popular jailbreak software evasi0n. One of evasi0n’s creators was recently able to test the update and confirmed the patch, we are told. It's unclear at this hour when we can expect to see iOS 6.1.3 or what specific fixes it will carry.

, , , , , , ,

Related Products from Product Finder

Apple iPhone 5

The Apple iPhone 5 features a 4-inch display retains the same 326 PPI density as its predecessor with an effective resolution of 1,126 x 640, and a new Lightning connector. The new handset now features 802.11a/b/g/n Wi-Fi with 802.11n supporting dual-band 2.4GHz and 5GHz frequencies. Bluetooth 4.0 is back in addition to GPS and GLONASS for location services.

60 Reviews
Price: $400.00

Apple iPhone 4S

The iPhone 4S looks identical to last year's model but comes in a new 64GB flavor and upgrades the camera to include an 8-megapixel sensor with improved low-light performance and 1080p video capture. In terms of performance the new iPhone is reportedly up to 2x faster and is also capable of running on faster HSPA+ networks, reaching theoretical download speeds of up to 14.4Mbps.

93 Reviews

Apple iPad Mini

The iPad mini packs a dual-core A5 processor, dual-band 802.11a/b/g/n Wi-Fi, a FaceTime HD camera, 5-megapixel rear iSight camera with 1080p recording and an optional LTE radio. The Mini sports a 7.9-inch display and 1,024 x 768 resolution. Battery life is estimated at 10 hours.

63 Reviews
Price: $299.00

Apple iPad (4th-gen)

The 4th generation iPad sports a beefier A6X processor for double the CPU and graphics performance (versus iPad 3), an improved FaceTime camera that supports 720p resolution, the new Lightning connector, 802.11a/b/g/n dual-band Wi-Fi and the same image signal processor found in the iPhone 5.

40 Reviews
Price: $499.00

User Comments: 6

Got something to say? Post a comment
  1. 3rd time lucky?

  2. So busy trying to lock out jailbreaking that they forget to bug test important features...

  3. There are flaws since ios beginning so I don't think it's something unwanted from them.

    They want to sell the phone to jailbreaking market more than sending these people back to competitors.

  4. Hmm kinda smart. Get everyone to the latest iOS version, including the people who want to jailbreak their devices, since jailbreaking is possible on the current latest iOS. Then somehow a very serious "bug" props up. Apple, then releases an unjailbreakable version of iOS which fixes this serious bug and at the same time, downgrading to other versions is disabled on the Apple Servers. The serious "bug" would cause everyone to want to upgrade to the latest iOS, even if there is no Jailbreak. Apple's Jailbreak problem solved...

    Of course, I'm making the utterly horrible assumption, that the new version of iOS would be unjailbreakble... Also there are ways to downgrade to older version of iOS even after Apple servers stop verifying the old ipsw files...

  5. Hmm kinda smart. Get everyone to the latest iOS version, including the people who want to jailbreak their devices, since jailbreaking is possible on the current latest iOS. Then somehow a very serious "bug" props up. Apple, then releases an unjailbreakable version of iOS which fixes this serious bug and at the same time, downgrading to other versions is disabled on the Apple Servers. The serious "bug" would cause everyone to want to upgrade to the latest iOS, even if there is no Jailbreak. Apple's Jailbreak problem solved...

    Of course, I'm making the utterly horrible assumption, that the new version of iOS would be unjailbreakble... Also there are ways to downgrade to older version of iOS even after Apple servers stop verifying the old ipsw files...

    Maybe apple planned this in the first place.

  6. I've had countless times people who own/want Apple products say "They don't get viruses." Well they way the world is now by having a "computer" in the palm of your hand they really need to look at the whole perceptive and realize they people are the true virus. If people want to get into something bad enough they will.

    I'm not in the cult of Apple, but I agree with Steve on this. They need to stop trying to stop jailbreaking and work on improving what they have.

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.