Whoops! iPhone passcode bypass a cinch

Stephen Withers
Thursday, 28 August 2008 03:27

Your IT - Mobility

Bear in mind that if you're one of the thousands - millions? - of people that never bother to put a passcode on their phone, then you're no worse off than you were before the flaw was discovered.

Fortunately, there's a simple workaround: change the Home button setting to either Home or iPod. Anyone picking up your phone and trying the trick will either be returned to the passcode entry screen or be able to listen to your music collection.

The latter might be embarrassing, but not as embarrassing as having those smutty SMS conversations exposed.

Discovery of the flaw is generally being attributed to MacRumors user 'greenmymac', but his or her original message makes no claim to discovery. It does appear to be the first time the issue was brought to public attention.

Strangely, Apple has already fixed this or at least a very similar problem once before.

The security advisory accompanying the iPhone 1.1.3 software release included "The Passcode Lock feature is designed to prevent applications from being launched unless the correct passcode is entered. An implementation issue in the handling of emergency calls allows users with physical access to an iPhone to launch an application without the passcode. This update addresses the issue through an improved check on the state of the Passcode Lock."

Another update will presumably be released shortly. But for now, consider changing the Home button setting on your iPhone.