• On BNET: 3 worst things about the iPhone 3G S
August 28, 2008 3:56 PM PDT

Apple to fix hole in password-protected iPhones

by Elinor Mills

Apple plans to release a fix next month for a security hole that enables someone to access data on a password-protected iPhone, according to a MacWorld report.

The flaw lets anyone who gets ahold of the iPhone to circumvent the password protection and get access to e-mail, text, and voice messages.

"The minor iPhone security issue which surfaced this week is fixed in a software update which will be released in September," Apple spokeswoman Jennifer Bowcock wrote in an e-mail to Macworld.

Bowcock suggested that iPhone users set the device so that double-clicking the home button will take the user directly to the home screen, which will be the unlock screen if password protection is turned on.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
advertisement
Click here!
Recent posts from Security
Report: Problems stymie U.S. cyberspy protection
Symantec's Ramzan on solving the antivirus puzzle
Apple fixing iPhone SMS security hole
Waledac worm targeting July 4 spam offensive
ATM vendor gets security talk pulled from conferences
Postini: Google's take on e-mail security
Botnets lead the way for spam
Stallman warns of Mono 'risk'
Add a Comment (Log in or register) (13 Comments)
  • prev
  • 1
  • next
by NewsReader_ August 28, 2008 6:47 PM PDT
I security flaw that allows you to bypass the locking mechanism on the iPhone is classified by Apple as "minor". I suppose the phone would have to expode to have a flaw considered major.

Customer: Hey, Apple, my iPhone shocks me every time I put it to my ear.
Apple: Oh, that is a minor glitch. Man up you wimp!
Reply to this comment
by b_baggins August 29, 2008 7:36 AM PDT
It's minor because, one, it doesn't allow unlimited access to the phone, and, two, there is an easy workaround, and three, it only works if someone has physical access to your phone.
by AppleSuxLeo August 29, 2008 9:52 PM PDT
Hahahaha...Apple would call this a "feature" .
by dude7895 August 29, 2008 11:07 PM PDT
@ AppleSuxLeo
Ha Ha, feature.
by NewsReader_ August 28, 2008 6:54 PM PDT
A security flaw that allows you to bypass the locking mechanism on the iPhone is classified by Apple as "minor". I suppose the phone would have to expode to have a flaw considered major.

Customer: Hey, Apple, my iPhone shocks me every time I put it to my ear.
Apple: Oh, that is a minor issue. Man up you wimp!
Reply to this comment
by BLipman72 August 29, 2008 4:27 AM PDT
"The flaw lets anyone who gets ahold of the iPhone to circumvent the password protection and get access to e-mail, text, and voice messages. "

Hmmm if that is a not a major bug what is? I believe it also lets the person get a hold of your calander and contacts as well. My guess is that Apple would think this is major if the device itself was affected. Like they would care about a personal data security issue
Reply to this comment
by BLipman72 August 29, 2008 5:56 AM PDT
Sorry i misread the article about this that i saw on gizmodo, Calander is not accessable but your contacts are.

'Done. You are now in your favorites. This seems like a feature, because you may want to have emergency number in your favorites for quick dial. The security problem here is double. The first: anyone picking up your phone can make a call to anyone in your favorites. On top of that, this also opens access to your full Address Book, the dial keypad, and your voice mail."

Like i said before that seems like a MAJOR BUG to me. I included the link to the article if you want to check it out.

http://gizmodo.com/5042332/huge-iphone-security-flaw-puts-all-private-information-at-risk
Reply to this comment
by tsinger254 August 29, 2008 8:09 AM PDT
Sounds major to me too. So, Apple has a MAJOR security flaw, and nary an adverse comment by CNET, but Microsoft has issues with a BETA version, and the usual one-sided reporting. It's reporting like this that makes reporters/companies/blogs lose all credibility. Quite simply, it's nothing short of biased reporting, and the last time I checked, reporters are supposed to be non-biased.
Reply to this comment
by SMB-IL August 29, 2008 6:44 PM PDT
Check again!
by Drew_Smith August 29, 2008 9:01 AM PDT
Does anybody get the feeling that Apple's always going to be a step or two behind in securing the iPhone 3G from threats?
Reply to this comment
by shinji257 August 29, 2008 3:21 PM PDT
I actually agree with Apple that this is a minor issue. I tested this issue and unless you have it set to the default of iPhone Favorites then much harm can't happen. Even then if that list is blank (like mine is) then the individual can't go any further. All they will get is a blank list. You need at least one item there to exploit this flaw. Setting it to the Menu will make it so it doesn't work at all. Setting it to iPod makes it so that it will direct to the iPod screen for music and video selection but they won't be able to do much beyond that. Now then I do see where the issue stands at however if you change it to one of the other ones until they fix it then there is no more issue here.
Reply to this comment
by AppleSuxLeo August 29, 2008 9:51 PM PDT
Apple has been full of holes lately and had been releasing half-baked products. Must be the Pancreatic Cancer coming back ?
Reply to this comment
by ferretboy88 August 30, 2008 5:46 PM PDT
Apple products never have flaws. What are you talking about. Quicktime, Cough cough.
Reply to this comment
(13 Comments)
  • prev
  • 1
  • next
advertisement

Making sense of Windows 7 upgrades

faq The basics and the fine print on Microsoft's options for those eyeing the next operating system from Redmond.
• Full Windows 7 coverage

Road Trip 2009: Big Sky Country

CNET News reporter Daniel Terdiman takes his car full of gadgets to the Rockies and the Great Plains in search of tech, science, nature, and more.
• America's Fortress: Cheyenne Mountain

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right