Apple's iPhone is advertised as a highly secure device, which is why it's a bit funny when someone easily beats its security shortly after a major new version of iOS is released.
A YouTube video posted last week alleges that it's possible to bypass the lock screen of an iPhone running iOS 12 without knowing the password, and access both contacts and photos.
SEE ALSO: Annoying iOS web attack will forcibly restart your iPhone, but not much elseThe process, discovered by security researcher Jose Rodriguez, is a bit convoluted and requires invoking Siri to enable Voiceover, then sending a text message from another phone to the iPhone. Then, a double-tap at the right moment grants you access to features and commands you shouldn't be able to access, invisible behind a white screen but still accessible by swiping across the screen. One of these then enables you to access the phone's contacts, while a more complicated hack (but also doable without any special equipment or expert knowledge) lets you access photos on the phone.
The original video, in Spanish, shows the trick working on what looks like the iPhone 8, but the same technique was recreated on an iPhone XS Max in another (English) video by EverythingApplePro, below. Apparently, the bug is present in iOS 12 (and the iOS 12.1 beta) and works on all Apple devices that can run it.
An attacker would definitely need physical access to the phone and some time with it to perform this hack, so it's not something that could happen while the iPhone is in your pocket. Furthermore, the trick does not give you complete control of the locked phone. But being able to gain unauthorized access to contacts and photos is a serious security issue on its own.
Naked Security points out that it's possible to protect your iPhone from this hack by disabling Siri's lock screen access; the option to do that can be found in Settings > Face ID & Passcode.
Rodriguez has been doing this sort of thing for a while now. I wrote about a similar hack he's done in iOS 9 back in 2016, but judging by his YouTube channel he's been cracking the iOS lock screen since iOS 5.1.
We've asked Apple about this issue and will update the article when we hear from them.
文章
6
浏览
6
获赞
687
The Scantron meme is a clever nod to finals week
Scantrons are the bane of any student's existence. But this meme might make them a little less nerveApple says it broke another big App Store record on New Year's Day
The App Store just blew through another record, even as Apple fights off complaints for deliberatelyBoston's self
Bostonites have a new way to get around the city's famously contentious streets: robotaxis. SEE ALSApple says it broke another big App Store record on New Year's Day
The App Store just blew through another record, even as Apple fights off complaints for deliberatelyPolice use facial
Let's say it together: Facial-recognition technology is a dangerous, biased mess. We are reminded ofNeil Patrick Harris’ next project: His own channel for smart TVs
Want to know what your favorite celebrity is up to? These days it’s pretty straightforward: FoThe Google Arts and Culture app has a race problem
The Google Arts and Culture app (available on iOS and Android) has been around for two years, but thNeil Patrick Harris’ next project: His own channel for smart TVs
Want to know what your favorite celebrity is up to? These days it’s pretty straightforward: FoWhat to expect at WWDC 2020: Plenty of new features across all Apple devices
On June 22, Apple will hold is annual World Wide Developers Conference (WWDC). But rather than gatheCES's all
CES, the world's largest electronics trade show, kicks off next week, with the first official eventsVirgin Hyperloop One hits record speed of 242 miles per hour
Hyperloop One set a new company record when it reached a blistering 242 mph outside of Las Vegas onUK regulator: White male bank culture is ‘difficult to take'
The financial industry’s “white male” culture isn’t changing quickly enough,What to expect at WWDC 2020: Plenty of new features across all Apple devices
On June 22, Apple will hold is annual World Wide Developers Conference (WWDC). But rather than gatheLyft catches up to Uber, adds pre
If you've been using your commuter benefits for Uber, now you can add them to Lyft, too. The underdoPray for Trumble: A sinkhole opened up near the Australian PM's house
Poor Prime Minister Trumble has had a pretty hard time of it lately.The Australian leader (his real