Did Apple clear out all the security flaws with 2.1? Nope, they didn't...

Published on 09-23-2008 01:20 AM

Remember the major security threat introduced with 2.0.2 which allowed anyone to access all the major phone application even if you had a passcode?

Apple said that they fixed the security. But, actually security not completely fixed. Another major bug still exists (one that has been around forever). The Emergency Call mode in passcode screen which is just meant to call emergency numbers like 911 can actually be used to call any number!

This is a big flaw as anyone can make a call and make you pay a big bill if somehow he/ she gets the phone! This means that iPhone Passcode is a big failure as anyone can access the main feature of iPhone really easily even if you think you have secured it.

You can reproduce the bug as follows:

Set a passcode lock.
Lock the phone and slide to unlock.
Click on the Emergency call button and dial any number of your choice.

Though, apple can fix it by just an update, I think the better way is to add a setting to lock each app with a different code even if you are on the main screen. This feature could also be great in the sense that we can protect all our personal stuff (like messages, videos

).

We think Apple would adopt the first method but Steve, please think about the second one too!

[MacRumors iPhone Blog]

Attached Files

IMG_0001.PNG‎ (288.7 KB, 34 views)

_{This article was originally published in forum thread:
Did Apple clear out all the security flaws with 2.1? Nope, they didn't...
started by
sayam} _{View original post}

36 Comments

evolutionarymc - 09-23-2008, 02:02 PM

Originally Posted by Happy Noodle Boy

Is this REALLY an issue? The first thing I (or anyone else I know) do when my phone get lost or stolen is to call AT&T and freeze my account. What I certainly don't do is sit around going "oh damn my phone got stolen, I sure hope they don't make expensive calls with it!"

That would be the first I do!
- Reply

sziklassy - 09-23-2008, 02:38 PM

Two large assumptions are made here:
1) Someone is going to go around with a large code memorized finding random iphones and calling all kinds of people (without the intent of stealing/keeping the iphone mind you!)
--- Most likely, the phone will get stolen and you are out of a phone. If you report the phone stolen I am sure ATT will be kind enough to cancel the bill for you. In fact as soon as you report it stolen they will take any calls made up to 72 hours prior to it being reported and nullify it (I asked). I don't suggest calling taiwan multiple times and abusing this though, they will probably catch on.

2) The culprit won't just do a restore if they don't know how to get through the security.
--- Give me a break. If I got a hold of someone's phone with the intent of making calls and stealing the phone I would just do a quick restore. Once the sim is shut down, sell it on eBay for a quick buck.

Bottom line: yeah, you are absolutely right. Shame on Apple for making it this easy. If you want my opinion, here it is. They pride themselves for having no viruses and lots of safety right? The only reason this is is because nobody gives a s*@#. People that want to hack generally put their efforts into PC. Why? They can do more damage. PCs in the workforce outnumber Macs probably 100 to 1. Apple doesn't have the experience necessary nor do they (I assume) put the money/time into anti-hacking as Windows and other PC OS's might. And for good measure, it's just not worth their time. That being said, this is still a huge flaw, though if it is patched it still doesn;t REALLY safeguard anyone from the guy looking to save a few bucks by making calls on someone else's phone.
- Reply

agentfubu - 09-23-2008, 04:57 PM

I don't think this is a bug... How would apple know every local emergency number in every area? For instance on the highway there's a crass report line and what if you wanted to call that instead of 911?
- Reply

enjoi4586 - 09-23-2008, 05:08 PM

Just because they don't have a large amount of viruses for the mac does not in any way mean that there are no viruses for mac what-so-ever. Trojans, viruses, vulnerabilities, buffer overflows and worms effect all operating systems. sziklassy hit the nail right on the head when he said:

Originally Posted by sziklassy

"People that want to hack generally put their efforts into PC. Why? They can do more damage. PCs in the workforce outnumber Macs probably 10,000 to 1."

I edited his post ever so slightly

PC's run the world, simply put. When you want to do damage, you target biggest group, which is always Microsoft.
- Reply

DarkoNova - 09-23-2008, 05:33 PM

*sigh*

Again with these "super huge crazy dangerous security flaws" that aren't really security flaws?

Gimme a break.

Matt
- Reply

enjoi4586 - 09-23-2008, 05:37 PM

Originally Posted by DarkoNova

*sigh*

Again with these "super huge crazy dangerous security flaws" that aren't really security flaws?

Gimme a break.

Matt

Mac OS X 10.4.8 (8L2127) crashdump Privilege Escalation Exploit

Humm, your right, that doesn't sound like a really dangerous exploit at all.
- Reply

Sparblaze - 09-23-2008, 08:43 PM

Well then approve news faster . Yeah I noticed this a while ago but what if your friend died and you didn't have a phone on you? Well first, using their phone, you would call 911, but what
about reaching their family? You can't! Maybe too much, but hey just a thought.

Oh yeah and so far I've seen 1 Trojan for a mac ever and it was fixed by Apple in 3 days of the finding of the Trojan. Does Microsoft do that? I'm not trying to fight saying Mac is better than PC, but I'm saying Apple does spend time on security issues for their problems. My PC has gotten 3 viruses. Their was no fix by Microsoft for any of them. I has to pay my own money for a virus protection product.
- Reply

whisky96 - 09-24-2008, 01:53 AM

Originally Posted by agentfubu

How would apple know every local emergency number in every area? For instance on the highway there's a crass report line and what if you wanted to call that instead of 911?

the emergency numbers can be called even without a SIM card inserted in... so it's definitely not any number you can think of (definitely not highway report line) ... there are only several (1-5) emergency numbers in each country (like 911 in US or 112 in Europe)

and they can be managed by Apple very easily ... using the carrier.bundle (they use it already to update the carrier settings (service numbers, APN, ...), they will just include the definition of the emergency numbers into that ...
and update will automatically load into the iphone when you connect to iTunes, as it is currently working with network settings
- Reply

corizzle - 09-24-2008, 02:24 AM

this isn't serious AT ALL.
if your phone gets stolen, then the thief has your sim card. he can pop it in any phone and start using it if he wishes. just because yours is passcode locked doesn't mean anything. if you realize you don't have your phone your first instinct should be to call your carrier and deactivate your sim card. plain and simple.

i don't think this is a big issue, and i would use this exploit if i actually passcode protected my phone...

Originally Posted by Sparblaze

Well then approve news faster . Yeah I noticed this a while ago but what if your friend died and you didn't have a phone on you? Well first, using their phone, you would call 911, but what
about reaching their family? You can't! Maybe too much, but hey just a thought.

Oh yeah and so far I've seen 1 Trojan for a mac ever and of was fixed by Apple in 3 days of the finding of the Trojan. Does Microsoft do that? I'm not trying to fight saying Mac is better than PC, but I'm saying Apple does spend time on security issues for their problems. My has gotten 3 viruses. Their was no fix by Microsoft for any of them. I has to pay my own money for a virus protection product.

because everyone knows their friend's family's phone numbers by heart. LOL.
- Reply

Sparblaze - 09-24-2008, 06:23 AM

Originally Posted by whisky96

the emergency numbers can be called even without a SIM card inserted in... so it's definitely not any number you can think of (definitely not highway report line) ... there are only several (1-5) emergency numbers in each country (like 911 in US or 112 in Europe)

and they can be managed by Apple very easily ... using the carrier.bundle (they use it already to update the carrier settings (service numbers, APN, ...), they will just include the definition of the emergency numbers into that ...
and update will automatically load into the iphone when you connect to iTunes, as it is currently working with network settings

Well I know at least 1 of my friends numbers by heart because my family is close with theirs. Like you said 911 isn't an emergency number in England. I used to live in England, but now I live in America. I guess they could preprogram emergency numbers around the world...
- Reply

socialchameleon - 09-24-2008, 08:21 AM

that 0161 number is a Manchester number. I wonder where its for......
- Reply

ericidle - 09-24-2008, 10:32 AM

I was updating my iphone with a payandgo SIM card in and when the screen was saying slide to activate I recieved a text giving me my account balance and the full springboard appeared unfortuately my attention was elsewhere at the time and when I clicked to cancel the message the springboard dissapeared and went back to slide to activate

I'm not sure if this is a bug that can be exploited or not but maybe someone can confirm its there
- Reply

DarkoNova - 09-24-2008, 08:28 PM

Originally Posted by enjoi4586

Mac OS X 10.4.8 (8L2127) crashdump Privilege Escalation Exploit

Humm, your right, that doesn't sound like a really dangerous exploit at all.

Totally different. So someone can make long distance phone calls on your phone. Oh noes!!!1!!

Matt
- Reply

Jayden0606 - 09-26-2008, 11:21 PM

This was actually the case since June 30th. I remember doing this by accident. I didn't even know I was in emergency mode (drunk) and I called and while it's dialing I'm noticing that it was in emergency mode.
- Reply

alias213 - 09-28-2008, 08:26 PM

"The Emergency Call mode in passcode screen which is just meant to call emergency numbers like 911 can actually be used to call any number!"

Isn't it standard that all phones be able to contact an emergency number, with or without a contract? If that's the case, then have we been paying or bills for no reason?

-.-; Lame.
- Reply

yowiphone - 09-28-2008, 09:02 PM

It would be cool if that ow the main number pad GUI was!!
- Reply

Apple

iPhone

iPad

iOS

Jailbreak

Cydia