iPhone XS Passcode Bypass Hack Exposes Contacts, Photos

guest · Sep 28, 2018

iPhone XS Passcode Bypass Hack Exposes Contacts, Photos
September 28, 2018
https://threatpost.com/iphone-xs-passcode-bypass-hack-exposes-contacts-photos/137790/

A passcode bypass vulnerability in Apple’s new iOS version 12 could allow an attacker to access photos and contacts (including phone numbers and emails) on a locked iPhone.

The hack allows someone with physical access to a vulnerable iPhone to sidestep the passcode authorization screen on iPhones running Apple’s latest iOS 12 beta and iOS 12 operating systems.

The loophole allows images to be accessible by editing a contact and changing the image associated with a specific caller. Apple had put mitigations in place to thwart hacks that allowed images to be viewed via contacts. However, Rodriguez found a convoluted way to circumvent these security barriers.

The process involves tricking Siri and Apple’s accessibility feature in iOS called VoiceOver to sidestep the device’s passcode. [...]
Click to expand...

guest · Oct 15, 2018

VoiceOver bug lets hackers view iPhone photos, send them to another device
October 12, 2018
https://appleinsider.com/articles/1...iew-iphone-photos-send-them-to-another-device

Amateur iOS hacker Jose Rodriguez on Friday unearthed another obscure, yet effective, lock screen bypass that leans on an unpatched bug in VoiceOver to gain unauthorized access to photos on a target device. [...]

AppleInsider independently confirmed Rodriguez's findings using current model iPhones, including iPhone X and XS devices, running the latest iOS 12.0.1.

Unlike the previously uncovered methods, today's technique is far less involved and allows would-be attackers to offload photos onto another device with relative ease.
Click to expand...

Concerned users can minimize exposure to the apparent bugs by disabling Siri lock screen access in Settings > Face ID & Passcode or Settings > Touch ID & Passcode under the "Allow access when locked" heading.
Click to expand...

Minimalist · Oct 30, 2018

New iPhone Passcode Bypass Found Hours After Apple Releases iOS 12.1

It's only been a few hours since Apple releases iOS 12.1 and an iPhone enthusiast has managed to find a passcode bypass hack, once again, that could allow anyone to see all contacts' private information on a locked iPhone.
Click to expand...

https://thehackernews.com/2018/10/iphone-ios-passcode-bypass.html

guest · Sep 12, 2019

Snoops can bypass iOS 13 lock screen to eyeball your address book. Apple hasn't fix it yet. Valid flaw? You decide
Bug-hunter says Cupertino won't even pay $1 reward for security hole
September 12, 2019
https://www.theregister.co.uk/2019/09/12/apples_ios_lock_workaround/

Apple's very latest version of iOS appears to have the same sort of lock-screen bypass that plagued previous versions of the iThing firmware.

The procedure, demonstrated below in a video, involves receiving a call and opting to respond with a text message, and then changing the "to" field of the message, which can be accomplished via voice-over. The "to" field pulls up the owner's contacts list, thus giving an unauthorized miscreant the ability to crawl through the address book without ever needing to actually unlock the phone.

To be clear, you need to have your hands physically on a victim's device, and call it from another phone, to exploit this shortcoming. You can also prevent this all from happening, apparently, by disabling "reply with message" in your iDevice's Face ID & Passcode settings, under the the "allow access when locked" section. By default, this feature is enabled, leaving iOS 13 users at risk out of the box.
Click to expand...

Not only that, but Rodriguez says that, despite sounding the alarm on the blunder months ago, his bypass method still works on the most recent gold builds of iOS 13 [...]
Click to expand...

guest · Sep 20, 2019

iOS 13 ships with known lockscreen bypass flaw that exposes contacts
Vulnerability was demonstrated one week ago, when iOS 13 was still in beta
September 20, 2019
https://arstechnica.com/information...lockscreen-bypass-flaw-that-exposes-contacts/

Apple released iOS 13 with a bunch of new features. But it also released the new OS with something else: a bug disclosed seven days ago that exposes contact details without requiring a passcode or biometric identification first.

Since iOS 13 was in beta when it first appeared, I assumed Apple developers would fix the bypass in time for yesterday's release. Alas, they didn’t, and it’s not clear why.
An Apple representative told Ars the bypass will be fixed in iOS 13.1, scheduled for release on Sept. 24.
It wouldn’t be surprising if Apple issued an update soon. Until then, users may be able to mitigate the threat by following instructions here.
Click to expand...

Log in or Sign up

iPhone XS Passcode Bypass Hack Exposes Contacts, Photos

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

Log in or Sign up

iPhone XS Passcode Bypass Hack Exposes Contacts, Photos

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

Useful Searches