heads up, security hole found in iphone firmware

It’s very unlikely that it could get exploited unless a would be thief knew about it, but still something to be aware of none the less.

http://www.modmyifone.com/forums/news/313171-huge-secuirty-flaw-firmware-2-0-1-2-0-2-a.html

I assume that they’ll be patching this in the next update

Do any of you actually use a passcode to get into your phone? Seems like a huge pain in the ass.

yes.

I forward important emails to my phone… why risk having someone getting into it if I ever loose it?

lol please steve, nobody is going to care how many pms u get in NYspeed

I hate “security holes” like this…

Someone has to have you cell phone to do this…

If someone steals your cell phone just to get information off…Regardless of how your screen is locked on any phone you can find a way around it…

This does seem like a dumb mistake on Apples part but still…

Meh, anything that I’m that worried about the world seeing I wouldn’t be sending in email anyway. Think about that for a minute. It’s totally unencryped email that’s floating around the internet. If I loose my phone I’ll change my email password and call it a day.

Besides that, like LZ said, if someone actually has the phone in their possession the chances of that little 4 digit pin really keeping them out are pretty slim.

lol

BTW, someone being able to get into my contacts in my Razr was the reason I got it back after I lost it. They saw “home” in the contacts, called it, and told me where they found it.

it’s like that windows hole where if you were locked out of the machine, you could bring up the “help” window and from that launch explorer.exe to get in anyway.

Meh, anything that I’m that worried about the world seeing I wouldn’t be sending in email anyway. Think about that for a minute. It’s totally unencryped email that’s floating around the internet. If I loose my phone I’ll change my email password and call it a day.

while that’s true, even if you change the P/w to the email account everything you already have on the phone is stored locally. I’d be most worried about any account linked the the phone getting taken over (netflix, ebay, etc)

Besides that, any websites where you stored the username/password is also at risk

that same person would probably be having a severe moral dilemma if it was your iphone

read about this on wired, they had a whole write-up on exactly how to do it too lol

time to go jack an iphone imo

A write up? It’s not like it’s some pin jumpering voltage glitching hack or anything. You touch “emergency call”, the keypad to dial an emergency call without unlocking the phone comes up, then you double click the home button.

WHOA, I’M A LEET HACKZOR NOW! I CAN HAS CLICK 3 BUTTONS!

A write up? It’s not like it’s some pin jumpering voltage glitching hack or anything. You touch “emergency call”, the keypad to dial an emergency call without unlocking the phone comes up, then you double click the home button.

WHOA, I’M A LEET HACKZOR NOW! I CAN HAS CLICK 3 BUTTONS!

Yep, locally stored email. Again, if it’s so critical that I’m worried someone might read it, I sure as hell wouldn’t be sending it around in email where anyone with a packet sniffer could have read it in transit. If some iPod thief wants to read the email to my wife asking what we’re having for dinner he has a very sad and boring life.

And :ohnoes: someone might be able to log into NYSpeed, LS1GTO or the Ford Expedition forum as me. Again, log in, change my password, done deal. It’s not like any of the banking sites I have bookmarked save the login info.

lol Skurge the l33t hacker, watch out everyone, hide your phones

If someone intending malicious intent on your property has physical access to it, they will succeed.

Whether it be ‘hacking into’ your phone, or gaining access to your Vista computer: If they can touch it, they can gain access.

This isn’t a “security hole”, more like a small bug.

while true… I guess I’d rather just put in a P/W and not have to deal with it :stuck_out_tongue:

I don’t know what you mean?

But I don’t even have the passcode crap turned on…which either means the claimed “security hole” doesn’t affect me, or its a big security hole in itself to not even have it turned on.

My ‘patch’ is to never leave my phone unattended. :slight_smile:

nah, I meant that for jays.

that “hole” shouldn’t effect email and shit. I was just talking about loosing it with or without a password in place

I think what we’re both trying to say is even with your password, even if they fix this bug, chances are pretty good that if someone has your phone in their possession they’ll find a way around that stupid 4 digit pin.

Think about it this way: People broke into 2.0, 2.0.1 and 2.0.2 and I’m sure apple put a hell of a lot more security around the firmware than a 4 digit numeric pin. :wink:

agreed