A group of users on Apple news site MacRumors.com first pointed out the hole, which involves just a few taps on the touch screen.
The tactic was later tested and verified by Gizmodo, which posted a video of the process.
The issue occurs when the user hits the "emergency call button" on the iPhone's passcode entry screen. This then brings up a dial pad for placing a call in an emergency situation. Unfortunately, it also enables the use of the iPhone's "home" button as normal.
By default, the home button is set to bring up the user's "favorites" list. It also enables an unauthorized user to access a number of other features on the phone.
From within the favorites list, an unauthorized user could view the contact details of those within the iPhone owner's address book. Furthermore, the user could access the owner's voicemail from the list, and could click on a contact's email address to open up the mail application or Safari browser.
From within the Safari or Mail, the intruder would then have access to all of the user's email messages or stored bookmarks, raising obvious privacy and information disclosure concerns.
According to Gizmodo, a fix for the issue is in the works from Apple. Worried iPhone owners will not, however, need to wait that long to fix the hole.
The site notes that simply opening the iPhone's general settings fixes the problem. Users can simply the destination of the "home" button to either the actual Home screen, which requires the passcode to access, or the iPod function, which does not access the phone features.
Users can bypass iPhone security
By
Shaun Nichols
on Aug 30, 2008 8:28AM

Got a news tip for our journalists? Share it with us anonymously here.
Partner Content

Kaseya Dattocon APAC 2024 is Back

Tech For Good program gives purpose and strong business outcomes

How NinjaOne Is Supporting The Channel As It Builds An Innovative Global Partner Program

Channel can help lead customers to boosting workplace wellbeing with professional headsets

Build cybersecurity capability with award winning Fortinet training from Ingram Micro
Sponsored Whitepapers
-1.jpg&w=100&c=1&s=0)
Stop Fraud Before It Starts: A Must-Read Guide for Safer Customer Communications

The Cybersecurity Playbook for Partners in Asia Pacific and Japan

Pulseway Essential Eight Framework

7 Best Practices For Implementing Human Risk Management

2025 State of Machine Identity Security Report