We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
78,721 News Articles

Apple iPhone flaw means calls can be made without the passcode

Apple plans to fix flaw next month

A bug in Apple's iPhone OS gives thieves a way to unlock stolen iPhones and make telephone calls.

The flaw was first reported on the MacRumors discussion forum and is very much like other, similar bugs discovered in iOS over the past few years. In an internet video, one user shows how it works on a phone that requires a security passcode before it will work. By hitting the Emergency Call button and then tapping ###, Call, and then quickly hitting Lock, he is able to open up the iPhone's Phone program, look up the owner's contacts and make telephone calls to any phone number.

No other iPhone applications are accessible, however, so the bug can't be exploited to, say, send or read email messages.

WebSense Security Manager Patrick Runald said he tried the hack on non-jailbroken versions of the iPhone 4 and iPhone 3GS and found it worked on both products. In discussion forums, users say that the bug also affects jailbroken phones. It has apparently been fixed in the Beta 3 version of iOS 4.2.

Apple will fix the problem next month, according to company spokeswoman Trudy Muller. "We're aware of the issue and we will deliver a fix to our customers as part of the iOS 4.2 software update in November," she said.

This isn't the first time that Apple has had to deal with this type of bug.

Apple has already fixed Passcode Lock glitches twice this year, and two years ago the company also had to fix a similar bug. That patch was part of a January 2008 iPhone security update. For some reason the flaw resurfaced when Apple released the iPhone 2.0 a few months later, and Apple again had to issue a patch.

See also: iPhone 4 glass 'breaks more than 3GS'


IDG UK Sites

Top 5 Android tips and tricks for smartphones and tablets

IDG UK Sites

How to join Apple's OS X Beta Seed Program: Get OS X Yosemite on your Mac before public release

IDG UK Sites

Why the BBC iPlayer outage was caused by a DDoS attack: Topsy and Tim isn't *that* popular

IDG UK Sites

BBC using Glasgow 2014 Commonwealth Games to trial 4K/UHD, pan-around video, augmented video and...