Sunday, October 31, 2010

iPwned!

From the MacRumors forum ...

When you iPhone is locked with a passcode tap Emergency Call, then enter a non-emergency number such as ###. Next tap the call button and immediately hit the lock button. It should open up the Phone app where you can see all your contacts, call any number, etc.

My iPhone is jailbroken so that could be causing it. Can anyone confirm that it works on non-jailbroken iPhones?
Check out a video demo


Bug no iOS 4.1 from Salomão Filho on Vimeo.

2 comments:

lucy said...

i know we talked about this in class, but i really was taken by the comment Professor Moran said in class regarding levels of expected/anticipated/realized security. As someone who doesn't lock her iphone, this security break doesn't really bother me beyond the irony that a company non-tech savvy americans put so much faith in for their simplicity and ease of use (apple) could have such a seemingly simple and easy to perform unlock maneuver. For someone like my roommate who locks her phone, it was unnerving. I happened to lose my phone a few days ago and the only reason someone got it back to me is because they could go into my contacts and ascertain who i was, which is one reason i keep it unlocked. I'm also too lazy to plug in 4 numbers every time i want to use it. But the biggest reason is that i feel the security lock is a rather useless form of privacy- i always assumed if someone who wished harm with my phone's info wanted to get into it, they could, and that the code was akin to the security codes password protection sites make you list. Furthermore, by creating less of a security barrier on my phone, i leave the onus to me, the human, to better protect where i keep my phone. Although i failed by losing it in the last week, the premise still stands, in my belief, that the security of the human is better in this case than that of the technology. Like professor Moran said, leaving the phone unlocked is a different risk and presents a different privacy philosophy than a locked phone. I wonder if this concept works in other sectors..

Lionel said...

Thanks in part to this class but also to what I've read and noticed outside of it, I also keep my phone unlocked. Not so much as a reminder to keep track of it, but more that at this point, I realize that it's a bad idea to rely on technology to guard all your secrets. So I treat my phone a lot like how I treat my Facebook page. If I'm not ok with the world seeing it, it's not on there. Granted, that means deleting the occasional embarrassing text and not doing any financial business on it, but that's fine with me. Plus, as Lucy said, if I leave it somewhere, I know there's a good chance of getting it back if the person who finds it wants to get it back to me.