iPhone Favorites security exploit

John Chan | Aug 28, 2008

All iPhone owners using the passcode lock feature to secure your Apple mobile phone take note: It's far from secure. CNET Asia blogger Jerry Liao alerted us to a flaw discovered by a MacRumors forum member. This is done by simply bypassing the Passcode screen and going to the Emergency Call screen, then double tapping the Home button. If you have set the double tap shortcut to go to the Favorites screen, all your contacts set as favorites become fair game.

For example, my contact has details like Home page and email address aside from my phone number. Someone using the exploit can tap on the blue arrow and from there, be able to access Safari by pressing on my Home page. Worse still, by tapping on my email address, you will be brought to the Mail application and gain full access to this phone's Inbox.

We don't expect Apple to leave this unfixed for long. But in the meantime, change your double-tap shortcut to go to Home or iPod instead of Favorites if you still want to use the Passcode Lock. The only thing you'll risk exposing there is your choice of music.

Filed under: Mobile Phones
Leave a comment | Bookmark | Share