Apple Working On Fix For iOS 7 Lockscreen Bypass Flaw

Apple says it will fix an embarrassing security flaw on its new iOS 7 software which hackers showed can bypass the lockscreen and access personal data.

The flaw, discovered within hours of iOS 7 becoming publicly available, can be exploited on the iPhone 4S and 5 and gives access to personal data including email, photos, Twitter, Facebook and Flickr. It is exploited via the Control Center function, which is found by swiping up from the bottom of the screen. That offers access to the phone user's alarms, a calculator, and the camera, as well as frequently-used settings such as Wi-Fi, Bluetooth and Airplane mode.

The flaw appears not to affect the iPhone 5S and 5C.

From the alarms screen, a hacker can use a combination of button presses to access the multitasking manager, bypassing the lockscreen. That offers access to some user data including photos, email, Twitter, Facebook and Flickr accounts. An intruder can email or delete photos, send tweets, read and make Facebook posts and messages, and send text messages, though not read email.

"Apple takes user security very seriously," an Apple spokesman said. "We are aware of this issue, and will deliver a fix in a future software update."

Typically, Apple has taken at least two weeks to fix such flaws when they have been found.

"This is yet another embarrassing example of Apple's lax approach to iOS security," says Graham Cluley, an independent security expert. "I can remember at least two or three other recent occasions where Apple has been shown to be sloppy when it comes to security in past revisions of its mobile operating system."

Security flaws have been found previously in Apple's iOS mobile operating system on both the iPhone 4 in 2010 and the iPad in 2011 that had to be fixed by a security update.

The vulnerability relies on the hacker having physical access to the phone and cannot be executed remotely.

"It's only a potential problem if your phone gets stolen," said Cluley. "It's a bit of palaver to execute, and if a hacker has access to your phone not even a secure four-digit PIN lock will prevent them getting into the phone by hooking it up to a computer, as it only takes 10,000 combinations before they can access the phone."

He added: "I don't think it's disastrous, but it's certainly embarrassing yet again."

Until Apple releases a fix for the security issue, iPhone owners can protect themselves by disabling access to 'Control Center' via the lockscreen in the Settings app.

Credit:
theguardian.com

Never Mind The iPhone, Here's iOS 7

The hoopla over the iPhone introductions may have been misplaced -- it's the release of the new Apple mobile operating system that deserves the fanfare.

iOS 7 provides a bigger change to the mobile user experience than a gold-colored shell or a fingerprint-reading Home button ever can. And uptake of the new OS has been fast and furious. In less than 24 hours after release, it already had a higher adoption rate than Google's latest Android "Jelly Bean" OS, which launched in July.

Those who have yet to make the plunge may want to have a look at the handy list of six key things to do before you tap Download (in the post below). And iPhone users who have already upgraded might be surprised by how new their favorite apps look. Galen Gruman warns that "switching to iOS 7 is a shock: It looks really, really different, and some apps -- Photos, especially -- work very differently. ... [But] once you get past the new UI, you should discover some very useful capabilities."

Some analysts have even speculated that iOS 7's new look could act initially to dampen new iPhone sales; people may be tempted to put off a new purchase because the software makes it feel like they already got a new phone. Features like iTunes Radio and enhancements to the Camera and Photos apps will appeal to consumers, but there are major advances for enterprise users as well.

But changes present a big challenge for developers, who have been scrambling to rework their apps for iOS 7. The significantly changed user interface -- in particular the "flatter" design that puts content first -- can make existing apps not specifically designed for iOS 7 look out of place.

"The biggest thing [developers] need to worry about is making sure their apps are targeted for iOS 7," advises Ravi Bhatt, CEO of software developer Branchfire. "iOS 7 is an opportunity to make pretty cool transformative changes." And the worst thing an iOS developer could do is "to just treat [the changes] like eye candy," Bhatt said. Both iOS and the Mac's OS X will eventually feel the same, he points out. "That's the direction we're headed. You can see it."

Take a look at a test-drive of the iOS 7 beta (video below), with its new folder behavior, modified search, Control Center, multitasking, and more. Note: In the final version, wallpaper and ringtone choices have been greatly expanded.

Credit:
infoworld.com