Apple looks to fix 'minor' iPhone security flaw

By Ed Oswald | Published August 29, 2008, 3:23 PM

The expected 2.1 software update for Apple's iPhone in September will include a fix that could allow for disclosure of personal information when the device is locked, Apple said.

"The minor iPhone security issue which surfaced this week is fixed in a software update which will be released in September," Apple spokesperson Jennifer Bowcock said in a statement.

Apple also admitted the flaw affects users of the iPod touch as well.

As first discovered by Apple enthusiast sites including MacRumors, even when an iPhone is password-protected, anyone can gain access to the Favorites page by pressing the emergency call button, followed by two presses of the home screen button.

Unlike the "Favorites" page in a Web browser, the iPhone's favorites page is like a "quick links" page that links to personal contacts and their phone numbers, e-mails, URLs, and text messages. They may not necessarily give away the ID of the iPhone's owner to a thief, unless some of that information is embedded in a text message to a friend. And tapping on one those favorites could launch the browser, e-mail, or SMS applications -- in which case, a thief could impersonate the iPhone's owner.

Officials say that anyone concerned with the possible security hole can set the 'double click' button to just take the user to the Home screen. This simply takes the device back to the unlock screen is password protection is turned on.

Comments

this is news?
OMFG... get a real news dept BetaNews

Score: 0

|

Tourette's Syndrome boy is back!

Yay!

Perhaps you could enlighten us with more incoherent babble and a little random vulgarity thrown in to spice it up a bit?

Score: 0

|

BFD

yawn

Score: 0

|

Well at least the fix is on its way and for me its not a big deal since if someone else gain accessed to my phone I don't think they are returning it :). It's on my hip or in my pocket so if someone got my phone they are KEEPING IT.

Score: 0

|

Have to love a minor flow that could disclose your personal info. If that is minor I would hate to see what a serious concern would be.

Score: 0

|

LOL, Minor!!!
Everything is minor when it comes to Apple

Score: 0

|

"This simply takes the device back to the unlock screen is password protection is turned on."

Huh??

Score: 0

|

Not a security issue but a bug that has existed for a YEAR now with the itouch/iphone and its quite annoying

http://www.google.com/se...e+issue+with+ipod+touch

Score: 0

|

You don't have the right to complain. You bought the product, deal with the result of your bad money management.

Score: 0

|

Just because he bought a product does *not* mean he has to "just deal with" poor service or bad software.

As with any other product that is supported by a company, he has every right to expect that company to do just that and *support* it.

As an aside...

I cannot comprehend why you are still here with that username, but the ways of the mods are mysterious and often confusing to us mere mortals...

Score: 0

|

Because Steve says it's minor...The sheeple will believe it's minor.

Score: 0

|

damn right they will... just look at internetworld7

Score: 0

|

hahaha... You can read internetworld7 like a book!
Well done cescam66 for pointing out.

Score: 0

|

Lol I think internetworld7 has created a category above sheeple. It's more of the "hey look I'm an idiot" category. Most of the time I don't even bother replying to the crap he spews. There is not a person on this site whether it be a MS fan or an Apple fan that can't see what an idiot he is.

Score: 0

|

And the MS fanboys, who know ALL TOO MUCH about fundamental security flaws, will worry about a platform they claim to care nothing about.

Now, if Apple could only come up with something as truly revolutionary as ActiveX...

So what's new fanboy?

Score: 0

|

So what about the non-fanboys who use both?

Are they allowed to complain about both, or must they only worry about MSFT issues, because ActiveX is worse?

I know you like Apple, man. No big deal, but flaws are flaws. If you're blind to it because you like them so much, you're no better than the MSFT fanboys.

Score: 0

|

"The expected 2.1 software update for Apple's iPhone in September will include a fix that could allow for disclosure of personal information when the device is locked, Apple said."

This implies that the "fix" could allow for disclosure of personal information. Obviously, it needs rewriting.

And I don't sure if I would call this issue "minor." I can think of all kinds of ways to exploit this, especially if the iPhone belongs to a celebrity.

Score: 0

|

Ah gods....Harris Pilton's contact list is going to be plastered all over the intarwebz again....

Score: 0

|

The minor iPhone security issue

when an iPhone is password-protected, anyone can gain access to the Favorites page by pressing the emergency call button, followed by two presses of the home screen button

a "quick links" page that links to personal contacts and their phone numbers, e-mails, URLs, and text messages.

Yeah... Sounds minor...

Score: 0

|

Its minor because Apple says so, duh!

They would never do anything to hurt their customers and everything is 100% reliable and has more security then 20 fort knox combined!

Was that a good impression?

Score: 0

|

"Its minor because Apple says so, duh!"

Unlike Microsoft, you can trust Apple. I would trust Apple with my life.

Score: 0

|

well i hope you die soon son

Score: 0

|

Now that I have my MacBook, I can see where you are coming from. You can't break an arm in a room with padded walls.

Score: 0

|

LOL but thats because your a fool.

Score: 0

|

I see making you info open to outside access is ok. You really are a clueless apple sheep. Keep drinking the koolaide. Then again maybe we'll get lucky.

Score: 0

|

"I would trust Apple with my life."

Awesome! Guess that means we won't haft to put up with you much longer. :)

Score: 0

|

I can easily see why you think Apple is a lightweight here.

If they were truly an IT giant, they would have to fix a truly insecure service like ActiveX that easily allows one to easily take over the entire machine just by claiming to be whomever you want to be.

You are quite right, Apple has a LONG ways to go to reach such lofty heights of fundamental design SNAFUs as such technologies as ActiveX.

LOL!

Score: 0

|

Silverlight 3 goes live on Microsoft's servers

Microsoft's answer to Adobe's Flash is (unofficially) here, with prospects of higher-speed, higher-resolution video and for the first time, 3D.

Three Android phones on the way from T-Mobile in 2009

T-Mobile's myTouch 3G, launched Wednesday, will be followed by two more Android phones later this year, but neither of them will be HTC's Hero.

Best Buy-brand TVs to get TiVo

A new alliance will place the retailer's own brand alongide the manufacturers, and could also lead to future partnerships on services.

LTE still lacks a voice

The 4G Wireless standard that Verizon hopes to show off before this year is out is still at a loss for (spoken) words.

Data sharing among online advertisers: Is sanity in sight?

Lockdown with Angela Gunn In the middle of a 15-page plea not to get regulated, a spark of smart thinking.

T-Mobile's strategy to combat Apple's iPhone with Android

With a trio of Android phones now in the pipeline for 2009, T-Mobile hopes to break the iPhone's emerging stranglehold.

EC's Reding: Government should act as broker for media downloads

If Internet media services don't step up and build an attractive way for users to start paying for downloads, a commissioner says, government may do the job instead.

Sony TVs get Netflix, still no PS3

Though it's coming in behind LG, Samsung, and Microsoft, Sony will begin to offer Netflix streaming, too.

Google Chrome OS: Too little, too early

Carmi Levy: Wide Angle Zoom Don't start the revolution just yet, says Carmi, who isn't so certain Chrome OS will be the "Windows Killer."

GAO pen test brings the hammer down on federal rent-a-cops

But are the computers to blame for the contract-guard fiasco at FPS?

What's Next: Chrome OS will have at least some friends in high places

Also: South Korea takes another round of DDoS abuse, and Neelie Kroes and Steve Ballmer may shake hands before she exits stage left.

Report: Evidence of further creativity with Windows 7 upgrade prices

A ZDNet blogger did some serious digging for clues as to a reported price break on multiple Windows 7 Home Premium licenses, and may have found it.