A security flaw discovered on the iPhone leaves it wide open to data theft. It seems that password protection does not adequately keep your information under lock and key.

Gizmodo reported the flaw on a tip from a Mac Rumors member, demonstrating in a few quick steps how your data could be easily compromised with a simple trick. It reported that the issue showed up with the latest iPhone software update 2.0.2. The trick allows access to phone information in Contacts, Mail, Safari and SMS even when your phone is locked and password protected.

What is involved? The emergency call shortcut. Tap on it, then double tap the home button and you’re in the phone favourites. Anyone can then have access to the numbers listed in your favourites as well as to your Address Book, dial keypad and voice mail.

You’d think password protection would protect your phone from busybodies or meddlers. Not at all – clicking on the blue arrows next to your contacts names will even give you full access to the information in a favourite entry. Click on a URL in the contact’s information and the would-be iPhone infiltrator gets access to Safari. Click on the ‘send text message’ and your text messages are open to view. You can even use the hole to get access to Mail on the iPhone.

Is there a fix? Gizmodo details the steps below:

1. In the iPhone home, go to Settings.
2. Click on General.
3. Click on Home Button.
4. Click on either "Home" or "iPod".

These steps will ensure that the double-click on home will take would-be snoops to the unlock screen, instead of to the favourites. The big deal about this flaw is that upon password protection, a phone should bar unauthorized users. But obviously it’s not working quite as intended on the iPhone. Apple would do well to fix the flaw – it pretty much renders password protection useless.

Related:

Entry was posted on Wednesday, August 27th, 2008 at 8:51 am under Hacks, iPhone.  Print This Post

Read more entries by Erna Mahyuni.
Stumble It!