Hack Forums
[iOS] Another Day, Another iOS 7 Security Bug [Video Walkthrough Included] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Mobile Smartphones (https://hackforums.net/forumdisplay.php?fid=79)
+----- Forum: Apple iOS (https://hackforums.net/forumdisplay.php?fid=137)
+----- Thread: [iOS] Another Day, Another iOS 7 Security Bug [Video Walkthrough Included] (/showthread.php?tid=3786797)



Another Day, Another iOS 7 Security Bug [Video Walkthrough Included] - Tibit - Oct 4, 2013



Quote:This time we learn via CNET that there's a problem surrounding the fact that Airplane Mode is easy for hackers to exploit. A German security firm called SR Labs posted a YouTube video showing how it's possible.

This exploit requires a thief to physically steal your phone. iOS 7 implemented a new feature called Control Center which lets you enable Airplane Mode without having to enter a passcode lock. This gets it off the grid and out of sight of Apple's Find My iPhone feature. The phone can't be tracked or remotely wiped, and the thief can take his time to crack your passcode lock.

If the thief is unsuccessful, the video demonstrates a process by which you can lift a fingerprint from the phone's screen and use it to create a fake thumb that will accurately unlock the iPhone 5S's fingerprint sensor.

The thief can actually reset the victim's Apple ID password by requesting the reset and enabling the phone's Wi-Fi just long enough to receive the reset email. In the video, they explain that they were successfully able to do this while remaining out of site from Apple's remote wipe capabilities five times on the same phone.

Source: http://www.businessinsider.com/ios-7-security-flaw-2013-10


* - Roosterâ„¢ - Oct 4, 2013

Wouldn't the original owner, be able to locate the location of his phone from findmyiphone, when the thief is trying to receive the email??
:O and then inform the police and then they catch the thief? :O