{"id":2435,"date":"2013-09-23T14:00:19","date_gmt":"2013-09-23T18:00:19","guid":{"rendered":"http:\/\/www.kaspersky.co.uk\/blog\/?p=2435"},"modified":"2017-05-18T16:12:49","modified_gmt":"2017-05-18T15:12:49","slug":"apples-ios-7-has-a-major-security-flaw","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.uk\/blog\/apples-ios-7-has-a-major-security-flaw\/2435\/","title":{"rendered":"Apple&#8217;s iOS 7 Has a Major Security Flaw"},"content":{"rendered":"<p>An apparent flaw in Apple\u2019s new operating system for its mobile devices allows anyone to access a user\u2019s contact information and social media accounts without entering the security code to unlock the device.<\/p>\n<p><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/86\/2013\/09\/05201846\/lock_EN1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-2439\" alt=\"lock_EN\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/86\/2013\/09\/05201846\/lock_EN1.jpg\" width=\"640\" height=\"420\"><\/a><\/p>\n<p>According to ZDNet, the exploit, which has now been widely reported, was discovered first by a soldier based in the Canary Islands, who first posted a YouTube <a href=\"http:\/\/www.youtube.com\/watch?v=tTewm0V_5ts#t=13\" target=\"_blank\" rel=\"noopener nofollow\">video detailing the vulnerability<\/a> on Thursday 17 September. That video details the steps to bypass the lockscreen, as described in a post on <a href=\"http:\/\/www.forbes.com\/sites\/andygreenberg\/2013\/09\/19\/ios-7-bug-lets-anyone-bypass-iphones-lockscreen-to-hijack-photos-email-or-twitter\/\" target=\"_blank\" rel=\"noopener nofollow\">Forbes.com<\/a>:<\/p>\n<p style=\"padding-left: 30px;\">[A]nyone can exploit the bug by swiping up on the lockscreen to access the phone\u2019s \u2018control center\u2019, and then opening the alarm clock. Holding the phone\u2019s sleep button brings up the option to power it off with a swipe. Instead, the intruder can tap \u2018cancel\u2019 and double click the home button to enter the phone\u2019s multitasking screen. That offers access to its camera and stored photos, along with the ability to share those photos from the user\u2019s accounts, essentially allowing anyone who grabs the phone to hijack the user\u2019s email, Twitter, or Flickr account.<\/p>\n<p>The far-reaching nature of this breach through the steps described above offer unfettered access to a user\u2019s photos and the sharing functions of those photos. That includes access to social media accounts and emails. And by selecting the option to send a photo by iMessage, it also allows complete access to a user\u2019s contacts, and all information stored therein.<\/p>\n<div class=\"pullquote\">Apple has reportedly acknowledged the mistake and pledged to rectify it in a later software update.<\/div>\n<p>Apple has reportedly acknowledged the mistake and pledged to rectify it in a later software update.<\/p>\n<p>Until this gap is patched, users can prevent this from happening to them by disabling\u00a0access to the Control Center on the lock screen.\u00a0Go to\u00a0<strong>Settings<\/strong><b>, <\/b>then<b>\u00a0<strong>Control Center, then<\/strong><\/b> swipe the option to\u00a0<strong>Access on Lock Screen <\/strong>so that it does not display on the lock screen.<\/p>\n<p>It\u2019s almost expected that new operating platforms on computers and mobile devices alike will have bugs when they first roll out, and Apple is no stranger to controversies surrounding such hiccups. When iOS 6 was rolled out last year, the company scrapped its existing onboard Google Maps app and replaced it with a half-baked navigation tool of its own, Apple Maps, that routinely couldn\u2019t find destinations, gave inaccurate directions \u2014 that led to a handful of <a href=\"http:\/\/www.wired.com\/gadgetlab\/2012\/12\/apple-maps-dangerous-down-under\/\" target=\"_blank\" rel=\"noopener nofollow\">life-threatening situations<\/a> \u2014 and incorrectly located users with its GPS function. In a rare admission of error, the company publicly acknowledged that app\u2019s flaws and eventually <a href=\"http:\/\/bits.blogs.nytimes.com\/2012\/11\/27\/apple-fires-maps-manager\/?_r=0\" target=\"_blank\" rel=\"noopener nofollow\">fired its designer<\/a>.<\/p>\n<p>In addition to being a gigantic security failure, the iOS 7 is an embarrassing gaffe for Apple, which has high hopes for its first <a href=\"http:\/\/www.npr.org\/blogs\/alltechconsidered\/2013\/09\/03\/218533735\/forget-folders-apples-ios-7-is-all-about-the-screen\" target=\"_blank\" rel=\"noopener nofollow\">major operating system overhaul<\/a> since founder Steve Jobs died in 2011.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An apparent flaw in Apple\u2019s new operating system for its mobile devices allows anyone to access a user\u2019s contact information and social media accounts without entering the security code to<\/p>\n","protected":false},"author":41,"featured_media":2436,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[14,1150,268],"class_list":{"0":"post-2435","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"tag-apple","9":"tag-ios","10":"tag-vulnerabilities"},"hreflang":[{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/apples-ios-7-has-a-major-security-flaw\/2435\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/apples-ios-7-has-a-major-security-flaw\/2481\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/apples-ios-7-has-a-major-security-flaw\/2384\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/apples-ios-7-has-a-major-security-flaw\/2587\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/apples-ios-7-has-a-major-security-flaw\/2775\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/apples-ios-7-has-a-major-security-flaw\/1617\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/apples-ios-7-has-a-major-security-flaw\/2775\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/apples-ios-7-has-a-major-security-flaw\/2775\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.co.uk\/blog\/tag\/apple\/","name":"apple"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=2435"}],"version-history":[{"count":1,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2435\/revisions"}],"predecessor-version":[{"id":10116,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2435\/revisions\/10116"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/media\/2436"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=2435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=2435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=2435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}