New iPhone Lock Screen Bug Discovered in iOS 6.1.3

passcode-lock

Apple released iOS 6.1.3 to fix the Lock screen bug yesterday, but looks like there is still a way to bypass the passcode and get access to a user’s personal information.

Folks at iPhoneclub.nl point us to a video, which shows how it is still possible to bypass the passcode using Voice Control feature on the iPhone 4.

István Fekete of iPhoneCanada was also able to verify the security flaw on his iPhone 4 running iOS 6.1.3. He explains how it works:

  • I used Voice control to dial a number (the video shows calling 123, but we think it is possible with any number, as long as the phone dials that number).
  • as soon as the dialing xxx message appeared, ejected the SIM card
  • the call ended, and I have seen the history of my recent calls
  • from that moment on, I could browse through the Contacts, edit them, and even add a new contact or picture, either by taking a new photo or by choosing one from the photo library as you can see from the image above.

It always amazes me when folks figure out such bugs. Anyways, if you’re worried about the security flaw then you can disable Voice Control as a workaround via the Settings app (Settings -> General -> Passcode Lock -> Voice Dial On/Off toggle).

It would be really annoying if Apple releases another software update just to fix this one.

iPhoneclub.nl via iPhoneCanada