Tuesday, October 2, 2018

Passcode Bypass Method Exposes Contacts and Photos in iOS 12

Tim Hardwick:

A passcode bypass vulnerability has been discovered in iOS 12 that potentially allows an attacker to access photos and contact details on a locked iPhone.

The rather convoluted bypass method was shared in a video by Jose Rodriguez, who has discovered iOS bugs in the past that Apple has subsequently fixed.

[…]

Concerned users can do so by navigating to Settings > Face ID & Passcode (that’s Settings > Touch ID & Passcode on iPhones with Touch ID) and disabling the Siri toggle under the "Allow access when locked" menu.

Comments RSS · Twitter

Leave a Comment