iOS7

[TheFaQQer]

"Another iOS 7 Bug Lets Anyone Make Calls From Locked iPhones--And This One Has No Quick Fix"

Linky

[DaveB]

Which is what people are being advised to do, because the default configuration that Apple provide (which they will release a fix for) is one which gives people access to things that they aren't meant to have.

If it's not a hole, then why are Apple fixing it?

Apple haven't said they are releasing a fix for that, they are releasing a fix for the Lock Screen bypass issue. The ability of Siri to access specific functionality without having to unlock the screen was deliberate and is an option that can be turned off. Yes it should have been turned off by default, that was a poor configuration choice, but even if they change that the option will still be there to enable if it the user wants to.

[TheFaQQer]

2. Not a hole, just a poor configuration choice. Turn of Siri access to the control panel functionality from the phone settings and it's not an issue.

Which is what people are being advised to do, because the default configuration that Apple provide (which they will release a fix for) is one which gives people access to things that they aren't meant to have.

If it's not a hole, then why are Apple fixing it?

[Anonimouse]

Call blocking is now available bye bye PPI

[DaveB]

1. Siri can put it into airplane mode, so that the remote lock / wipe doesn't work.

2. You can access the email and social media from the lock screen, unless you change the default option.

Holes, plural.

1. Or you can switch it off, so the remote wipe doesn't work, or you can take the sim out, so the remote wipe doesn't work, or take it somewhere with no signal, so the remote wipe doesn't work. The first two of which are probably quicker than mucking about with Siri anyway. As soon as you turn it on again, or get a signal, or put a new sim in remote wipe starts working again and if the lock or wipe commands have been issued then they take effect as soon as the phone comes online again. If you leave it in airplane mode then nothing works anyway other than using it as an iPod. This one is a non-issue.

2. Not a hole, just a poor configuration choice. Turn of Siri access to the control panel functionality from the phone settings and it's not an issue. Users choice whether to allow it or not, there are plenty of circumstances where you would want to use Siri to do stuff without having to physically handle the phone to unlock it. (Driving, Cycling, don't have a hand free or time to stop and get the phone out to type.)

If the phone has been stolen then issuing the remote wipe stops the thief using Siri to bypass the lock screen anyway.

[TheFaQQer]

Security Hole, singular.

1. Siri can put it into airplane mode, so that the remote lock / wipe doesn't work.

2. You can access the email and social media from the lock screen, unless you change the default option.

Holes, plural.

[bluelogic]

nope so far its great. expect another update soon tho due to the glaringly obvious way you can hack past the login.

[Pondlife]

Cheers chaps.

In iOS7 this can be done even when the phone is locked with a passcode, as the voice-activated assistant Siri can be instructed to carry out the task.

What else can Siri do when the phone is locked?

[DaveB]

There's a video on the BBC site about the security holes.

Security Hole, singular. Passcode Bypass, again. Limited impact, easy interim fix till it's patched and only allows access to mail photo or twitter Apps if they were active at the time the phone was locked.

Not saying it's not important, it is. But it's not necessarily the gaping critical flaw that that some have been reporting it as.

On the plus side they have now enabled remote lock and remote wipe as standard in the OS, so if you phone does get nicked or lost you can:

a: Find it quickly,
b: Lock it to stop others getting access (not affected by the passcode flaw) and
c: completely wipe it and reset the phone if it is critical it not be used by others.

[TheFaQQer]

There's a video on the BBC site about the security holes.

[DaveB]

Anyone managed to turn their shiny thing into a nice looking paperweight?

By that I mean any issues with it?

Nothing so far.

Upgraded phone last night, iPad this morning. Both with no issues.

[Pondlife]

Anyone managed to turn their shiny thing into a nice looking paperweight?

By that I mean any issues with it?