Slashdot Mirror
iPhone XS Passcode Bypass Hack Exposes Contacts, Photos (threatpost.com)
secwatcher shares a report from Threatpost: A passcode bypass vulnerability in Apple's new iOS version 12 could allow an attacker to access photos and contacts (including phone numbers and emails) on a locked iPhone. The hack allows someone with physical access to a vulnerable iPhone to sidestep the passcode authorization screen on iPhones running Apple's latest iOS 12 beta and iOS 12 operating systems. Threatpost was tipped off to the bypass by Jose Rodriguez, who describes himself as an Apple enthusiast and "office clerk" based in Spain who has also found previous iPhone hacks.
Rodriguez posted a video of the bypass on his YouTube channel under the YouTube account Videosdebarraquito, where he walks viewers through a complicated 37-step bypass process in Spanish. Threatpost has independently confirmed that the bypass works on a number of different iPhone models including Apple's newest model iPhone XS. The process involves tricking Siri and Apple's accessibility feature in iOS called VoiceOver to sidestep the device's passcode. The attack works provided the attacker has physical access to a device that has Siri enabled and Face ID either turned off or physically covered (by tape, for instance).
Rodriguez posted a video of the bypass on his YouTube channel under the YouTube account Videosdebarraquito, where he walks viewers through a complicated 37-step bypass process in Spanish. Threatpost has independently confirmed that the bypass works on a number of different iPhone models including Apple's newest model iPhone XS. The process involves tricking Siri and Apple's accessibility feature in iOS called VoiceOver to sidestep the device's passcode. The attack works provided the attacker has physical access to a device that has Siri enabled and Face ID either turned off or physically covered (by tape, for instance).
Good. Goooood!
The logical conclusion is that office clerks in Spain have too much time on their hands and tend to toy with iPhones while at work.
"This is the best iPhone we've ever made...for anyone who wants to bypass our industry-leading secure enclave technology"
Seems even Siri is vulnerable to social engineering hacks. /s
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
I appreciate your well thought out commentary on the current political climate. Obviously, you are wise beyond your years. It's also not opposite day.
iPhone xs is not ithe same as os12
"...Use another iPhone and phone call or FaceTime call the target iPhone..."
I don't think there's a way to identify what the phone number of a random iPhone is without unlocking it first, is there?
File under 'M' for 'Manic ranting'
Apparently the XS wasn't "excess", but "access". Must be the Silicon Valley accent that threw me.
Glad to see that Microsoft finally released iOS 12.
I feel like these are false-flag posts are meant to portray those in opposition to the current ruling party in a negative light, and disrupt logical thought in general
just terrible,
Its kinda sad. But its apple so fuck them.
I thought Apple was going to focus on internal improvements and making things better and more secure, not flashier and more exciting. Then they release the iPhone ECKS-ESS (and, I assume, ECKS-SMACKS, too,) and sure enough, it's new and flashy and emphatically NOT READY FOR PRIME TIME. Apple has all the credibility of a Google telling folks they're not evil at this point.
Apple is really trying to see exactly how much crap their fans will take before leaving their ecosystem.
Our reign has gone on long enough. Indeed. Summon the meteors.
This phone's price is XSessive. I guess so are its bugs.