Hi all, I just happened to be browsing apple dev center trying to figure out some details on the bonjour service. I'm not sure I like it running on my network so I wanted to know more... Found the apple security site which lists their known flaws and security bugs. Scrolling through happened to see this one, remembered this post and here ya all go:
Impact: An unauthorized user may bypass the Passcode Lock and launch iPhone applications
Description: The Passcode Lock feature is designed to prevent applications from being launched unless the correct passcode is entered.
An implementation issue in the handling of emergency calls allows users with physical access to an iPhone to launch an application without the passcode. This update addresses the issue through an improved check on the state of the Passcode Lock.
Slashdot Mirror
Hi all, I just happened to be browsing apple dev center trying to figure out some details on the bonjour service. I'm not sure I like it running on my network so I wanted to know more... Found the apple security site which lists their known flaws and security bugs. Scrolling through happened to see this one, remembered this post and here ya all go:
http://support.apple.com/kb/HT1312?viewlocale=en_US
or if you prefer:
*
Passcode Lock
CVE-ID: CVE-2008-0034
Available for: iPhone v1.0 through v1.1.2
Impact: An unauthorized user may bypass the
Passcode Lock and launch iPhone applications
Description: The Passcode Lock feature is
designed to prevent applications from being
launched unless the correct passcode is entered.
An implementation issue in the handling of
emergency calls allows users with physical access
to an iPhone to launch an application without the
passcode. This update addresses the issue through
an improved check on the state of the Passcode
Lock.