Yet another iPhone security bug
Just when you thought your iPhone was more secure than ever, you might want to think again. Programmer Karl Kraft's 12-year-old son was the one to uncover the security risk of the iPhone displaying text messages while in emergency call mode. With the iPhone locked with a passcode and text message previews disabled, you can still see an incoming text message while you are in the emergency call mode.
The iPhone should just show the generic "New Text Message" preview, but instead it will show the part of the message (or whole message if it's short enough), and sender information.
You can get the full details on this bug, and screenshots of the iPhone from Karl's blog. Now we must sit and wait for Apple to fix it. Hopefully this won't take as long as implementing copy/paste for the iPhone.
[via Ars Technica]
![TUAW [Cafepress]](http://www.blogsmithmedia.com/www.tuaw.com/media/tuaw-cafepress-promo.png)
Reader Comments (Page 1 of 1)
MannyV said 5:13PM on 10-06-2008
Heck, my 19 month old daughter can cause the iPhone to black-screen. Locking and unlocking the iPhone brings the display back to life.
Not sure how either one is a 'security' bug. I think the reported one is more of a privacy problem than a security bug.
Reply
Matthew said 5:21AM on 10-07-2008
I agree. To say that someone being able to read a few lines of a text message in extreme situations is a "security bug" is bogus. A bug, yes, but it is not like someone is getting any personal information out of it.
Matthew
ars_workerbee said 5:13PM on 10-06-2008
This is not a bug, this is why there is the preference to "show SMS preview" in the settings.
Reply
oliverhart77 said 12:12AM on 10-07-2008
where is this setting in settings? I do not have a "SMS" setting on mine. And no im not a noob.
chris said 5:26PM on 10-06-2008
This is definitely not a security bug. Privacy yes, but "security bug" implies that it allows some form of unauthorized control over the system.
Don't spread FUD.
Reply
Redd Starrs said 5:34PM on 10-06-2008
Security bug? Sure, the guy himself calls it that, but yesterday Gruber called it a "privacy hole," which seems more truthy.
Reply
Allen Wilson said 5:35PM on 10-06-2008
This is NOT a bug. It may be a guide to define how exactly this feature works. This option was more of convenience, if someone has physical access to your phone, NOTHING is secure!
And what are people sending via SMS that would reveal your whole lives history and credit report?
You guys are getting way to dramatic with your titles.
Reply
grull27 said 5:59PM on 10-06-2008
I just tested it out and it didn't work. When I went to Emergency Call, the new text message did not show up. Woot! Security for me!
Reply
figueroanievesv1 said 6:09PM on 10-06-2008
This is not a bug.
Reply
TouchPodium.cm said 6:20PM on 10-06-2008
How is _this_ Breaking News?...
Reply
BldrSun said 7:04PM on 10-06-2008
Not only is this not a security issue nor a bug, Cory's decision to conclude with copy/paste snark makes this one of the most annoying TUAW posts I've read in a long time.
Anyone else getting tired of TUAW's and Engadet's penchant for harping about copy/paste? Alright already... We get it! You want copy/paste. Now let's move on, please. I don't need to read about it over and over again.
Reply
framerate said 7:07PM on 10-06-2008
As it was said, this can be disabled in the options.
Reply
Micheeee said 2:11AM on 10-07-2008
which apparently didn't work in karls case (see his blogpost)
Anyway, a rather minor flaw imho
Snap said 7:14PM on 10-06-2008
FUD. Next.
Reply
kakapo said 7:37PM on 10-06-2008
This is only a security bug if you are Shane Warne and you have oh so too many SMSs from your current honey!
For the rest of us, all you need to do is set your preferences and then set a locking code if you need. My iPhone is never out of my sight or hands, (OK - it is when I am sleeping - but that is another story) so I can't see this as a problem.
If you don't know who Shane Warne is then you will realise that you really do not know sports on a global basis.
To the rest of us that do, we will get a great laugh at the inside joke. ;)
Reply
Roger said 10:32PM on 10-06-2008
"Your iPhone is insecure." My iPhone feels pretty self assured of itself, maybe it can talk to that iPhone, help it out.
Reply
Jash Sayani said 11:14PM on 10-06-2008
These small things keep coming up... Apple has not given importance to such minor details..... which he must! Hope its fixed in firmware 2.2 and none of the older bugs re-appear !!!!
Reply
antiorario said 3:14AM on 10-07-2008
The real problem here is that a 12-year-old has his own private iPhone, which he's allowed to lock with a passcode from his parents in order to communicate with his "girlfriend."
Ah, where's this world going?
;-)
Reply
PS3 said 3:28AM on 10-07-2008
My first gen iPhone has been the most stable of all mobiles and smart phones I have had over the last 10 years. If you give a phone to a 12 year old, expect trouble!
http://www.simplyfreeiphone.co.uk
Reply
teeth weasel said 9:32AM on 10-07-2008
Cory, I'm not sure what I love more - your inability to understand the things you're posting, or your absolutely impeccable ability to generate FUD out of nothing. Good show!
Reply