AAPL Stock: 124.98 ( + 0.55 )

Printed from

iPhone 2.x vulnerable to easy passcode hack?

updated 11:20 am EDT, Wed August 27, 2008

iPhone 2.x passcode hack

The iPhone 2.0 firmware is vulnerable to an unusually easy security bypass, a report claims. Updated iPhones have the option of a four-digit passcode, which in theory should restrict all access to the device's data. The vulnerability manifests through the "Emergency Call" button on the passcode entry screen, meant to allow simple dialing functions regardless of whether the code is remembered.

Simply by selecting Emergency Call and double-tapping the Home button, iPhone users can bring up a favorite contacts list, displaying phone numbers, e-mail addresses and websites. From here it is possible to launch most major iPhone functions, including Mail, SMS, Google Maps and the Safari web browser.

The issue is said to be particularly troublesome because it was previously fixed in the v1.1.3 firmware, having been identified as a known bug by the time of v1.1.2. The only known fix for v2.x is to remove any sensitive favorites.

by MacNN Staff





  1. eggman

    Joined: Dec 1969


    "A report claims?"

    You don't have to hedge an article with noncommittal language like "a report claims" when you can verify the claims yourself by just turning on your iPhone and testing it out for yourself.

    If you had done so, you would have found that the claims are absolutely true.

    However, you're wrong when you say that the only known fix in 2.0 is to remove sensitive favorites... because it can be fixed by reprogramming the Home key double-click to go to the Home page instead of the favorites page.

  1. Constable Odo

    Joined: Dec 1969


    Sounds like the...

    proverbial key under the doormat type of security. Well, nobody wants to get completely locked out of their own house. Let's remove all the locks and leave it up to human honesty not to go poking where one doesn't belong.

    Comment buried. Show
  1. testudo

    Joined: Dec 1969


    Re: A report claims

    when you can verify the claims yourself by just turning on your iPhone and testing it out for yourself.

    Well, that's fine, IF YOU OWN AN IPHONE! If you're like 99.99% of the world, you probably don't, and, therefore, can't verify the story.

  1. QualleyIV

    Joined: Dec 1969



    eggman was obviously referring to the AUTHOR of the story. Maybe you should spend a little more time reading and a little less time flaming...

  1. chadpengar

    Joined: Dec 1969


    re: testudo

    Someone at MacNN probably has access to an iPhone.

    Comment buried. Show
  1. testudo

    Joined: Dec 1969


    re: testudo

    Right, and the author of the story may actually not have an iPhone (not sure why someone would assume that MacNN has access to one).

    And if you DON'T HAVE AN IPHONE, you may likely not care!

    Unless you run a news website and are posting stories, then you would care, even if you didn't own the product.

  1. UberFu

    Joined: Dec 1969


    and in other news...

    Testudo opens his/her mouth simply to hear him/her self speak.

Login Here

Not a member of the MacNN forums? Register now for free.


Network Headlines


Most Popular


Recent Reviews

Griffin Twenty

A few years ago Griffin launched the original Twenty, a small digital amp that used an AirPort Express to turn any set of passive spea ...

Seagate Wireless

It seems like no matter how much internal storage is included today's mobile devices, we, as users, will always find a way to fill th ...

Brother HL-L8250CDN Color Laser Printer

When it comes to selecting a printer, the process is not exactly something most people put a lot of thought into. Printers are often t ...


Most Commented