'Don't Allow Changes' option in iOS 6 easily bypassed
updated 12:18 pm EST, Fri February 15, 2013
Vulnerability linked to bug, source says
A "Don't Allow Changes" option introduced alongside iOS 6 is currently broken, a report says. The feature is supposed to allow people to block changes to an account linked to an iOS device. It's particularly important for schools and other institutions that need to ensure a device is tied to a particular account, and/or can't download unauthorized apps.
While toggling the option does block account changes under Settings, people can still switch accounts via the iOS iTunes and App Store apps by scrolling to the bottom of their splash pages. Apple tells a 9to5Mac source that the issue is indeed a bug, and that a temporary fix involves turning off the ability to install apps. This prevents organizations from pushing apps to devices, though, and users from downloading updates to software that's already installed.
The vulnerability is the second to be exposed in two days. A lockscreen bypass was made public yesterday, which should be solved in iOS 6.1.2.
