Glitch in iPhone Exposes Locked Photos

If you set the clock back on an iPhone running Apple’s iOS 5, it is possible to view all the photos on the phone, even if it’s locked.

The latest version of Apple’s mobile operating system allows users to use the camera on locked iPhone by double-clicking the home button, but also prevents access to the entire photo gallery. To see pictures other than the ones just taken, users have to enter a passcode and unlock the phone.

Canadian researcher Ade Barkah discovered a simple way around this built-in “image jail,” as he called it in a blog posting.

Barkah found that the filter that divides protected images — those that can be viewed only when the phone is unlocked — from unprotected images is based on the timestamp logged when the camera app was opened. Users cannot see photos taken before that point unless they unlock their phones.

“Yet that leads to an immediate hole,” Barkah wrote. “If your iPhone’s clock ever rolls back, then all images with time stamps newer than your iPhone’s clock will be viewable from your locked phone.”

['Corona' Jailbreak Released for Latest Apple iOS]

Barkah tested the vulnerability and found that simply changing the time in the iPhone’s settings was enough to make protected photos viewable.

Although most users have their iPhones’ date and time automatically set by their cellular network, Barkah outlined a few instances in which user error — such as when manually adjusting the clock after crossing time zones — or a software or hardware malfunction could open phones to this exploit. An app that somehow changed the iPhone’s clock could be another source of attack, Barkah said.

Barkah did not write whether he tested this exploit on an iPad running iOS 5, but it would be reasonable to assume that the same would apply.

“The point to all this is that Apple should not rely on a simple time stamp to restrict image access,” he wrote. “Changing the iPhone’s clock — forwards or backwards — should not affect its security.”

Article provided by SecurityNewsDaily, a sister site to Laptopmag.com.


LEAVE A REPLY
Name*
Email* (will not be published)
Website
*Indicates required field
Comments*
Submit Comments

FIND A REVIEW
Laptops
All Product Types Accessories Cars Digital Camcorders Digital Cameras eReaders GPS Laptops MP3 & Video Players Projectors Smartphones Software Storage Tablets / MIDs VoIP Wi-Fi
All Subcategories
All Subcategories All-Purpose Budget Business Desktop Replacement Gaming Multimedia Netbook Nettop Rugged Student Tablet PCs Ultraportable
Brand
Acer Alienware Apple Archos ASUS Averatec BenQ CTL Corp. Dell Digital Storm eMachines Emtec Everex Fujitsu GammaTech Gateway General Dynamics Getac Gigabyte Hercules HP HTC iBuyPower Intel Lenovo MSI Nokia Nvidia OCZ OLPC OQO Origin Panasonic Sager Samsung Sony Sylvania Systemax TabletKiosk Toshiba Verizon Viewsonic Viliv VooDoo Workhorse PC ZT Systems
Minimum Rating
Any Rating Editor's Choice 4.5 Stars 4.0 Stars 3.5 Stars 3.0 Stars
Screen Size
10 11 12 13 14 15 16 17 18 20 4 5 6 7 8 9
Resolution
1024x576 1024x600 1024x768 1200X800 1280 x 720 1280x1024 1280x768 1280x800 1366x678 1366x768 1440x1050 1440x900 1600x768 1600x900 1680x1050 1680x945 1920x1080 1920x1200 800x400 800x480
Weight Range
10.1 - 12.0 pounds 12.1 - 14.0 pounds 14.1 - 16.0 pounds 2 lbs 2 pounds and under 2+ lbs 2.1 - 4.0 pounds 4.1 - 6.0 pounds 6.1 - 8.0 pounds 8.1 - 10.0 pounds Over 16 pounds Under 2 pounds
more options
SUBSCRIBE