Access Contacts List From Locked iPhone With Newly Discovered Security Flaw

Yet another security flaw on the iOS 4.1 has been discovered. And this time it will let users bypass the mandatory input of passcode to let users access private details like contacts list, recent calls, voicemails,etc. The security bug will also let users send emails and MMS messages without having to know the passcode. How […]

Yet another security flaw on the iOS 4.1 has been discovered. And this time it will let users bypass the mandatory input of passcode to let users access private details like contacts list, recent calls, voicemails,etc. The security bug will also let users send emails and MMS messages without having to know the passcode.

How do you do this? Simple. Users simply have to tap on the ‘Emergency call‘ option in the Passcode window and once here, dial a non-emergency number like #### followed by a tap on ‘Send‘ and quickly followed by pressing the iPhone lock key. This will force the user on to the iPhone’s phone application from where all these private details can be accessed.

Check out a video demonstration of the bug.

Do not expect an immediate resolution of this bug though. Apple is expected to release the new iOS 4.2 early next month and it is possible that the bug is attended to only in this update. Or probably later.