iPhone Security Hole Lets You Make Calls When The Phone Is Locked
It seems like there's a huge bug in iOS 4.1 for iPhone: with a combination of sleep / power button and a fake emergency call, it is possible to access the iPhone's contact list and phone keypad even if the device is locked.
Context & Ripple Effects
The iPhone had already faced reports of a flaw that could enable device takeover in 2007 and a separate warning about private-data exposure in 2008. The iOS 4.1 issue matters because it compromises the lock screen itself—the control users rely on to keep contacts and dialing unavailable to anyone holding the handset.
First-order effects
- iPhone owners running iOS 4.1 cannot rely on a locked handset to keep their contacts and keypad inaccessible, while Apple faces immediate pressure to close the bypass.
Second-order effects
- The failure makes Apple’s software correction cycle part of the iPhone’s security proposition: users must judge the lock feature by the reliability of the OS release, not merely whether it is enabled.
Third-order effects
- If security flaws continue to span device takeover, data exposure, and lock-screen access, smartphone competition will increasingly hinge on sustained OS maintenance alongside hardware features.
The trend: Smartphone security is becoming an operating-system trust issue, with basic access controls making the vendor’s patch discipline a competitive concern.