The Apple's password protection can be circumvented with the touch of a finger:
iPhone Password Flaw Discovered
To quote:
Circumventing the password involves the use of the device's "emergency call" keypad and amounts to only a couple of taps on the iPhone's multitouch screen...
Once the emergency call keypad is accessed through the passcode entry screen, a person only needs to double tap the home button, which takes the user to the iPhone's favorites section. From there, a person gets full access to the device, including applications, contact lists, and e-mail.
The apparent flaw, however, has a simple fix. Through the iPhone's "settings" option, a person only has to disable double tapping on the home button to make the device secure once again, users reported.
Configuration saves the day!! Whew.
Now all we have to do is include this setting as part of our protection frameworks [I'm thinking a CIS iPhone security benchmark at the very least] and comunicate to the 4 million plus iPhone users world-wide how to correct what Apple forgot to. Maybe even a Secure Mobile Device Configuration Act of 2009 (and a similar European law) which makes users liable for insufficiently protecting personal information of friends, family, and business associates by not correctly configuring their iPhones.
It's a simple fix, really.
Comments