As long as Lock Screen is tasked to provide both security and convenience, we're going to continue to find cases where the former latter compromises the former. That it's becoming increasingly complex and almost arcane to find the compromises is s a good thing. Case in point, the latest one found on iOS 12 for devices up to and including iPhone X and iPhone X Max.
With physical access to the locked device, the attacker first asks Siri to activate VoiceOver, sleeps the device with the Side button, and then calls the iPhone using another device. Once the call screen shows up, the attacker taps the Message button, opts to create a custom message, and then taps the plus (+) icon in the top right.
Next, on the other phone, the attacker sends a text or iMessage to the target iPhone, whose screen is then double-tapped when the message notification appears. This causes an odd behavior in the UI, since it highlights the plus icon underneath.
After a short wait, the screen goes white and the notification disappears, but the VoiceOver's text selection box is apparently still tappable and can now be used to access the Messages interface. Following multiple screen swipes, the VoiceOver is heard to say "Cancel," which reveals the original Messages screen.
Adding a new recipient to the message and selecting a numeral from the virtual keyboard then reveals a list of recently dialed or received phone numbers and contacts. Further, if one of the numbers or contacts includes an info ("i") button, disabling VoiceOver and tapping the button shows the contact's information. Performing a 3D Touch action on the contact also brings up call and message options, along with options to Add to Existing Contact or Create New Contact.
There's a similar one for camera roll. Since an attacker would need physical access to a device to even begin to attempt to trigger the exploit, and since disabling Siri on the Lock screen prevents it completely, there's nothing for most people to worry about right now. We just need to wait for Apple to include the fix in the next update, as always.
Hit the link above for the full story and video.
We may earn a commission for purchases using our links. Learn more.
Apple's market cap surpasses value of Germany's entire DAX index
Apple's share price has jumped in pre-market trading, pushing Apple's market cap value past that of Germany's entire DAX index.
Dropbox for iPhone and iPad has been updated to support dark mode
Popular cloud storage app Dropbox has now updated its iPhone and iPad app to support dark mode.
iPhone 11 was the best seller each and every week of the holiday quarter
Apple held its quarterly earnings call yesterday and it turns out tons of people bought iPhone 11.
Keep your hands free and your eyes on the road with a magnetic car mount!
There's likely no easier car mount solution for your phone than a magnetic mount. These are the best of the best!