iOS 7 Activation Lock bypass discovered, protect yourself with Touch ID or Passcode

[iMore.com]

A bug has been found in iOS 7 that allows a an attacker with physical control over a lost or stolen iPhone to get around Activation Lock and gain access to the device. Unfortunately, the method for circumventing Activation Lock has been made public. However, the bypass process requires the attacker have access to an unlocked device, and be able to access the device after a reboot, so it can be thwarted by simply having a Passcode enabled (either by itself or as part of Touch ID).

Full story from the iMore Blog...

 

[taz323]

I don't think this is gonna be much fun.

 

[Septembersrain]

Oh lord. Really?

Here comes the hoards of people asking us how to do this...


?Sent from the colored one using Tapatalk?

 

[Haalcyon]

Um, can you guys tell me how I can use this to activate the phone I just found?


Sent from my MF003LL/A

 

[Haalcyon]

LOL...I just wanted to see how it'd feel.


Sent from my MF003LL/A

 

[Septembersrain]

LOL...I just wanted to see how it'd feel.


Sent from my MF003LL/A

So. How DID it feel?


?Sent from the colored one using Tapatalk?

 

[Haalcyon]

It...it made me feel so...so dirty.


Sent from my ME308LL/A ️

 

[Just_Me_D]

It...it made me feel so...so dirty.


Sent from my ME308LL/A ️

LMAO...

 

[Septembersrain]

It...it made me feel so...so dirty.


Sent from my ME308LL/A ️

*Hands you her hand sanitizer*

Wipe your hands of that, you're too awesome to be that kind of dirty.


?Sent from the colored one using Tapatalk?

 

[Haalcyon]

*Hands you her hand sanitizer*

Wipe your hands of that, you're too awesome to be that kind of dirty.


?Sent from the colored one using Tapatalk?

Thank you, thank you. *Cleans hands*


Sent from my ME308LL/A ️

 

[acerace113]

I thought you need to set a passcode when you have find my iPhone turned on...


Sent from my iPhone 5S or 5th gen iPod Touch using Tapatalk

 

[Just_Me_D]

iOS 7 Activation Lock bypass discovered, protect yourself with Touch ID or Pa...

I thought you need to set a passcode when you have find my iPhone turned on...


Sent from my iPhone 5S or 5th gen iPod Touch using Tapatalk

You need to know the Apple ID and associated passcode of the person whose device you're trying to locate. In this regard, however, a person need to have physical access to your device, but if your device has a lockscreen passcode, this flaw is useless because the person doesn't have access to the settings menu to take advantage of the flaw.

 

[acerace113]

Re: iOS 7 Activation Lock bypass discovered, protect yourself with Touch ID or Pa...

You need to know the Apple ID and associated passcode of the person whose device you're trying to locate. In this regard, however, a person need to have physical access to your device, but if your device has a lockscreen passcode, this flaw is useless because the person doesn't have access to the settings menu to take advantage of the flaw.

But when you setup find my iPhone aren't you required to set a passcode lock on the phone anyways?


Sent from my iPhone 5S or 5th gen iPod Touch using Tapatalk

 

[iOS Gravity]

Re: iOS 7 Activation Lock bypass discovered, protect yourself with Touch ID or Pa...

You need to know the Apple ID and associated passcode of the person whose device you're trying to locate. In this regard, however, a person need to have physical access to your device, but if your device has a lockscreen passcode, this flaw is useless because the person doesn't have access to the settings menu to take advantage of the flaw.

Can't you just restore it after you get access to the passcode screen?

 

[iOS Gravity]

Re: iOS 7 Activation Lock bypass discovered, protect yourself with Touch ID or Pa...

Can't you just restore it after you get access to the passcode screen?

Never mind. I don't want to give anyone any ideas.

 

[iOS Gravity]

Um, can you guys tell me how I can use this to activate the phone I just found?


Sent from my MF003LL/A ��

How dare you steal a poor innocent iOS device that you "found".

 

[Just_Me_D]

But when you setup find my iPhone aren't you required to set a passcode lock on the phone anyways?

No sir. Apple instituted the Find My iPhone app as a standalone feature, and this is the reason you have to download the app in order to use it without having to login to the iCloud website. Anyway, with iOS 7+, if you choose to enable the Find My iPhone feature for the location services option during the device setup, the activation lock is automatically set.

 

[Haalcyon]

How dare you steal a poor innocent iOS device that you "found".

Uh...uh...but I...uh...found it...uh...onmydoorstep with a note...that said I could have it.

via that gPad

 

[Septembersrain]

Uh...uh...but I...uh...found it...uh...onmydoorstep with a note...that said I could have it.

via that gPad

I wrote that note!

On a serious one though, if you've got find my iPhone enabled, does this help close this flaw?


?Sent from the colored one using Tapatalk?

 

[kataran]

It seems thats the flaw bypass have a password to protect them from getting in to disable it


iMore Ambassador -iPhone 5s