Huge Security Hole in iOS 5.1

If you set the Require Passcode to Immediately in Settings>General>Passcode Lock>Require Passcode>Immediately the iPhone cannot be accessed even if the camera was opened accidentally and subsequently neither could your photos as a message would appear stating Your iPhone is Locked.

Mettur Man wrote:

I updated my 4s to iOS 5.1

Noticed that to use the camera when it is locked, I need to swipe it up and the camera app comes up.

Once I am in the camera app, it behaves as if I started the camera app in the normal mode. Meaning I can access EVERYTHING. All I have to do is press the home button, bingo, I get all the apps, etc.

Remember, I never typed in my password to get to the camera. Now I have full access to the entire phone.

This is a huge security hole. I hope Apple fixes this immediately. There is no way for me to get back to old iOS 5.0x so I am stuck with this security hole.

The way it is working is correct and by-design due to the way you have your passcode set-up. Set your passcode to 'Immediately' if you want to avoid this.

Are you sure your phone is acutally locked?

Just becuase you see the slide to unlock screen doesn't necessarily mean that enough time has elpased for the passcode requirement to kick in.

Matt

To add to Huntress response I have my passcode set to after one min, after swiping the camera and hitting the home button I have to enter my passcode. also while in the camera app and I take a pic and then tap on the picture on the bottom left to view - i get a message saying that my phone is locked.

So no securtiy issue. Do you have a passcode set?

I have mine set to 1 minute and it doesn't ask for my passcode if I access the camera and press the home button (before the 1 minute is up).

This is the way it should work.

after I access the camera and then change my mind and hit the home key it will take me to the passcode screen.

IG SECURITY ISSUE WITH THE LOCK SCREEN CAMERA BUTTON

I am having the same issue the the Lock Screen and the Camera.

When I installed the new iOS release 5.1 for my iPhone 4 it added a Camera Button on my lock screen. It appears this feature cannot be disabled. If I use the Passcode Lock feature to lock my iPhone the camera can still be accessed without entering a password. This allows anyone to quickly ad photos to my camera without my permission.

Has anyone found a resolution for this? Is it possible for me to downgrade to a previous version of O/S until Apple resolves this security problem?

Thanks in advance,

Big-fish

Please let me know who can help me with this.

Thanks in advance for your help.

Mark

bbfc wrote:

I have mine set to 1 minute and it doesn't ask for my passcode if I access the camera and press the home button (before the 1 minute is up).

This is the way it should work.

Um... no, it won't. You have to wait for the timeout to expire before it will prompt for the passcode again, no matter what.

KiltedTim wrote:

Um... no, it won't. You have to wait for the timeout to expire before it will prompt for the passcode again, no matter what.

Maybe re-read bbfc's post, you two are saying the same thing 😉

Mark,

The best thing you can do is to leave feedback for Apple here.

http://www.apple.com/feedback/iphone.html

In the meantime, if you really want to lock down the camera, you'll need to use Settings>Restrictions to do so.

Matt

big-fish wrote:

This allows anyone to quickly ad photos to my camera without my permission.

Has anyone found a resolution for this? Is it possible for me to downgrade to a previous version of O/S until Apple resolves this security problem?

If you're worried about someone picking up your phone and taking pictures with it without your authorization, then the only security issue here is you not keeping an eye on your phone, or letting people that shouldn't be trusted use your phone.

This is not an iOS security issue in any way, and no you can't change this behavior or downgrade the iOS.

You can quickly delete the picture also. They can access your camera and nothing else if you have a passcode set. Why would you let someone use your phone without your permission.

Thanks for some of your additional Password suggestions. I will return home later tonight and will give all of them a try.

Regarding your question about letting someone use my phone without my permission. I am concerned about someone using my phone without my permission. Just like I am concerned about someone entering my house without my permission. I don't want anyone in either one.

Thanks again for your great suggestions.

Regards

The Huntress wrote:

If you set the Require Passcode to Immediately in Settings>General>Passcode Lock>Require Passcode>Immediately the iPhone cannot be accessed even if the camera was opened accidentally and subsequently neither could your photos as a message would appear stating Your iPhone is Locked.

That did the trick! Thanks, Huntress! 😀

You're welcome. Glad it helped someone.