{"id":163117,"date":"2019-09-14T11:38:31","date_gmt":"2019-09-14T08:38:31","guid":{"rendered":"http:\/\/ww-vb.mine.nu\/w108\/apple-iphone-11-shock-as-security-exploit-is-confirmed\/"},"modified":"2019-09-14T11:38:34","modified_gmt":"2019-09-14T08:38:34","slug":"apple-iphone-11-shock-as-security-exploit-is-confirmed","status":"publish","type":"post","link":"https:\/\/hameed.nwar.uk\/sa\/apple-iphone-11-shock-as-security-exploit-is-confirmed\/","title":{"rendered":"Apple iPhone 11 Shock As Safety Exploit Is Confirmed"},"content":{"rendered":"<p> [ad_1]<br \/>\n<\/p>\n<div _ngcontent-c15=\"\" innerhtml=\"&lt;p&gt;&lt;br&gt;&lt;\/p&gt;&lt;p&gt;The new &lt;a href=&quot;https:\/\/www.forbes.com\/sites\/gordonkelly\/2019\/09\/12\/apple-iphone-11-pro-vs-iphone-11-pro-max-whats-the-difference-new-iphone-upgrade\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;Apple iPhone 11&lt;\/a&gt; and &lt;a href=&quot;https:\/\/www.forbes.com\/sites\/gordonkelly\/2019\/09\/10\/apple-iphone-11-vs-iphone-11-pro-whats-the-difference-new-iphone-upgrade\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;iPhone 11 Pro&lt;\/a&gt; are available for pre-order now. Not only do the latest iPhones come complete with the all-new iOS 13 operating system, but there's an extra surprise right out of the box. Unfortunately, it's not a pleasant one: the iPhone 11 and 11 Pro will ship with a confirmed security vulnerability in iOS 13 that could allow an attacker to access all stored contact information.&lt;\/p&gt;&lt;p&gt;Security researcher &lt;a href=&quot;https:\/\/twitter.com\/VBarraquito&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;Jose Rodriguez&lt;\/a&gt; has revealed how it is possible to bypass lock screen protection, and access contact information from the target iPhone 11. &lt;\/p&gt;&lt;p&gt;In a September 13 &lt;a href=&quot;https:\/\/twitter.com\/VBarraquito\/status\/1172430471302508544&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;tweet&lt;\/a&gt;, Rodriguez posted a link to a YouTube video with the message &quot;With No Enter the Passcode you can See Contacts info. iOS 13 Feature. Read description please. Will Apple change this feature before the release of iOS 13?&quot; &lt;\/p&gt;&lt;p&gt;You can watch that video of the exploit in action &lt;a href=&quot;https:\/\/www.youtube.com\/watch?v=pW0TTnBCA04&amp;amp;feature=youtu.be&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;here&lt;\/a&gt;.&lt;\/p&gt;&lt;p&gt;Any security issue has to be taken seriously, but not all exploits are equal. The first thing to be said about this one is that it's far from straightforward an attack methodology and requires the attacker to have physical access to the target iPhone. &lt;\/p&gt;&lt;p&gt;For most people, most of the time, that means it's not going to be something to worry about unduly. What's more, once the attacker has their hands on your iPhone 11 (or any iPhone running iOS 13 for that matter) it still requires a call or FaceTime session from another phone and a relatively complex series of responses. It isn't an attack that can be carried out in a few seconds if you've left your iPhone on the table while popping to the loo!&lt;\/p&gt;&lt;p&gt;As Apple Insider &lt;a href=&quot;https:\/\/appleinsider.com\/articles\/19\/09\/12\/complex-ios-13-exploit-allows-viewing-of-contacts-without-unlocking-iphone&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;reports&lt;\/a&gt;: &quot; Once the call is placed, the call recipient must opt to respond with a custom message rather than answer the call.&quot; But the complexity of the exploit doesn't stop there as VoiceOver using Siri has to be turned on and off again from the message screen. &quot;Following the toggling of VoiceOver, the user can add to contact field, which allows you to see the contact information of any contact in the phone,&quot; Apple Insider explains.&lt;\/p&gt;&lt;p&gt;Apart from the obvious, keeping hold of your iPhone 11, there is another exploit mitigation method according to The Register. This involves &quot;disabling 'reply with message' in your iDevice's Face ID &amp;amp; Passcode settings,&quot; The Register &lt;a href=&quot;https:\/\/www.theregister.co.uk\/2019\/09\/12\/apples_ios_lock_workaround\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;reports&lt;\/a&gt;, &quot;under the 'allow access when locked' section. This feature is, of course, enabled by default in iOS 13.&lt;\/p&gt;&lt;p&gt;I have approached Apple for a statement and will update this article if and when one is received. However, The Register and other sources suggest that the lock screen issue will be fixed in the iOS 13.1 update which is due to be released September 30. However, that does mean that iOS 13 as released September 19 and running on the iPhone 11 and iPhone 11 Pro released September 20 will still be vulnerable to this somewhat convoluted attack mode.&lt;\/p&gt;&lt;p&gt;&lt;br&gt;&lt;\/p&gt;&lt;p&gt;&lt;a href=&quot;https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/09\/11\/apple-tops-phishing-search-list-microsoft-conspicuous-by-its-absence\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;Apple Tops Phishing List, Microsoft Conspicuous By Its Absence&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;&lt;a href=&quot;https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/08\/26\/this-apple-imessage-hack-let-google-access-iphone-photos\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;This iPhone Hack Let Google Access iOS Device Files&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;&lt;a href=&quot;https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/08\/10\/apples-iphone-faceid-hacked-in-less-than-120-seconds\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;Apple's iPhone FaceID Hacked In Less Than 120 Seconds&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;&lt;a href=&quot;https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/08\/07\/whatsapp-hack-attack-changes-your-messages-and-facebook-doesnt-seem-to-care\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;WhatsApp Hack Attack Can Change Your Messages&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;&lt;a href=&quot;https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/07\/30\/iphone-users-warned-as-malware-developers-and-the-u-s-supreme-court-target-apple\/&quot; target=&quot;_blank&quot; class=&quot;color-link&quot;&gt;iPhone Users Warned As Malware, And The U.S. Supreme Court, Targets Apple&lt;\/a&gt;&lt;\/p&gt;&lt;p&gt;&lt;br&gt;&lt;\/p&gt;\">\n<p>The brand new Apple iPhone 11 and iPhone 11 Professional can be found for pre-order now. Not solely do the most recent iPhones come full with the all-new iOS 13 working system, however there&#8217;s an additional shock proper out of the field. Sadly, it is not a nice one: the iPhone 11 and 11 Professional will ship with a confirmed safety vulnerability in iOS 13 that might enable an attacker to entry all saved contact info.<\/p>\n<p>Safety researcher <a href=\"https:\/\/twitter.com\/VBarraquito\" target=\"_blank\" class=\"color-link\" rel=\"noopener noreferrer\">Jose Rodriguez<\/a> has revealed how it&#8217;s doable to bypass lock display safety, and entry contact info from the goal iPhone 11. <\/p>\n<p>In a September 13 <a href=\"https:\/\/twitter.com\/VBarraquito\/status\/1172430471302508544\" target=\"_blank\" class=\"color-link\" rel=\"noopener noreferrer\">tweet<\/a>, Rodriguez posted a hyperlink to a YouTube video with the message &#8220;With No Enter the Passcode you possibly can See Contacts information. iOS 13 Characteristic. Learn description please. Will Apple change this function earlier than the discharge of iOS 13?&#8221; <\/p>\n<p>You&#8217;ll be able to watch that video of the exploit in motion right here.<\/p>\n<p>Any safety concern needs to be taken significantly, however not all exploits are equal. The very first thing to be stated about this one is that it is from simple an assault methodology and requires the attacker to have bodily entry to the goal iPhone. <\/p>\n<p>For most individuals, more often than not, which means it is not going to be one thing to fret about unduly. What&#8217;s extra, as soon as the attacker has their fingers in your iPhone 11 (or any iPhone working iOS 13 for that matter) it nonetheless requires a name or FaceTime session from one other cellphone and a comparatively advanced sequence of responses. It is not an assault that may be carried out in a number of seconds should you&#8217;ve left your iPhone on the desk whereas popping to the toilet!<\/p>\n<p>As Apple Insider experiences: &#8221; As soon as the decision is positioned, the decision recipient should choose to reply with a customized message quite than reply the decision.&#8221; However the complexity of the exploit does not cease there as VoiceOver utilizing Siri needs to be turned on and off once more from the message display. &#8220;Following the toggling of VoiceOver, the person can add to contact area, which lets you see the contact info of any contact within the cellphone,&#8221; Apple Insider explains.<\/p>\n<p>Aside from the plain, maintaining maintain of your iPhone 11, there may be one other exploit mitigation methodology in accordance with The Register. This entails &#8220;disabling &#8216;reply with message&#8217; in your iDevice&#8217;s Face ID &amp; Passcode settings,&#8221; The Register experiences, &#8220;beneath the &#8216;enable entry when locked&#8217; part. This function is, after all, enabled by default in iOS 13.<\/p>\n<p>I&#8217;ve approached Apple for an announcement and can replace this text if and when one is obtained. Nevertheless, The Register and different sources recommend that the lock display concern might be mounted within the iOS 13.1 replace which is because of be launched September 30. Nevertheless, that does imply that iOS 13 as launched September 19 and working on the iPhone 11 and iPhone 11 Professional launched September 20 will nonetheless be susceptible to this considerably convoluted assault mode.<\/p>\n<p>Apple Tops Phishing Listing, Microsoft Conspicuous By Its Absence<\/p>\n<p>This iPhone Hack Let Google Entry iOS Machine Recordsdata<\/p>\n<p>Apple&#8217;s iPhone FaceID Hacked In Much less Than 120 Seconds<\/p>\n<p>WhatsApp Hack Assault Can Change Your Messages<\/p>\n<p>iPhone Customers Warned As Malware, And The U.S. Supreme Courtroom, Targets Apple<\/p>\n<\/div>\n<p><script async src=\"http:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>[ad_2]<br \/>\n<br \/><a href=\"https:\/\/www.forbes.com\/sites\/daveywinder\/2019\/09\/14\/apple-iphone-11-shock-as-security-exploit-is-confirmed\/\">Supply hyperlink <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad_1] The brand new Apple iPhone 11 and iPhone 11 Professional can be found for pre-order now. Not solely do the most recent iPhones come full with the all-new iOS 13 working system, however there&#8217;s an additional shock proper out of the field. Sadly, it is not a nice one: the iPhone 11 and 11 &hellip;<\/p>\n","protected":false},"author":1,"featured_media":163119,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-163117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tie-world"],"_links":{"self":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts\/163117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/comments?post=163117"}],"version-history":[{"count":0,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/posts\/163117\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/media\/163119"}],"wp:attachment":[{"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/media?parent=163117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/categories?post=163117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hameed.nwar.uk\/sa\/wp-json\/wp\/v2\/tags?post=163117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}