An Indian security researcher has
discovered a bug that allows one to bypass Apple’s activation lock in its iOS
10.1 version, according to a media report. Hemanth Joseph, resident of Kerala,
succeeded in bypassing the activation lock of an iPad he had bough online by
exploiting a weakness in the iOS device setup process. When Joseph was asked to
select a Wi-Fi network, he chose ‘other network’ and selected WPA2-enterprise
as the type of network to connect to,
that gave him three input fields to fill – name, username and password. Upon testing
he came to know that there is no character restriction in those fields and he
typed thousands of characters than what iOS could handle. This caused the iPad
to freeze, following which he locked the device by closing Apple’s magnetic
Smart Cover over the screen. After opening the cover, the device was at the
same screen, but as few seconds passed by, it crashed to iOS home screen. This made
Joseph bypass the activation lock and to have full access to the iPad. The bug
discovered by Joseph was reportedly fixed in an iOS update last month. Researchers
at a US-based lab had earlier discovered another bug that allowed one to break
the Apple lock.
No comments:
Post a Comment