iCloud activation lock vulnerability found

Forums › Apple iOS and devices › iCloud activation lock vulnerability found

CYaBro

4582 posts

Uber Geek

ID Verified

Trusted

#205959 4-Dec-2016 18:17

Seems these guys have found a way to bypass the activation lock check on an iOS device, using a buffer overflow.

https://www.vulnerability-lab.com/get_content.php?id=2018

Haven't tested it myself yet.

Opinions are my own and not the views of my employer.

tardtasticx

3075 posts

Uber Geek

#1682188 4-Dec-2016 22:32

Is there any video/proof showing this trick has led to someone being able to use the phone and completely remove/disable iCloud Activation Lock? To be honest it seems more like a little glitch more than a "bypass".

CYaBro

4582 posts

Uber Geek

ID Verified

Trusted

#1682197 4-Dec-2016 23:15

tardtasticx:
Is there any video/proof showing this trick has led to someone being able to use the phone and completely remove/disable iCloud Activation Lock? To be honest it seems more like a little glitch more than a "bypass".

YouTube link in the text on the page I posted.
Apparently it does work and gives you full access to the device and you can then use your own iCloud account on it.
Who knows what will happen in the future, perhaps Apple will still be able to tell which devices are linked to more than one account and lock them again.
I'm sure they will fix the buffer overflow issue soon and all it would take is for them to limit the number of characters you can enter for those fields.

Opinions are my own and not the views of my employer.

mattwnz

20141 posts

Uber Geek

#1682205 5-Dec-2016 01:00

What about older devices, which don't get ios updates? I did watch a video about this a day or so ago on youtube and it is a concern..

CYaBro

4582 posts

Uber Geek

ID Verified

Trusted

#1682214 5-Dec-2016 06:51

mattwnz:
What about older devices, which don't get ios updates? I did watch a video about this a day or so ago on youtube and it is a concern..

No reason why Apple can't put out a point update for those older iOS versions.

Opinions are my own and not the views of my employer.

danza

112 posts

Master Geek

#1685937 11-Dec-2016 07:02

Oh no, looks like it's really going to hurt those people who uses their giant iPads outside to take photos and making calls.

But yeah seems to be only affecting iPads, which is probably less likely to get stolen compare to something like the iPhone.
http://arstechnica.com/apple/2016/12/buffer-overflow-exploit-can-bypass-activation-lock-on-ipads-running-ios-10-1-1/