A new bug has been discovered in iOS 7 that lets anyone make a call from your iPhone even if you've set a lockscreen passcode, reports Andy Greenberg for Forbes.
The bug was discovered by Karam Daoud and it couldn't be any simpler.
All you have to do is dial a number from the emergency call screen and keep tapping the call button until you cause a crash which displays the Apple logo. Once that happens, your iPhone will call the number in the background and when the app returns the call duration will be displayed.
We've confirmed this works as described; however, we had to repeatedly tap the Call button for about 30 seconds.
This is the second security related bug that has been discovered in iOS 7 in past few days
To perform the technique, the user's device must have Control Center enabled on the Lockscreen. First, launch the Timer app from Control Center then press and hold the power button until the power slider appears. As you tap cancel, double press the Home button to bring up the Multitasking switcher. Thankfully, the only app that can be switched to is Camera; however, tapping the last photo taken thumbnail at the bottom left will bring up the entire camera roll. Then tapping any photo will let you email, tweet, or share from the accounts that have been setup on the device.
You can see the technique demonstrated in the video below. We've tried it and verified that it does indeed work as described.
[ame=http://www.youtube.com/watch?v=tTewm0V_5ts&feature=player_embedded]How to get full access to photo gallery bypassing the passcode on any iDevice with iOS7 final. - YouTube[/ame]
[/FONT]
