iPhone Bug Leaves Emails Vulnerable - kcentv.com - KCEN HD - Waco, Temple, and Killeen

iPhone Bug Leaves Emails Vulnerable

Posted: Updated:

(CNN) -- German security expert Andreas Kurtz has discovered that anyone in possession of your Apple device might be able to access files sent to you via email, even if your phone is locked with a passcode.

It's a major security flaw, but it's worse for people with older iPhones and iPads. It's less bad for folks with newer ones.

Since the release of the iOS 4 software in 2010, Apple has assured customers that files are guarded with an added layer of security. When you lock your phone, the email attachments in your phone are supposed to be individually locked too. Here's why: Even if hackers manage grab your phone, hook it up to a computer and bypass the passcode that locks your entire device, they still aren't supposed to be able to read the files. Email attachment files are a jumbled mess of letters and numbers unless you unlock the whole phone.

But that's not actually happening, Kurtz found. The files aren't encrypted that way. He was able to plug an iPhone 4 into a computer, go around the passcode and see those files.

There are several methods available to hackers allowing them to access an iPhone's files even when it is locked and protected with a passcode. In theory, those files should be encrypted -- appearing as a jumbled mess of numbers and letters. But Kurtz found that email attachments aren't, in fact, encrypted. Kurtz was able to access email attachments on a locked iPhone 4 -- just by plugging it into a computer and using some passcode-bypassing software.

Importantly, that method won't work on newer devices, because they don't allow computers to access raw files. But the software flaw is still present on new devices, such as the iPhone 5S and iPad 2. That means that if hackers figure out how to reach those files, they'll find them unencrypted.

Kurtz, the co-founder of NESO Security Labs in Heilbronn, Germany, tested for the flaw in an iPhone 4, iPhone 5s and iPad 2. He first reported the findings on his personal blog on April 23.

Kurtz said he reached out to Apple and the company told him it was already aware of the problem. But when the company issued a software update to iOS 7.1.1 and did not include a fix, Kurtz posted his findings.

"Considering the long time iOS 7 is available by now and the sensitivity of email attachments many enterprises share on their devices, I expected a near-term patch," he wrote.

Apple told CNN it plans to issue a fix in a future software update, but the company would not say when that would happen.

  • Latest NewsMore>>

  • Google Helps Nab Child Porn Suspect in Houston

    Google Helps Nab Child Porn Suspect in Houston

    Thursday, July 31 2014 5:07 PM EDT2014-07-31 21:07:42 GMT
    Google helped police catch a man suspected of having child pornography.Investigators in Houston say Google detected explicit images of a young girl in an e-mail that John Henry Skillern was sending to a friend. The internet giant then alerted authorities. Detectives say without that alert they would not have had access to what was inside the e-mail. Skillern has been charged with one count of possession of child pornography and one count of promotion of child pornography. His bond w...More >>
    Google helped police catch a man suspected of having child pornography.Investigators in Houston say Google detected explicit images of a young girl in an e-mail that John Henry Skillern was sending to a friend. The internet giant then alerted authorities. Detectives say without that alert they would not have had access to what was inside the e-mail. Skillern has been charged with one count of possession of child pornography and one count of promotion of child pornography. His bond w...More >>
  • 16 Bell County Daycares Under Investigation

    16 Bell County Daycares Under Investigation

    Thursday, July 31 2014 5:00 PM EDT2014-07-31 21:00:33 GMT
    (KCEN) -- A local mom who asked to remain anonymous is outraged by a child care center in Killeen. "It seemed like a loving environment. They greeted me, they greeted my daughter," she said about Kids of the King daycare in Killeen. Within weeks, she started seeing things she didn't like during drop-off and pick-up. "I would notice that there were kids everywhere, twenty kids running around, all different ages." After doing research, she was shocked to find out the daycare was investigated b...More >>
    (KCEN) -- A local mom who asked to remain anonymous is outraged by a child care center in Killeen. "It seemed like a loving environment. They greeted me, they greeted my daughter," she said about Kids of the King daycare in Killeen. Within weeks, she started seeing things she didn't like during drop-off and pick-up. "I would notice that there were kids everywhere, twenty kids running around, all different ages." After doing research, she was shocked to find out the daycare was investigated b...More >>
  • LTG Milley Moves On To Fort Bragg, Fort Hood To Get New Commanding General

    LTG Milley Moves On To Fort Bragg, Fort Hood To Get New Commanding General

    Thursday, July 31 2014 4:25 PM EDT2014-07-31 20:25:58 GMT
    Fort Hood, TX -- Lt. Gen. Mark A. Milley, commanding general of III Corps and Fort Hood, was confirmed for promotion to general and assignment as the commanding general of United States Army Forces Command, Fort Bragg, N.C., on July 24.Maj. Gen. Sean B. MacFarland, commanding general of 1st Armored Division and Fort Bliss, was also confirmed for promotion to lieutenant general and assignment as the III Corps and Fort Hood commanding general on July 24.The III Corps change of command between M...More >>
    Fort Hood, TX -- Lt. Gen. Mark A. Milley, commanding general of III Corps and Fort Hood, was confirmed for promotion to general and assignment as the commanding general of United States Army Forces Command, Fort Bragg, N.C., on July 24.Maj. Gen. Sean B. MacFarland, commanding general of 1st Armored Division and Fort Bliss, was also confirmed for promotion to lieutenant general and assignment as the III Corps and Fort Hood commanding general on July 24.The III Corps change of command between M...More >>
Click for Local Doppler Radar
Powered by WorldNow
All content © Copyright 2000 - 2014 WorldNow and KCEN. All Rights Reserved. Users of this site agree to the Terms of Service, Privacy Notice/Your California Privacy Rights, and Ad Choices.