Your iPhone Passwords Can Be Stolen In Under Six Minutes

[travelin cat]

Researches in Germany have found a way to access all of the passwords stored on your iPhone in under six minutes. This new hack circumvents the lock screen, so that extra bit of protection you thought you had, doesn't really exist:

Among passwords that could be revealed were those for Google Mail as an MS Exchange account, other MS Exchange accounts, LDAP accounts, voicemail, VPN passwords, WiFi passwords and some App passwords

[pcworld.com...]

[bateman_ap]

Wow, that is pretty huge for the banks, and a reason for their IT depts to keep them on Crackberrys.

I suppose it's hackers going after the biggest install base...

[Ocean10000]

They forgot to mention that it requires the phone to be jailbroken before they can do it.

[bateman_ap]

Ocean10000, why does that matter? The jailbreaking is just part of the hack. It doesn't have to be jailbroken before it's locked

[frontpage]

This hack also includes the IPAD.

Researchers from German engineering and research firm Fraunhofer tested the hack on an iPhone 4 and iPad 3G running iOS 4.2.1

[Propools]

I wonder if that's why Google has come out with this [googleblog.blogspot.com].

My comment on Matt Cutts blog post [mattcutts.com]

This is a “must have” for power users…… and those who really care about the security of their information. So, I guess that would mean ALL users. Now, I read the thread on the googleblog but I have a question.
How will this effect allowing 3rd parties such as Buzz, Facebook, Twitter or Friendfeed, etc. from accessing data…. if at all?

Right, this is for “Advanced sign-in security for your Google account” and since they would be accessing the account wouldn’t they need that 2nd authentication part?

Or am I just not reading this correctly?

Just Sayin'

[Propools]

Yeah, ok. After thinking about it more I wonder if these two aren't mutually exclusive from one another. If they are then it's my bad but they definately are closely related. You know, personal data security and all.

[Ocean10000]

ok after watching the video again. It does look like it can bypass the lock altogether and install the jail break. My previous understanding was that the phone needed to have been jailbroken previously for this to work.