x PhoneArena is looking for new authors! To view all available positions, click here.
  • Home
  • News
  • Thieves can disable Find My iPhone and delete your iCloud account thanks to security glitch in iOS 7

Thieves can disable Find My iPhone and delete your iCloud account thanks to security glitch in iOS 7

Posted: , by Alan F.

Tags:

Thieves can disable Find My iPhone and delete your iCloud account thanks to security glitch in iOS 7
With iOS 7, the only way to delete an iCloud account or restore a wiped device, is to disable Find My iPhone. And the only way to disable Find My iPhone is to enter your Apple ID password. Apple did this to prevent thieves from avoiding detection from the Find My iPhone application. But it seems that there is a way for the bad guys to bypass this security set-up. Going to the iCloud settings panel, you need to press "delete account" at the same time you click on the switch to disable Find My iPhone. That combination, done at the same time, requires a bit of dexterity, but it can be done.

You then will be prompted to enter a password at which time you hold down the power button and turn off your handset. When you reboot the iPhone, you can then go into the iCloud setting panel and remove the account without being asked for a password. It will then allow anyone to plug the phone into iTunes and restore it with no questions asked. And with Find My iPhone disabled, the Activation Lock will not save you.

We would expect to see Apple working feverishly on a fix for this problem. The last thing you want to happen if your iPhone is stolen is for the thieves to remove your iCloud account, making it much easier for them to find a buyer for the device.



source: MiguelAlvarado, 9to5Mac via Gizmodo

43 Comments
  • Options
    Close




posted on 03 Apr 2014, 11:15 11

1. palmguy (Posts: 217; Member since: 22 Mar 2011)


Can I say it? "It just works" :)

posted on 03 Apr 2014, 11:37 2

4. Mxyzptlk (Posts: 3227; Member since: 21 Apr 2012)


It does just works.

posted on 03 Apr 2014, 12:04 5

8. VZWuser76 (Posts: 1210; Member since: 04 Mar 2010)


It does just work, not works.

posted on 03 Apr 2014, 12:28 4

12. jroc74 (Posts: 4720; Member since: 30 Dec 2010)


Apple, iPhone, iPad troubleshooting forum sections says other wise.

I dont think there is a need for me to post macrumors forum sections..I spent enough time there when I was actually interested in Apple some years ago to know it..... doesnt .....just works.....

posted on 03 Apr 2014, 12:30 3

13. networkdood (Posts: 6250; Member since: 31 Mar 2010)


Wrong, as usual...

posted on 03 Apr 2014, 12:38 5

15. PBXtech (Posts: 966; Member since: 21 Oct 2013)


If you mean it works to get people to repeat buy, no matter what problems exist, then yes, it does just work.

posted on 03 Apr 2014, 13:44 5

21. tedkord (Posts: 4288; Member since: 17 Jun 2009)


Disabling security after you steal the iPhone apparently does just work.

posted on 03 Apr 2014, 16:34 1

27. DigitalJedi_X2 (banned) (Posts: 346; Member since: 30 Jan 2012)


Clearly... It doesn't.

posted on 03 Apr 2014, 17:01 2

29. InspectorGadget80 (Posts: 6142; Member since: 26 Mar 2011)


see this blind guy doesn't realize everything have A GLITCH. even this article say's HACKERS can steal your account.

posted on 03 Apr 2014, 22:14 1

34. fireblade (Posts: 634; Member since: 27 Dec 2013)


yeah, the glitch works too

posted on 03 Apr 2014, 12:26 3

11. jroc74 (Posts: 4720; Member since: 30 Dec 2010)


lol....

Boy oh boy...one thing I do see less of now....is iPhone fanboys claiming this. Articles like this must be driving home the point that nothing is perfect....nothing...:"just works"

posted on 03 Apr 2014, 13:21 3

20. lyndon420 (Posts: 1688; Member since: 11 Jul 2012)


"It just works...as in barely!" :-)

posted on 03 Apr 2014, 14:27 2

23. mafiaprinc3 (Posts: 304; Member since: 07 May 2012)


nothing new for IOS, always some easy bypass to their so called secure OS

posted on 03 Apr 2014, 18:42

32. cgarcia2606 (Posts: 1; Member since: 03 Apr 2014)


is simple trigger restrictions, modify accounts assign a password to modify the restrictions and even this activated my iCloud icon and go!

posted on 06 Apr 2014, 00:04

36. irbaaz (Posts: 17; Member since: 27 Mar 2014)


Not on iphone 5 atleast...
In 7.0.6 their was other method that use to work flawlessly and tried it that and it was worling..
But in 7.1 it is fixed

posted on 03 Apr 2014, 11:19 10

2. palmguy (Posts: 217; Member since: 22 Mar 2011)


But I don't get it. They come out with 1 (and a half this year) phone per year. One major software update per year. How did they miss this?

posted on 03 Apr 2014, 12:07 7

9. PBXtech (Posts: 966; Member since: 21 Oct 2013)


And they have control over the hardware and software sides. I know bugs happen, but iOS7 has been riddled with them more than a company the size and wealth of Apple should be having.

posted on 03 Apr 2014, 11:37 1

3. stealthd (Posts: 916; Member since: 12 Jun 2011)


So they need to know your phones passcode to do this then. That doesn't sound as bad as they're making it out to be.

posted on 03 Apr 2014, 12:02 2

7. VZWuser76 (Posts: 1210; Member since: 04 Mar 2010)


I think they said to enter a password. I believe what they're implying is you enter "a new password", not the phone owner's password. And then after the reboot, the delete the iCloud account, making the phone free to use on any account. Basically it would be the same as doing a factory reset on an Android phone. At that point the only way to tell if it was stolen would be with the serial number, but according to this article, the system would see it like the owner removed the device from their account, just as if they were going to sell it. If so, that's bad.

The bad thing about articles like this is it basically gives would be thieves a roadmap to do this. If they instead just said what the end result is, without giving away the "how to" part, it would make them work harder to find that info.

posted on 03 Apr 2014, 13:50 2

22. stealthd (Posts: 916; Member since: 12 Jun 2011)


The point here is that when Find My iPhone is enabled on a device, it's supposed to require the Apple ID/password (not the device's passcode) to do a factory reset. This glitch allows you to bypass that, but it only works if you have access to the settings app, which you'd only get by getting past the lockscreen. There's also the possiblity that the device's owner could use the Find My iPhone service to remotely lock the device. That'll only work if they can do it before the thief takes advantage of this glitch though.

posted on 03 Apr 2014, 16:34 1

28. VZWuser76 (Posts: 1210; Member since: 04 Mar 2010)


I've never had my lock screen password protected, mainly because 90% of my time is spent on a farm, and I have no passwords or financial stuff stored on my phone, and it is theft insured. But I'd guess the majority of phone users either don't know about or don't care about security.

posted on 07 Jun 2014, 11:36

41. zokee (Posts: 2; Member since: 07 Jun 2014)


your spot on , change hes pass word to what ever u like, re boot and delete. on ya mate!!!

posted on 03 Apr 2014, 11:49 2

5. Sauce (unregistered)


This was a joke. The guy said it himself lol. Boy does PA research anything these days? Didn't they just tell some other story about a text campaign the made zero sense? Lollll..

Editors/Authors: If you see this…you need to do a better job.

posted on 03 Apr 2014, 18:25 2

31. techperson211 (Posts: 448; Member since: 27 Feb 2014)


Yeah it was a joke..... And a real one.

posted on 07 Jun 2014, 11:37

42. zokee (Posts: 2; Member since: 07 Jun 2014)


change hes pass word to what ever u like, re boot and delete

posted on 03 Apr 2014, 19:48 1

33. roscuthiii (Posts: 1785; Member since: 18 Jul 2010)


Well, Alan F. will pretty much just post any Apple story he sees out there on the interwebs as long as it has the uppercase A, or a lower case i...

And editors? I'm not even sure there's an editor, much less editors.

posted on 03 Apr 2014, 11:49 8

6. Anshulonweb (Posts: 285; Member since: 07 Feb 2014)


buy an iPhone they said...it is very secure and bug free they said

posted on 03 Apr 2014, 17:04 2

30. InspectorGadget80 (Posts: 6142; Member since: 26 Mar 2011)


and they say it WORKS. not really

posted on 03 Apr 2014, 12:13 4

10. PapaSmurf (Posts: 7414; Member since: 14 May 2012)


I removed the iCloud lock from a company phone. That iPhone 4 is now wiped and lock free.

posted on 03 Apr 2014, 12:32 2

14. networkdood (Posts: 6250; Member since: 31 Mar 2010)


iArrogance

posted on 03 Apr 2014, 12:57 3

16. StraightEdgeNexus (Posts: 2689; Member since: 14 Feb 2014)


Thats pretty cool man. Just works. Perfect privacy and security. No virus and no lags.

posted on 03 Apr 2014, 13:07 2

19. networkdood (Posts: 6250; Member since: 31 Mar 2010)


Just works
.....for Apple

posted on 03 Apr 2014, 12:57

17. StraightEdgeNexus (Posts: 2689; Member since: 14 Feb 2014)


Thats pretty cool man. Just works. Perfect privacy and security. No virus and no lags.

posted on 03 Apr 2014, 13:07 3

18. The_Innovation (Posts: 538; Member since: 18 Jul 2012)


Thank you for letting everyone know exactly how to do it with step-by-step directions. I'm sure all the thieves watching are happy.

posted on 03 Apr 2014, 15:05 3

24. jroc74 (Posts: 4720; Member since: 30 Dec 2010)


Yup...its on Youtube...

It will probably have 100,000 views in a week.

posted on 03 Apr 2014, 15:27 1

25. D79_D79_ (Posts: 38; Member since: 19 Feb 2014)


Ok I got bored waiting for the phone to reboot. What happens after?

posted on 03 Apr 2014, 16:04 2

26. gaby1451 (Posts: 113; Member since: 30 Mar 2011)


So this glitch is legit. However one thing to note: if one actually keeps a passcode lock on her/his iPhone, then once it's rebooted, it prompts the user for it. Thus keeping the entire glitch from working. i.e. Keep a lock on your phones!

XOXO

posted on 04 Apr 2014, 00:15 1

35. Dante216 (Posts: 24; Member since: 18 Dec 2013)


This isn't the only way. You can set a pass code on the device, turn on "erase data after 10 tries" and put in the pass code 10 times. It takes an hour and 20 minutes, but it works.

posted on 10 May 2014, 10:51

37. Swapnildesai (Posts: 2; Member since: 10 May 2014)


can anyone unlock for me my iPhone 5 its icloud locked i can also pay please help

posted on 12 May 2014, 17:15

38. gaby1451 (Posts: 113; Member since: 30 Mar 2011)


What happened? What do you mean cloud locked? Email me: gabrielle.rivera@icloud.com

posted on 18 May 2014, 04:13

39. Swapnildesai (Posts: 2; Member since: 10 May 2014)


like it asks for previous owners apple id

posted on 22 May 2014, 08:59

40. truth321 (Posts: 1; Member since: 22 May 2014)


This "glitch" does NOT work!! All the iphone haters commenting how happy the are because the iphone isn't secure, can be quiet. I followed the steps shown in the video and it does not work. After reboot find my iphone is still turned on. Iphone is secure, ignorant people don't know what they are talking about and believe anything they see on the Internet.

posted on 3 hours ago

43. alexawhite (Posts: 1; Member since: 3 hours ago)


i used this ios-tool.blogspot.com on my 5s and it worked

Want to comment? Please login or register.

Latest stories