Re:iOS 9 allows access to photos and contacts on a passcode ...
by smackfu on Monday September 21, 2015 @10:06AM
(#10252329)
There have been quite a few of these exploits over the years, where you can trick a program running in locked mode into thinking it's in unlocked mode. It seems like they really need to have completely separate programs to run in locked mode that can't access anything except via defined APIs.
[ Parent
| on HN ]
Re:iOS 9 allows access to photos and contacts on a passcode ...
by muaddirac on Monday September 21, 2015 @11:47AM
(#10253048)
I think object-capability based access control would solve the problem as well. If the login screen is only given the capability to talk to the authentication program, then even if you could force opening photos, you wouldn't have the capabilities to hand to the photos app to actually view them.