Apple has solved a major iPhone and iPad problem that allowed hackers to guess any kind of access code of a maximum of 4 digits in just 5 attempts. The method discovered by the hackers was based on the use of the movement sensors of the iPhone terminals to detect the presses made on the screen by the users, the access code being thus guessed by their special software.
The problem was solved last year by the Apple company after the hackers created a special website through which they demonstrated the problem, so we are not talking about something very recent. The hack was possible because applications and websites could access data from the iPhone and iOS motion sensors without prior permission, so users had no way of knowing what was happening.
The even worse part is that if users accessed the hackers' software before using a banking application and did not close the web page initially accessed, the hackers could see what information was entered into the banking application. According to some IT security experts, iOS 9.3 has solved this major problem of Apple's iDevices, so the world has been safe for a long time.
The interesting part of this story is that although those from Apple have solved the major security problem, those from Google have not yet found a method to solve it in Android. In this idea, all those who use Android remain vulnerable to this problem that can be hidden in a Javascript script existing in almost any kind of website or application on the Internet.
"During their tests, they were able to crack four-digit PINs on the first guess 70 percent of the time and 100 percent of the PINs they used by the fifth guess. The attack vector was made possible because mobile apps and websites were able to access sensor data without permission … Because mobile apps and websites don't need to ask permission to access most of them, malicious programs can covertly 'listen in' on your sensor data and use it to discover a wide range of sensitive information about you such as phone call timing, physical activities and even your touch actions, PINs and passwords.”
