{"id":337234,"date":"2017-03-31T05:41:27","date_gmt":"2017-03-30T21:41:27","guid":{"rendered":"https:\/\/www.macrumors.com\/2017\/03\/30\/ios-10-3-fixes-911-exploit\/"},"modified":"2017-03-31T05:41:27","modified_gmt":"2017-03-30T21:41:27","slug":"ios-10-3-fixes-exploit-that-caused-iphones-to-repeatedly-dial-911","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/ios-10-3-fixes-exploit-that-caused-iphones-to-repeatedly-dial-911\/","title":{"rendered":"iOS 10.3 Fixes Exploit That Caused iPhones to Repeatedly Dial 911"},"content":{"rendered":"<p><a href=\"https:\/\/www.macrumors.com\/roundup\/ios-10\/\">iOS 10<\/a>.3, <a href=\"https:\/\/www.macrumors.com\/2017\/03\/27\/apple-releases-ios-10-3\/\">released earlier this week<\/a>, fixes a major vulnerability that could cause iPhones to repeatedly dial 911, reports <em><a href=\"https:\/\/www.wsj.com\/articles\/apple-fixes-911-flaw-in-latest-ios-update-1490907451\">The Wall Street Journal<\/a><\/em>. In the United States, 911 is an emergency telephone number that summons police, fire, and EMS services.<\/p>\n<p>The 911 security flaw surfaced in October after an 18-year-old iOS developer in Arizona <a href=\"https:\/\/arstechnica.com\/security\/2016\/10\/teen-arrested-for-iphone-hack-that-threatened-emergency-911-system\/\">discovered and published code<\/a> that would cause an iPhone to dial 911 over and over again. The teenager was arrested after the 911 system in Surprise, Arizona was overwhelmed with more than 100 hang-up calls in just minutes.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.macrumors.com\/article-new\/2017\/03\/iphonelinkcall.jpg\" alt=\"\" width=\"600\" height=\"335\" class=\"aligncenter size-full wp-image-557840\"\/><br \/>Because the code was published online, thousands of accidental 911 calls were placed across the United States, demonstrating an effective cyberattack method that could severely disrupt emergency services.<\/p>\n<p>The code exploited an iPhone feature that allows users to click on a phone number in a text message or on a webpage and immediately dial that number. With the iOS 10.3 update, iPhones always require secondary confirmation before automatically calling a number using that method.\n<\/p>\n<blockquote readability=\"10\">\n<p>Apple says the update supersedes that capability and now requires users to always press a second confirmation before initiating a call.<\/p>\n<p>Apple says it initially worked with app developers to fix the vulnerability, and this update will now prevent it from happening even on apps that hadn&#8217;t already fixed the issue.<\/p>\n<\/blockquote>\n<p>iOS 10.3, which introduces features like Find My <a href=\"https:\/\/www.macrumors.com\/roundup\/airpods\/\">AirPods<\/a> and a new Apple Filesystem, also includes <a href=\"https:\/\/support.apple.com\/en-us\/HT207617\">dozens of major security fixes<\/a>. Another major iOS 10.3 bug fix, which could result in endless Safari pop-ups that &#8220;locked&#8221; the Safari app, was <a href=\"https:\/\/www.macrumors.com\/2017\/03\/28\/ios-10-3-ransomware-safari-exploit-patched\/\">outlined earlier this week<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p><a href=\"https:\/\/www.macrumors.com\/roundup\/ios-10\/\">iOS 10<\/a>.3, <a href=\"https:\/\/www.macrumors.com\/2017\/03\/27\/apple-releases-ios-10-3\/\">released earlier this week<\/a>, fixes a major vulnerability that could cause iPhones to repeatedly dial 911, reports <em><a href=\"https:\/\/www.wsj.com\/articles\/apple-fixes-911-flaw-in-latest-ios-update-1490907451\">The Wall Street Journal<\/a><\/em>. In the United States, 911 is an emergency telephone number that summons police, fire, and EMS services.<\/p>\n<p>The 911 security flaw surfaced in October after an 18-year-old iOS developer in Arizona <a href=\"https:\/\/arstechnica.com\/security\/2016\/10\/teen-arrested-for-iphone-hack-that-threatened-emergency-911-system\/\">discovered and published code<\/a> that would cause an iPhone to dial 911 over and over again. The teenager was arrested after the 911 system in Surprise, Arizona was overwhelmed with more than 100 hang-up calls in just minutes.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/cdn.macrumors.com\/article-new\/2017\/03\/iphonelinkcall.jpg\" alt=\"\" width=\"600\" height=\"335\" class=\"aligncenter size-full wp-image-557840\" \/><br \/>\n<br \/>\nBecause the code was published online, thousands of accidental 911 calls were placed across the United States, demonstrating an effective cyberattack method that could severely disrupt emergency services.<\/p>\n<p>The code exploited an iPhone feature that allows users to click on a phone number in a text message or on a webpage and immediately dial that number. With the iOS 10.3 update, iPhones always require secondary confirmation before automatically calling a number using that method.<\/p>\n<blockquote><p>Apple says the update supersedes that capability and now requires users to always press a second confirmation before initiating a call.<\/p>\n<p>Apple says it initially worked with app developers to fix the vulnerability, and this update will now prevent it from happening even on apps that hadn&#8217;t already fixed the issue.<\/p><\/blockquote>\n<p>iOS 10.3, which introduces features like Find My <a href=\"https:\/\/www.macrumors.com\/roundup\/airpods\/\">AirPods<\/a> and a new Apple Filesystem, also includes <a href=\"https:\/\/support.apple.com\/en-us\/HT207617\">dozens of major security fixes<\/a>. Another major iOS 10.3 bug fix, which could result in endless Safari pop-ups that &#8220;locked&#8221; the Safari app, was <a href=\"https:\/\/www.macrumors.com\/2017\/03\/28\/ios-10-3-ransomware-safari-exploit-patched\/\">outlined earlier this week<\/a>.<\/p>\n<div class=\"linkback\">Related Roundup: <a href=\"https:\/\/www.macrumors.com\/roundup\/ios-10\/\">iOS 10<\/a> <\/div>\n<p><a href=\"https:\/\/forums.macrumors.com\/threads\/ios-10-3-fixes-911-exploit.2039516\/\">Discuss this article<\/a> in our forums<\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.macrumors.com\/~ff\/MacRumors-All?a=1A26l0v-a34:-ZvTg3Vlrjs:6W8y8wAjSf4\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/MacRumors-All?d=6W8y8wAjSf4\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.macrumors.com\/~ff\/MacRumors-All?a=1A26l0v-a34:-ZvTg3Vlrjs:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/MacRumors-All?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/MacRumors-All\/~4\/1A26l0v-a34\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[68,69,59,26],"class_list":["post-337234","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple","tag-macrumors","tag-media","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=337234"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337234\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=337234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=337234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=337234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}