iPhone password shmasshword - how to bypass someones passcode

iPhone passcodeI was surprised to see this article over on boingboing about how to bypass a pass-code on the iPhone.

I just tried this and sadly it works. Here is the easy 4 step process:

  1. Turn on the iPhone
  2. Push the emergency call button in the lower left
  3. Immediately push the home button twice (this will take you to the favorites list)
  4. Push the blue arrow next to a contact.

If the contact has an email address it will pull up the email screen… delete their email and put whatever you want. If they have a website push that and it will pull up Safari and allow you to surf the web.

Apple iPhone software update in 3…2…1…

Is Twitter really submitting my password securely?

So I was signing up for a Twitter account today and noticed something. After choosing a username and password, I was taken to an invitation page. If you look at this picture it clearly states that my password will be submitted securely.

Twitter Email Submit

How? I noticed in my URL bar there was no https in front of twitter.com, so I pulled up the source code to see if was being passed to an encrypted form. The form url was:

<form action=“/invitations/fetch_contacts” method=“post”>

Can anyone explain how twitter is securely handling my email password if it is being submitted without (or to) a secure https connection?


Clicky Web Analytics