Bug makes it easy to bypass Find my iPhone
Smartphone theft is one of the most common crimes in many areas of the country. People steal smartphones, like the iPhone, because they can easily sell them for a significant amount of money. Since theft is such an issue, Apple has the Find my iPhone feature that allows users to track their device.
This at times results in people who own lost iPhones harassing the wrong people. Still, many iPhone owners use find my iPhone and iCloud to keep up with their device. In iOS 7 to delete an iCloud, account from a device requires find my iPhone to be disabled.
To disable that feature, the user has to enter the password for the Apple ID that goes with that iCloud account. At least that is how it is supposed to work. A very simple hack has tuned up that allows anyone to easily bypass that password requirement and restore a stolen phone reports 9to5Mac.
The process requires the nefarious used to tap the delete account and turn off disable for Find my iPhone at the same time. The prompt for the password will come up and then the user only has to hold down the power button and turn the smartphone off.
Once the smartphone is turned back on, the nefarious user can go into the settings and remove the iCloud account without a password. After that, a restore is all the user needs to do to remove any chance that the original owner can trace their device.