Mobile

Apple fixes HomeKit bug that allowed remote unlocking of users’ doors

0 88 1 minute read

Apple continues to be instructed to fix a burglar hole within its HomeKit smart home system which may have allowed hackers to unlock users’ smart locks and other devices.

The bug within iOS 11.2 permitted unauthorised remote device of HomeKit-enabled devices. Such devices include smart lights, plugs and other gadgets, but includes smart locks and garage door openers.

An Apple spokesperson said: “The issue affecting HomeKit users running iOS 11.2 may be fixed. The fix temporarily disables remote admission to shared users, that will be restored inside of a software update early monday.”

The company said the temporary fixed was created server side, meaning that users need not consider most things for this to take effect, but will also not wearing running shoes breaks some functionality from the system.

The vulnerability, disclosed to 9to5Mac, required no less than one iPad, iPhone or apple ipod touch running the most up-to-date software version iOS 11.2 to obtain connected to the iCloud account belonging to the HomeKit system. Previous versions of iOS appear not to have been affected. To take advantage of the bug the attackers might need to understand the email address from the Apple ID within the homeowner files of precisely how the device worked.

Experts stated that while difficulties with smart-home systems similar to this impact consumer confidence in smart locks and also other security devices, traditional locks may also be easily undermined with traditional picking techniques.

The security bug is the latest within a number of issues affecting Apple’s software on its iPhone and Mac computers. Since November, iPhone and iPad users happen to be plagued with bugs affecting the autocorrect system, including issues typing the term “it” additionally, the letter “I”, having it substituted with odd symbols.

Apple has also been forced to apologise right after a serious security flaw that allowed a person to take over a Mac running the modern form of macOS High Sierra having a blank password was revealed. The provider rushed out a fix for the safety bug, which broke the file sharing system, which itself needed fixing from a later software update.

“We greatly regret this error and that we apologise to any or all Mac users, for both releasing using this type of vulnerability likely concern it offers caused. Our customers deserve better,” Apple said at the time.