Serious security flaw: Can't clear password cache in iPhone 3G Safari!

One of the reasons I want an iPhone is so I can access the online membership database for my church. I recently went into the AT&T store to see if I could get to this password-protected site on an iPhone 3G. This is one of those sites that pops up a Windows NT-style password prompt, as opposed to a standard web form password.
After logging on and making sure it worked, I opened a blank page, closed out the site, went into Settings > Clear History, Clear Cache, Clear Cookies. The site was gone from history. But just to be safe I typed the URL in again to make sure the password was cleared. Guess what? It went straight in without prompting for a password! This is very dangerous in any situation, but since this was a public phone in an AT&T store I had a real dilemma as I'm responsible for keeping this membership data private. Sure, after clearing history people would have to guess at the URL but I didn't want to risk that. The AT&T salesman could not figure out how to completely clear the password cache, so we ended up doing a Reset All Data.
Please tell me there's another solution! If not, this would be an unacceptable security issue because whether it's a membership database or online banking, if I lose my iPhone it could spell disaster.

Hello there....welcome to the world of iPhone - where some of us have been here since the launch of the first iPhone. Obviously you have just had your iPhone for a few days. You will get over the typing issues. Just practice. You will stop hitting the send button as soon as you get used to typing.
As for the contact issues you have - You delete groups of contacts - or all - in whatever software you use on your computer to organize your contacts. Outlook? You don't need to save your contacts to a sim card as you have them on your BIG SIMCARD you are using right now....your computer.
If someone steals your phone and tries to change the sim card, Apple/AT&T have the ability to lock the phone down so it can't be used. I've had it done when my first phone was stolen.
There ya go. Welcome to the board.
Please choose to get to know your phone better before proclaiming it less than perfect. THANKS!

Similar Messages

  • Serious security flaw found in IE

    *Important Information*
    A  serious  security flaw is found in Internet Explorer today and everybody is  been  advised  by  'MICROSOFT'  not  to  use  Internet Explorer for any confidential banking transactions until the new patch is released.
    The  new  patch  would  be  released  at the earliest and Microsoft advices everybody to use the browser from their rivals until the patch is released.
    Click on the below link to read:
    http://news.bbc.co.uk/2/hi/technology/7784908.stm

    I advise everybody to use the browser from their rivals, even after the the patch is released!
    I couldn´t agree more
    Maybe the browser was patched now so the data is not stolen by "someone" but to Microsoft instead when surfing MSDN
    </cynism>
    Markus

  • Is there a way to clear the cache on iPhone 4?

    Is there a way to clear the cache on iPhone 4?  Seems to be a bit slow checking for e-mail, etc., lately.

    Thank you for the info!!!!  I did go in and delete cookies and history, the only 2 options available.  Whether it helps or not, still a good thing to do once in a while, I would imagine.  Thanks so much!!!

  • Why i can't open my hotmail with iphone but safari and laptop can open

    Why i can't open my hotmail with iphone but safari and laptop can open why???

    The Hotmail server has an outrage. Try again later.

  • Clear password cache

    Does anyone have a method to clear the password cache programmatically?
    I want to prevent access to password protected block diagrams after I've done some block diagram changes but without restarting LabVIEW or navigating the Options menu
    Thanks
    Al
    LV 8.6.1f1
    Solved!
    Go to Solution.

    Al1234 wrote:
    Does anyone have a method to clear the password cache programmatically?
    I want to prevent access to password protected block diagrams after I've done some block diagram changes but without restarting LabVIEW or navigating the Options menu
    Thanks
    Al
    LV 8.6.1f1
    Try this.
    Rolf Kalbermatter
    CIT Engineering Netherlands
    a division of Test & Measurement Solutions
    Attachments:
    APP Clear PWD Cache.vi ‏21 KB

  • When I try to delete my recent browsing history (mostly to delete the cache) the delete recent history button is greyed out so I can't click on it. How can I clear my cache?

    Under the history link there is a button "clear recent history" but it is greyed out so I can't click on it. I want to clear my cache because I hate autofill. I've already changed my settings so it won't remember anymore things, but how can I clear what's already there?

    Make sure that you do not run Firefox in permanent Private Browsing mode.
    *https://support.mozilla.com/kb/Private+Browsing
    To see all History and Cookie settings, choose: Tools > Options > Privacy, choose the setting <b>Firefox will: Use custom settings for history</b>
    *Deselect: [ ] "Always use private browsing mode"

  • How can I clear the cache of my iOS maps app?

    Some portions of my map are not loading properly.  Square spaces have some features like parks and rivers, but no roads.  Is there a way to manually clear the cache of the Maps app without restoring the entire phone?

    Are you refering to Internet Browsing ? Then it should be somewhere under Options-->Privacy in the Browser...
    --------------------------------------------------​​-------------------------------------------------​-​------------------------------------------------​--​--If you find this helpful, pl. hit the White Star in Green Box...

  • Can I clear out cache of e-mail addresses?

    When I start to type an e-mail address in To: or Cc:, the e-mail app "helpfully" suggests addresses from, as far as I can tell, any e-mail I have received or read. That list currently includes some profane bogus names sent to me by "friends". I have deleted the e-mails themselves and the names are not in my Contacts. There does not seem to be any way for me to clear them out. Does someone know something I don't?
    TIA

    When I start to type an e-mail address in To: or Cc:, the e-mail app "helpfully" suggests addresses from, as far as I can tell, any e-mail I have received or read.
    This should not include the sender of a message for messages you've received and/or read. This includes message recipients for all messages you've sent - new or replied to messages and Address Book contacts included on the iPhone.
    If a received message includes a number of recipients and you use Reply All instead of Reply when replying to the received message, all contacts the message was sent to will be added to the autofill selection.
    I have not found a way to purge the list of previous recipients with the iPhone as is available with Apple's Mail application but hopefully this will be added at some point.
    You can provide Apple this feedback here.
    http://www.apple.com/feedback/iphone.html

  • How can I clear songs from my iPhone

    Long story short.
    Bought a 200-song compilation jazz album from iTunes store. Don't like most of the songs but can't find a way to delete my purchase.
    On my iMac I've hidden the album in the store so it's not in my music library.
    Unfortunately, dozens of the songs have loaded onto my phone and I can't find a way to delete them. I've tried syncing the phone with the Mac but the unwanted songs stay. Even when I sync with my entire music library deselected, the unwanted songs remain on the phone.
    Is there any way to get rid of them; preferably delete for ever?
    Thanks,
    Mike

    You can't permanently delete any items from your purchase history, but you should be able to delete the tracks directly on your phone by swiping across them on the track selection screen (I can't remember if it needs to be a right to left swipe on iOS 7). If you have iOS 6 on it then you should be able to delete the whole album by pressing and holding the album on the album selection screen (I don't think that you can delete a whole album on iOS 7).
    Or when connected to your computer's iTunes and you have the left-hand sidebar enabled (option-command-S) then select the Music section under the iPhone 'device' :
    And on the right-hand side of the iTunes screen the music that you have on your phone should be listed - find those tracks and select and delete them.

  • How can i clear the preview cache?

    i cant start the software.
    Because i have a error in the preview cache.
    how can i clear the cache?

    Hello milan,
    could you have a look there:
    http://helpx.adobe.com/lightroom/kb/optimize-performance-lightroom.html and >>>
    http://help.adobe.com/en_US/Lightroom/3.0/Using/WS47E8B7F6-16B7-40db-9B3E-2B7D45DCD418.htm l
    Hans-Günter

  • Clear the Cache & browser memory in ipad

    Hello,
    How can i clear the ipad browser memory and cookies from my html page. Is any provision to get the browser memory informations.  if i want to load many images (something like slide show) with the total size is more than 50MB in such case how can i delete the previous image and release the memory for the new images.

    You can only clear the cache and cookies via Settings, it can't be done directly in Safari.
    You could also try closing all other apps via the taskbar and see if that helps : from the home screen (i.e. not with any app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of each app to close them, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
    But if it's a first gen iPad then you might have problems on very large pages, the first gen iPad only has 256 meg of memory, half the amount of an iPad 2 (and the iPad 3 and 4 have double again).

  • Clearing server cache for QaaWS

    I have changed an existing "query as a web service" query and published it on the server. The WSDL is changed and updated for Xcelsius (and tested with Eviware SoapUI 2.5).
    However, the changes are not reflected on the server response XML but it replies with the old XML data. So the server must cache the requests somewhere. Where can I clear the cache or inactivate it alltogether ?
    Using Unix and BOXI 3.1.
    Thanks, Timo

    I found that at Tomcat Manager you can restart the dswsbobje application which clears the cache.

  • How do you clear the cache in Lion?

    How do you clear the cache in Lion?

    Safari 6
    Empty Caches
    Safari > Preference > Advanced
    Checkmark the box for "Show Develop menu in menu bar".
    Develop menu will appear in the Safari menu bar.
    Click Develop and select "Empty Caches" from the dropdown.

  • HT1267 how to remove password on my iphone?

    how can i remove password on my iphone??

    Settings>General>Passcode Lock.  Turn it off. You will need to know the current passcode to do this.
    If you can't remember it, you will need to restore the phone using the computer you normally sync to.
    If the computer the phone is set up to sync with is unavailable, you will need to put the phone in DFU mode and restore it as new.

  • I suddenly can't get any of the websites I use each day on Firefox to load. I tried clearing the cache. No difference. How can i fix?

    I use Firefox daily to access many sites. Yesterday it worked perfectly. Today it won't work at all. I just keep getting "Unable to Connect" message when I try to load the sites -- and sites work on other programs (though I need to use firefox to do certain things on some of them...) so it isn't an internet access problem. I've read the help articles and they don't help at all. I tried clearing the cache; it makes no difference. I tried checking that no proxy is highlighted under the advanced access settings. It is, and reviewing that makes no difference. I tried looking to see if Firefox is allowed to access the web thru my windows computer -- but I cant tell what program it would need to connect. And I haven't changed my settings since yesterday -- when it worked perfectly (or seemed to). So that shouldn't be the problem.
    Ive wasted most of the morning fighting with this. What the hell is going on here and how can I fix it?

    hello, normally such issues are caused by a firewall/security software which doesn't recognize & therefore blocks new firefox versions - firefox 23 was released yesterday: [[Fix problems connecting to websites after updating Firefox]]

Maybe you are looking for