If you're new to AirPods, considering buying a pair, or just want to pick up some new tips.
AirPods and AirPower: Everything We Know
Apple Fixes Siri Bug Allowing Access to Photos and Contacts on Locked Device
A Siri vulnerability that allowed access to a user's photos and contacts on a locked iPhone running iOS 9.3.1 was patched server-side this afternoon by Apple.
Shared last night by Jose Rodriguez, the vulnerability used Siri's ability to access Twitter to find an email link or phone number, which could be pressed to open up an editable list of contacts even on a device that was locked. Through access to contacts, a user's full photo library was also visible.
As seen in the video below, the vulnerability relied on asking Siri to perform a Twitter search. If an email address, phone number, or other contact related detail came up, it would give direct access to Photos and Contact data. While the method worked on the iPhone 6s as of this morning, it is now disabled on all devices because it is no longer possible for Siri to conduct a Twitter search on a locked device.
When using a locked iPhone, asking Siri to "Search Twitter" now results in the personal assistant saying "You'll need to unlock your iPhone first." Without the ability to search Twitter on a locked device, there is no way to get the exploit to work. Apple confirmed the fix in a short statement given to The Washington Post.
According to 9to5Mac, a second Siri-related bug was also fixed today. Previously it was possible to enable both Night Shift and Low Power Mode by asking Siri to enable Night Shift after Low Power Mode was turned on, but that is no longer possible. Siri now warns that turning on Night Shift requires turning off Low Power Mode.
In early iOS 9.3 betas, Night Shift did work with Low Power Mode, but in iOS 9.3 beta 4, Apple removed the functionality. Night Shift and Low Power Mode cannot be run simultaneously.
Shared last night by Jose Rodriguez, the vulnerability used Siri's ability to access Twitter to find an email link or phone number, which could be pressed to open up an editable list of contacts even on a device that was locked. Through access to contacts, a user's full photo library was also visible.
As seen in the video below, the vulnerability relied on asking Siri to perform a Twitter search. If an email address, phone number, or other contact related detail came up, it would give direct access to Photos and Contact data. While the method worked on the iPhone 6s as of this morning, it is now disabled on all devices because it is no longer possible for Siri to conduct a Twitter search on a locked device.
When using a locked iPhone, asking Siri to "Search Twitter" now results in the personal assistant saying "You'll need to unlock your iPhone first." Without the ability to search Twitter on a locked device, there is no way to get the exploit to work. Apple confirmed the fix in a short statement given to The Washington Post.
According to 9to5Mac, a second Siri-related bug was also fixed today. Previously it was possible to enable both Night Shift and Low Power Mode by asking Siri to enable Night Shift after Low Power Mode was turned on, but that is no longer possible. Siri now warns that turning on Night Shift requires turning off Low Power Mode.
In early iOS 9.3 betas, Night Shift did work with Low Power Mode, but in iOS 9.3 beta 4, Apple removed the functionality. Night Shift and Low Power Mode cannot be run simultaneously.
Tag: iOS 9.3
[ 101 comments ]
Top Rated Comments
(View all)
38 months ago
Hate Apple or not, but you have to give them props for these security updates. Personally, the fact that I only see this bypass on YouTube a few hours ago and have just seen an article about Apple sending out an update to fix it just amazes me. I remember when I had an LG and I had to beg and pray that I would even get an update, lol.
Actually it was a server side fix, not a software update.
[doublepost=1459903747][/doublepost]
Siri is as attractive to me as FaceBook or Microsoft.
I would love an iPhone that didn't support it.
Options>General>Siri>disable
There you have it.
38 months ago
Siri is as attractive to me as FaceBook or Microsoft.
I would love an iPhone that didn't support it.
Wow. Just. Wow. The all high and mighty more attractive than Facebook and Microsoft person can't figure out how to turn off siri
38 months ago
Just today, I was typing away, when suddenly a bloody popup window asked me if I wanted to turn on dictation. Just bugger off, Apple. I don't want your foul news, I don't want your cynical music subscription, I don't want your spam forced down my throat.
I wish Donald Trump was CEO of Apple. He'd be a darn sight better than Cook.
Yeah, he could build a wall around Siri and then we'd never have to hear from her again!
38 months ago
Siri is as attractive to me as FaceBook or Microsoft.
I would love an iPhone that didn't support it.
38 months ago
Hate Apple or not, but you have to give them props for these security updates. Personally, the fact that I only see this bypass on YouTube a few hours ago and have just seen an article about Apple sending out an update to fix it just amazes me. I remember when I had an LG and I had to beg and pray that I would even get an update, lol.
38 months ago
Siri is as attractive to me as FaceBook or Microsoft.
I would love an iPhone that didn't support it.
Wow. Delete your account.
38 months ago
Just today, I was typing away, when suddenly a bloody popup window asked me if I wanted to turn on dictation. Just bugger off, Apple. I don't want your foul news, I don't want your cynical music subscription, I don't want your spam forced down my throat.
I wish Donald Trump was CEO of Apple. He'd be a darn sight better than Cook.
38 months ago
Just today, I was typing away, when suddenly a bloody popup window asked me if I wanted to turn on dictation. Just bugger off, Apple. I don't want your foul news, I don't want your cynical music subscription, I don't want your spam forced down my throat.
Wow. This is triggered by pressing the "fn" key twice, quickly. I don't see how it could be considered "spam."https://support.apple.com/HT202584
38 months ago
"Hey, Siri. Why doesn't Apple pay at a very minimum 30% tax
in the country where the actual sale is made?"
"Let me check on that..."
"Did you require access to a user's photos and contacts instead?"
in the country where the actual sale is made?"
"Let me check on that..."
"Did you require access to a user's photos and contacts instead?"
[ Read All Comments ]
Google's "Keep" app for taking notes and making lists today expanded to the Apple Watch, allowing the app's users to use the note taking and list making functionality right on their...
Apple today seeded the third beta of an upcoming macOS Mojave 10.14.4 update to its public beta testing group, one day after seeding the third beta to developers and two weeks after releasing the...
Apple today seeded the third beta of an upcoming tvOS 12.2 update to developers for testing purposes, two weeks after seeding the second beta and a month after releasing the tvOS 12.1.2 update.
...
Apple today seeded the third beta of an upcoming watchOS 5.2 update to developers, two weeks after seeding the second watchOS 5.2 beta and a month after releasing watchOS 5.1.3.
Once the proper...
GM was one of the early adopters of CarPlay, with the feature debuting on a few 2016 Chevrolet models and rapidly spreading across the company's various brands including Buick, GMC, and...
Following an announcement last year and launch in Europe, Eve Systems today released the portable LED lamp Eve Flare in the United States and Canada. Similar to Hue Go, Eve Flare lets you pick up and...
SoundCloud today announced a new feature that allows creators to distribute their music directly to major streaming music services like Apple Music, Spotify, and Amazon Music (via Billboard). The...
Printer company Epson today announced the launch of voice-activated mobile printing support for Siri, Amazon Alexa, and Google Assistant. With the addition, iOS users can snap a photo and ask Siri to...
