Apple Fixes Siri Bug Allowing Access to Photos and Contacts on Locked Device

A Siri vulnerability that allowed access to a user's photos and contacts on a locked iPhone running iOS 9.3.1 was patched server-side this afternoon by Apple.

Shared last night by Jose Rodriguez, the vulnerability used Siri's ability to access Twitter to find an email link or phone number, which could be pressed to open up an editable list of contacts even on a device that was locked. Through access to contacts, a user's full photo library was also visible.

As seen in the video below, the vulnerability relied on asking Siri to perform a Twitter search. If an email address, phone number, or other contact related detail came up, it would give direct access to Photos and Contact data. While the method worked on the iPhone 6s as of this morning, it is now disabled on all devices because it is no longer possible for Siri to conduct a Twitter search on a locked device.


When using a locked iPhone, asking Siri to "Search Twitter" now results in the personal assistant saying "You'll need to unlock your iPhone first." Without the ability to search Twitter on a locked device, there is no way to get the exploit to work. Apple confirmed the fix in a short statement given to The Washington Post.

According to 9to5Mac, a second Siri-related bug was also fixed today. Previously it was possible to enable both Night Shift and Low Power Mode by asking Siri to enable Night Shift after Low Power Mode was turned on, but that is no longer possible. Siri now warns that turning on Night Shift requires turning off Low Power Mode.

In early iOS 9.3 betas, Night Shift did work with Low Power Mode, but in iOS 9.3 beta 4, Apple removed the functionality. Night Shift and Low Power Mode cannot be run simultaneously.

Tag: iOS 9.3

Top Rated Comments

(View all)
Avatar
56 months ago

Hate Apple or not, but you have to give them props for these security updates. Personally, the fact that I only see this bypass on YouTube a few hours ago and have just seen an article about Apple sending out an update to fix it just amazes me. I remember when I had an LG and I had to beg and pray that I would even get an update, lol.

Actually it was a server side fix, not a software update.
[doublepost=1459903747][/doublepost]

Siri is as attractive to me as FaceBook or Microsoft.

I would love an iPhone that didn't support it.

Options>General>Siri>disable

There you have it.
Score: 33 Votes (Like | Disagree)
Avatar
56 months ago

Siri is as attractive to me as FaceBook or Microsoft.

I would love an iPhone that didn't support it.

Wow. Just. Wow. The all high and mighty more attractive than Facebook and Microsoft person can't figure out how to turn off siri
Score: 28 Votes (Like | Disagree)
Avatar
56 months ago

Just today, I was typing away, when suddenly a bloody popup window asked me if I wanted to turn on dictation. Just bugger off, Apple. I don't want your foul news, I don't want your cynical music subscription, I don't want your spam forced down my throat.

I wish Donald Trump was CEO of Apple. He'd be a darn sight better than Cook.

Yeah, he could build a wall around Siri and then we'd never have to hear from her again!
Score: 15 Votes (Like | Disagree)
Avatar
56 months ago
Hate Apple or not, but you have to give them props for these security updates. Personally, the fact that I only see this bypass on YouTube a few hours ago and have just seen an article about Apple sending out an update to fix it just amazes me. I remember when I had an LG and I had to beg and pray that I would even get an update, lol.
Score: 14 Votes (Like | Disagree)
Avatar
56 months ago

Siri is as attractive to me as FaceBook or Microsoft.

I would love an iPhone that didn't support it.

If ONLY there was a way to uhh disable it... :rolleyes:
Score: 14 Votes (Like | Disagree)
Avatar
56 months ago

Siri is as attractive to me as FaceBook or Microsoft.

I would love an iPhone that didn't support it.

Wow. Delete your account.
Score: 13 Votes (Like | Disagree)

Top Stories

iPhone Users Who Experienced 'Batterygate' Can Now File to Receive Around $25 Settlement From Apple

Monday July 13, 2020 6:50 am PDT by
Earlier this year, Apple agreed to settle a U.S. class action lawsuit that accused the company of "secretly throttling" older iPhone models. Now, eligible iPhone owners are beginning to be notified about their legal rights and options. Under the proposed settlement, Apple will provide a cash payment of approximately $25 to each eligible iPhone owner who submits a claim, with its total payout ...

Apple Releases iOS 13.6 With Car Key, Toggle to Turn Off Automatic Update Downloads, Audio Apple News+ Stories and More

Wednesday July 15, 2020 10:04 am PDT by
Apple today released iOS and iPadOS 13.6, major updates that come more than a month after the launch of iOS and iPadOS 13.5.1. iOS and iPadOS 13.6 introduce new Health, Apple News, and software update features. The iOS and iPadOS 13.6 updates are available on all eligible devices over-the-air in the Settings app. To access the updates, go to Settings > General > Software Update. Apple has...

Possible 'iPhone 12' Battery Certifications Suggest Lower Capacities Than iPhone 11 Series

Monday July 13, 2020 4:22 am PDT by
MySmartPrice has spotted certifications for three new Apple batteries that it believes could be for the upcoming iPhone 12 lineup, despite them being less capacitive than the batteries in the current iPhone 11 series. The batteries are identified with the model numbers A2471, A2431, and A2466, and appear on Safety Korea, China's 3C, and the Danish agency UL Demko. Apple is expected to...

iPhone 12 Could Ship With New Braided USB-C to Lightning Cable

Tuesday July 14, 2020 10:57 am PDT by
Apple's upcoming iPhone 12 models could ship with a new Lightning to USB-C cable that includes a braided fabric design, according to leaked photos from ChargerLAB that surfaced on Weibo today (via Twitter users DuanRui and L0vetodream). The photos depict a USB-C to Lightning cable that has a braided design rather than the standard non-fabric design of the current cables. Apple has never...

Apple Pays Samsung an Estimated $950 Million for Missing OLED Panel Purchase Targets

Monday July 13, 2020 10:03 am PDT by
Apple in the second quarter of 2020 paid Samsung approximately $950 million for not meeting OLED panel purchase goals established in agreements between the two companies, according to display analysts at Display Supply Chain Consultants. Samsung last week shared guidance on revenue and operating profit for the second quarter of 2020, which included a one-time gain related to its display...

Five Mac Apps Worth Checking Out - July 2020

Tuesday July 14, 2020 2:34 pm PDT by
Apps created for Macs don't typically receive as much coverage as apps designed for iPhones and iPads, so we crated a series here at MacRumors to highlight interesting Mac apps worth checking out. This month's apps focus on productivity and feature great tools for working from home. Subscribe to the MacRumors YouTube channel for more videos. Twobird (Free) - Twobird is an email app from...

Apple Warns Against Closing MacBooks With a Cover Over the Camera

Friday July 10, 2020 11:12 am PDT by
Apple this month published a support document that warns customers against closing their Mac notebooks with a cover over the camera as it can lead to display damage. Image via Reddit Apple says that the clearance between the display and the keyboard is designed to very tight tolerances, which can be problematic. Covering the camera can also cause issues with automatic brightness and True Tone....

Apple Shares Humorous 'Working-From-Home Thing' Video

Monday July 13, 2020 9:31 am PDT by
Apple today shared a funny video focused on the problems that people working from home have to deal with, including noisy children, chaotic schedules, communication issues, and more. The video focuses on showing off Apple products and their capabilities that can be useful when working from home, such as the ability to scan a document with an iPhone, mark up a PDF, Siri Reminders, and more.The...

SoftBank Considering Possible Sale of Arm Holdings as Apple Gears Up for Arm-Based Macs

Monday July 13, 2020 2:00 pm PDT by
SoftBank, the company that owns chip designer Arm Holdings, is exploring options that include a full or partial sale or a public offering, reports The Wall Street Journal. SoftBank is working with Goldman Sachs Group as an advisor, and the explorations are at an early stage. The Wall Street Journal says that it's unknown how much interest there would be in Arm from financial or industry...

Rumor Suggests New Apple App for Windows Could Be Coming Soon

Tuesday July 14, 2020 1:54 am PDT by
Apple could be working towards the release of a new app for Windows 10, according to a report this week from an Italian website. The blog Aggiornamenti Lumia suggests that an app from Apple is "coming soon" to the Microsoft Store, but stops short of providing additional details. Apple still maintains a Windows version of the iTunes app, which has been discontinued on Mac and replaced by...