Apple Patches Siri Photo and Contacts Bug

[Maura]

Yesterday we reported on a new bug that had been found to be affecting iPhone 6s and iPhone 6s Plus via Siri. The vulnerability enabled a malicious user to gain access to someone’s Photos and Contact on a locked iPhone that was running the newly released iOS 9.3.1.

The video that revealed the vulnerability was originally posted on YouTube. It showed how by simply using Siri to do a Twitter search you could then get direct access to Photos and Contacts of any of the contacts found by Siri during the Twitter search.

Apple has now patched the vulnerability at the server by preventing Siri from undertaking a Twitter search on a locked phone. Anyone who now asks Siri to “search Twitter” on a locked iPhone will simply be told by Siri “You’ll need to unlock your iPhone first.”

MacRumors also reports that another Siri-based bug was found today, whereby it was possible to enable Night Shift and Low Power Mode at the same time by asking Siri to enable Night Shift when the phone was already in Low Power Mode. This has now been fixed, so that Siri will tell you that you must turn off Low Power Mode in order to turn on Night Shift.

Source: Apple Fixes Siri Bug Allowing Access to Photos and Contacts on Locked Device