CNET News Video
Apple fixes Siri bug that opened up access to photos and contactsApple repaired a flaw in the iPhone 6S and 6S Plus, which would have allowed strangers to access your photos and contacts through Siri.
Apple confirmed that it has fixed a bug that affects the iPhone 6S and 6S plus running iOS 9.3.1. This bug allowed any user to bypass the lock screen and access the phone's photos and contact list. This loophole can be carried out through a voice search on Siri and Siri needs to already have access to your Twitter account. [INAUDIBLE] If she does, you can first start with asking her to run a search on Twitter. Then ask her to search Gmail.com. When she shows you a list of results, comb through some of these results until you find a full Gmail address. Once you come across one, and it can belong to a random stranger, use the handset's 3D touch feature to add this email to your contacts list. When options for adding this address to your phone pop up, you could then access the phone's photos and address book. All of course without ever being prompted to enter a pin, passcode, or fingerprint. Fortunately, Apple fixed this flaw, and because Siri is server based, the company was able to fix it on its end, meaning iPhone users don't have to download and install another iOS update. This is a good thing, because I juts got around to updating my phone to iOS 8 after finally reading the terms and agreements, and spoiler alert, the dog dies. [NOISE]