A critical security flaw in iPhone 6s allows anyone to bypass the lock screen and access personal information!
The lock screen bug only works on the iPhone 6s and iPhone 6s Plus as these devices take advantage of the 3D Touch feature used to bypass the lock screen.
The bug is present in iOS 9.2 and later versions, including the latest iOS 9.3.1 update released last week.
https://www.secnews.gr/102751/kinezos-pariggeile-apple-iphone-6s-online-ki-otan-anoixe-to-kouti/Ένας κινέζος παρήγγειλε iPhone 6s online, κι όταν άνοιξε το κουτί…
Anyone with physical access to an affected iPhone can gain access to the phone's photos, emails, text messages, contacts, and settings.
With the following steps you can bypass the lock screen:
Step 1: If you own an iPhone 6s or 6s Plus, first lock your device.
Step 2: Call Siri and say 'Search Twitter.'
Step 3: When Siri asks you what you are looking for, reply 'at-sign Gmail dot com' or another popular email domain as the goal is to find a tweet that contains a valid email address.
Step 4: Once you get the results, tap on a tweet with a valid email address
Step 5: Now 3D Touch this address to bring up the pop-up menu.
Step 6: Tap 'Create new contact'.
Step 7: Now add an image to see all the images on the device.
You may need to give Siri access to your photo library. You can still view contacts by selecting 'Add to existing contact'.
Watch the video for your convenience:
[su_youtube url=”https://www.youtube.com/watch?v=Jk7GaO_vAW8″ width=”640″ height=”380″]https://www.youtube.com/watch?v=B7o0qA4L4So[/su_youtube]
However, as simple as it is to access personal data on a locked iPhone, it is also easy to fix the bug yourself while you wait for a permanent solution from Apple.
See here how:
The vulnerability can only be temporarily fixed by disabling Siri from the lock screen, although it will slightly disrupt your experience on iOS 9.3 or iOS 9.3.1
- Go to Settings → Touch ID & Passcode and turn off Siri on the lock screen
Alternatively, you can simply remove Siri's access to photos so that if someone exploits the flaw, they won't be able to see your personal photos.
- Go to Settings → Privacy → Photos and then prevent Siri from accessing photos.
Of course, Siri could still ask for your permission to view photos on your iPhone 6s when someone tries to abuse the security feature.
https://www.secnews.gr/102774/apple-se-fbi-parakalw-xakarete-mas-ksana-kai-deikste-mas-pws-to-kanate/btn-large” variation=”btn-success”]Apple to FBI: Please hack us again and show us how you did it.
