New bug in iOS 7.1.1. It seems that Apple can't close the vulnerabilities that allow unlocking the device despite trying hard. A bug in the latest firmware (iOS 7.1.1), allows Siri to be exploited to bypass the four-digit lock code and access the phone's contacts.
The demo video below demonstrates the bug. Someone with physical access to a mobile device running iOS 7.1.1 can use a few tricks to make Siri show them the phone's contact list.
Of course the vulnerability is very serious, given that a person's contact list is one of the most personal forms of data found on a phone.
Apple should fix this bug immediately with a new version of iOS, but no one knows how quickly it will respond.
And since Apple may not release a new iOS in anticipation of iOS 8, but you should protect your contact list, to protect yourself from the vulnerability the best thing you can do is disable the Siri option on the lock screen.
Watch the video demonstrating the vulnerability. The video was uploaded by Egyptian user Sherif Hashim.
The hacker in question had been banned by Apple for his activity (the ban came after the discovery of an unlock exploit for the 05.12.01 baseband of OS 3.1.3). The company even sent him the following message on his phone, according to BGR.
