A new loophole was found on iPhone 6S and iPhone 6S plus that let’s other people see your photos and contacts without knowing your passcode. Although this loophole is only affecting iPhone 6S and iPhone 6S plus users, it shows that even the big Apple has flaws.
This loophole works only on iPhone 6S and iPhone 6S plus, since the 3D touch is one of the prerequisites. You also need to have passcode on, access to internet and Siri enabled. After all these conditions are met then you might have a problem. But this happening to you is highly unlikely.
How to protect yourself:
- Turn off Siri photo access from: Settings -> Privacy -> Photos -> Siri -> Off
- Disable Siri
- Currently its not possible to protect your contacts list.
How to reproduce the bypass:
- Lock the iphone
- Activate Siri
- Say “Search twitter”
- When siri asks you what to search for – Say: “(at)gmail(dot)com” (works with all popular email addresses)
- When you see the tweets, open one of them
- when there is a correct email (as a link) force touch the email
- iPhone asks to create new contact (from where you can access photos) OR
- iPhone asks to add to existing contact (from where you can access contacts)
Pictures showing the steps are below:
This loophole went viral on the internet just days ago. Hopefully Apple will fix it soon and we can all sleep better. Meanwhile if your iPhone is locked to another carrier, and you want to use your phone then visit our store and unlock your iPhone now.
Seems that Apple has fixed the issue by disabling access to siri search results. That was quite fast fix for Apple, they did it without even releasing new version of iOS.