bypass unlock through siri (PLEASE FIX)

Its no mistake I think I found it, I saw this thread yesterday wanting to learn more about my iphone.

I have an Iphone 6s, and this is how I did it: step one say "hey Siri" , then I followed by asking her " look up money one fcu facebook page,"

I got many links, and clicked the one that said facebook she proceeded to open the webpage and I pressed the home button with my pinky and my phone was unlock. I was not able to do it over and over again. Just once.

When I tried to do it over and my phone started showing less facebook links, and what ever I asked the phone it would ask for the passcode if I wanted to open the links, I turned off the phone and turned it back on and Siri would not listen to me. She would only talk to me after I've unlocked the phone at least once.

I think jnachez should be fine. unless someone happens to find a way to replicate the results over and over again.

Siri will return results from various online services, even when locked. It looks like certain results can allow access to the device, report this to Apple if you think it is incorrect or a bug or a security risk etc… Just be sure that touch ID is not being used - delete all your fingerprints when testing.

http://apple.com/feedback

The answer is simple as far as I can see… turn off Siri & any other items that you do not want to work on the lock screen via the settings app (like control centre which can enable airplane mode which defeats Find my iPhone).

There is a balance between security & convenience, if you want one of these, you may have to sacrifice the other.

I'm unclear how I'm overcomplicating it -

• Touch ID could be at play here, making the complaint void, lets be certain that isn't the issue.
• Unlocked devices allow more access than locked ones - rebooting clarifies the state of the device, waiting for the lock timeout is less clear.
• Isn't it useful to confirm this bug has full access to every app & not just a restricted view of a Safari results page?
• Siri can be deactivated on the lock screen - that should immediately stop the issue not a fix, but it should help secure devices that are seeing the bug.

Sorry if this is all useless, it just strikes me that a methodical approach covering the possible 'gotchas' might actually help?

I'm not able to reproduce the issue. I asked the same thing which shows the Web Search. I click on a web page and it comes up asking me for Touch ID or to enter the passcode. I also have an iPhone 6 running iOS 8.1.2.

jnachez wrote:

All I'm doing is holding the home button *while phone is locked* for 1 sec, ask a question then proceed to an answer and then WALA.This bug doesn't work with my iPad Air only my iPhone.

You're probably holding the home button that you use for touch id.

Use a different finger and see if it happens.

jnachez wrote:

All I'm doing is holding the home button *while phone is locked* for 1 sec,

My point exactly: this is how you unlock the phone. You don't have to press the power button and be told to "slide", you can equally well fire up the phone and unlock it by simply holding down the home button. Try it using a finger that the phone doesn't know about.

jnachez wrote:

This bug doesn't work with my iPad Air only my iPhone.

Because your iPad Air doesn't have Touch ID. That's only available on iPhone 5S and higher, iPad Air 2 and iPad Mini 3.

Try putting on a glove and/or using a non-registered finger. Or press down on the Hoe Button with the tip of an eraser.

It's not a bug. You are unlocking your iPhone with your finger via Touch ID.

This is where you say, "Oops, my mistake".

It may be worth disabling Touch ID so that you can test without it. I'd also suggest rebooting the device to be 100% sure that it is locked. Can you actually browse you web history & go to other apps?

Siri can be disabled from working on the lock screen…

Settings > Passcode > Disable Siri in the "Allow access when locked" section.

I'm looking at iOS 7, so please dig into your settings if it is different on iOS 8.

Siri has many issues like this – as her to call you 'fartface' from the lock screen 🙂

The poster by his own admission ("All I'm doing is holding the home button *while phone is locked* for 1 sec,") is unlocking the phone by holding down the Home button to access Siri. Why is everybody trying to complicate this??

So far we've just had people offer possible solutions or assume the OP is doing something wrong. Are others able to test this on their iPhones to see if they can replicate the behavior? I tested it and when clicking on the website I was prompted for my passcode or Touch ID. I was unable to replicate it but wondering what others are experiencing.

anypats wrote:

So far we've just had people offer possible solutions or assume the OP is doing something wrong. Are others able to test this on their iPhones to see if they can replicate the behavior? I tested it and when clicking on the website I was prompted for my passcode or Touch ID. I was unable to replicate it but wondering what others are experiencing.

OP needs to disable Touch ID and then try again. He's likely using a finger or fingers that have been registered to Touch ID.

TJBUSMC1973 wrote

OP needs to disable Touch ID and then try again. He's likely using a finger or fingers that have been registered to Touch ID.

OP already said the same thing happens when doing that.

Apologies Drew - I wasn't specifically aiming at you, you were just in the firing line! 🙂

There is no bug. The phone is reacting normally to a known finger being held on the Home (and fingerprint sensor) button. It's the only way I ever switch on and ID myself to my iPhone, with a single action.

anypats wrote:

TJBUSMC1973 wrote

OP needs to disable Touch ID and then try again. He's likely using a finger or fingers that have been registered to Touch ID.

OP already said the same thing happens when doing that.

OP never said they disabled Touch ID.

I tried it on mine, used a finger not registered with Touch ID, asked how many cities California has, touched one of the web suggestions and it opened the access screen wanting my passcode or to use Touch ID.