iOS siri security

Question

Level 1

0 points

iOS siri security

Actually not a question but a warning.

There have been some warnings about unlocking the iPhone using a stolen Fingerprint. Not that easy. In fact it's it far more simple as that. Everyone using Siri and allowing it to be used on an locked screen is affected. If you use those setting it's as simple as this:

On the lock screen ask : "Who am I". Siri will show you who you are. Then choose to write a message. Just quit the message center and you'll be on the home screen and can do anything you want to do. An effective way to bypass fingerprint or code.

Don't know if this is the right forum to post ist but I couldn't find a discussion for IOs security problems. It works on my 5s running iOS 8.2 but it has worked before. I don't know where to report this security issue.

iPhone 5s, iOS 8.2, null

Posted on Apr 2, 2015 3:12 AM

Reply

Answer 1

AKRBTN

Level 6

8,311 points

Apr 2, 2015 3:23 AM in response to HishiSan

How are you actually activating Siri?

Reply

Answer 2

HishiSan Author

Level 1

0 points

Apr 2, 2015 3:30 AM in response to AKRBTN

In fact I deactivated Siri altogether because of I found this. I think this was the preset. It happens when you enable Siri and then choose enable Siri in the lock screen with Settings->Touch Id &code->Siri. As said if I remember correctly it is the preset. Please try and second if it's true for you.

Reply

Answer 3

Apr 2, 2015 3:36 AM in response to HishiSan

So, you are using YOUR fingerprint to unlock YOUR phone, while activating Siri? Doesn't sound like much of a security issue to me.

Reply

Answer 4

HishiSan Author

Level 1

0 points

Apr 2, 2015 3:38 AM in response to stedman1

Alright, just give me a few minutes. I'll try if it works without fingerprint enabled.

Reply

Answer 5

HishiSan Author

Level 1

0 points

Apr 2, 2015 3:43 AM in response to HishiSan

Ok. If fingerprint is disabled it asks for the code again. So everyone using fingerprint is affected. Don't know how many people are affected. But I still think it's a security issue because I guess most people aren't aware.

Reply

Answer 6

Apr 2, 2015 3:45 AM in response to HishiSan

And what happens if a different person attempts the same procedure using Siri, with Touch ID enabled?

Reply

Answer 7

AKRBTN

Level 6

8,311 points

Apr 2, 2015 3:47 AM in response to HishiSan

Try activating Siri with a finger/thumb which is NOT one of your Touch ID ones.........

Reply

Answer 8

HishiSan Author

Level 1

0 points

Apr 2, 2015 3:48 AM in response to stedman1

As said before. It doesn't matter. All you have to do is ask "Who am I?" Doesn't matter who is asking. I asked ma sister to say : "Who am I?" and it worked. She could get access to my phone.

Reply