iPhone’s Virtual Voice-activated personal assistant, Siri, has been discovered to having a bug which allows authorized users access your contacts and photos without having to input a password.
The bug allows users to gain access to your contacts and photos only if the original iPhone user has set up Siri to search their twitter accounts and photos app and if the original user had initially done a similar search.
In other to see the bug in action, while the iPhone is still locked, press and hold the home button till Siri launches. Ask Siri to do a twitter search. If the search contains data found in contacts like an email address, use 3D touch to click on ‘Add to existing contact’. The contact list will then be displayed and you can access the phone’s photo albums from there. You can watch the video below:
Hopefully, an update will be rolled over to fix this bug issue with the Siri virtual personal assistant. For now, you may want to go with disabling Siri for Twitter search and photos as indicated above.