Why doesn't iPhone need a password to see SMS photos?

Why doesn't iPhone need a password to see SMS photos? Let me introduce you to Bian Xiao, the 2345 software encyclopedia.

First of all, practical tutorial

This vulnerability was discovered by EverythingApplePro and iDeviceHelPS, and this "tragedy" began with Siri:

1, get the owner's mobile phone number.

How to get it? Just ask Siri, "Who am I?" Your information may become clear-in this case, your mobile phone number. The editor personally tested it, and the first time it failed:

However, if you have followed this setting, the pop-up interface is like this (Siri just sold my mobile phone number):

2. Call the victim number obtained in the first step, or even use FaceTime to make a phone call.

3. Click on the message, customize it (the "New Message" screen pops up), and enter a reply. Activate Siri with the Home key, say the voice command "Enable VoiceOver", and then return to the information screen.

The next step may not be successful once, but it may be successful after many attempts. Double-click and hold the input number field, and then click the keyboard immediately. Repeat this operation several times until the slide-in effect appears above the keyboard, and then say "disable voiceover" to Siri.

4. Enter the initials of the contact in the top bar, and then click the round "I" icon on the name. Create a new contact, click Add Photo, and then select a photo.

Even if the iPhone is not unlocked, you can browse the photo albums of mobile phone users normally in this way. At the same time, you can also see related messages by selecting any contact.

Second, how to "defend" this BUG

Although Apple seems to know this bug, it has never been fixed. In order to ensure security and prevent people from seeing the secrets in the mobile phone, it is suggested to do the following: prohibit using Siri under the lock screen, find "Siri- lock screen access" in the settings and turn it off.

Softpedia predicts that this problem may be fixed in the official version of iOS 10.2. At present, systems from iOS 8 to the latest version of iOS 10.2 beta 3 are affected by this vulnerability.