Problems with Apple's iOS 9.3 software show no sign of letting up, after an eagle–eyed user discovered a way to access photos and contacts on an iPhone without having to enter passcode information or use the device’s Touch ID sensor.
The security flaw appears to be related to Apple’s latest iOS 9.3.1 update, released just a week ago to fix issues with iOS 9.3.
By using the always–on ‘Hey Siri’ voice activation tool for iPhone 6s and iPhone 6s Plus, users can search Twitter to access posts with email addresses.
When the user then presses on the address using iPhone 6s’s 3D Touch tech, a menu appears offering the chance to add the addressee as a contact.
It’s at this point that users can see the full contacts list and add images for a new contact by scrolling through an iPhone’s entire photo library. All of this without having to go through security.
The flaw is limited to Apple’s two top–end iPhones and only works if users have adjusted their settings to allow Siri to search Twitter.
To fix the glitch, iPhone 6s and 6s Plus owners should go to the Privacy menu in the Settings app and disable Siri within Photos and Twitter.
Apple has yet to comment on the problem, but expect an official update to fix it in the coming weeks.