Live data from Hacker News

Siri lets anyone use a locked iPhone 4S

cbsnews.com

11–20 of 30 posts

Re: Siri lets anyone use a locked iPhone 4S

#12
post #5

> It's pretty surprising that Apple has the default > set to be able to use Siri without unlocking the device. Siri is turned off by default, so this is actually a pretty misleading thing to say.

While Siri is turned off by default, it appears that Siri-while-locked might be turned on by default once Siri is enabled. I wouldn't enable it in the first place if I had seen it, so it was news to me when I saw that it was turned on when I went to change my passcode the other day.

If it's enabled in that manner by default and lets you bypass the lock screen, then there's a serious problem.

Re: Siri lets anyone use a locked iPhone 4S

#14
I also found that if you have iOS5 on an iPhone 4, the new camera button allows you to access apps and what-not without unlocking the phone - though it thinks its locked.

Double click the home button to get the camera icon, go to camera and press home button and you can access all apps.

But if you try to go to the photo gallery, the phone tells you its locked and wont go there.

Re: Siri lets anyone use a locked iPhone 4S

#15

I also found that if you have iOS5 on an iPhone 4, the new camera button allows you to access apps and what-not without unlocking the phone - though it thinks its locked. Double click the home button to get the camera icon, go to camera and press home button and you can access all apps. But if you try to go to the photo gallery, the phone tells you its locked and wont go there.

Incorrect. That only works if the device doesn't require a passcode to get past the homescreen.

Re: Siri lets anyone use a locked iPhone 4S

#16
post #4

Siri would be pretty annoying and useless if it required unlocking the phone to use it. If it's actually a bug, I sure hope they don't fix it, or at least make the "correct" behavior optional.

Shouldn't you be able to "tell" Siri a passphrase to unlock?

Agree that require unlocking is silly, but the whole point of locking is missing.

Re: Siri lets anyone use a locked iPhone 4S

#17
The phone iPhone passcode thing is kind of a joke, unfortunately -- it's fairly easy to extract the encrypted image from a locked phone, then brute force it. Since almost everyone just uses a 4-digit simple PIN, doing an exhaustive search is faster than syncing to iTunes.

What I'd really like is TPM-type security built into the phone (and used correctly) to protect from brute forcing a short authentication code, and maybe multi-factor auth. e.g. if the phone is inside my house or office (was on my secured wifi, hasn't moved), there can be less security (longer relock interval, shorter passcode, etc.) than if I am out and about. If there were a way to definitively link my phone to my car, I'd be fine with turning off all passcodes -- maybe due to bluetooth pairing or something.

Biometrics might actually make sense in phones, too, although I'm not sure how much I like the facial recognition in ice cream sandwich.

Re: Siri lets anyone use a locked iPhone 4S

#19

If you don't select the option to block Siri without entering a passcode, then you can use Siri without entering a passcode. Shocking.

It's that the option is enabled by default if you have Siri active. It's not obvious, and frankly, should be fixed.

Re: Siri lets anyone use a locked iPhone 4S

#20
post #4

Siri would be pretty annoying and useless if it required unlocking the phone to use it. If it's actually a bug, I sure hope they don't fix it, or at least make the "correct" behavior optional.

Shouldn't you be able to "tell" Siri a passphrase to unlock? Agree that require unlocking is silly, but the whole point of locking is missing.

> Shouldn't you be able to "tell" Siri a passphrase to unlock?

No, because that would encourage people to vocalize their passphrases.

Post reply on HN