Many people thought that the iOS 9.3 dilemma was over after Apple launched iOS 9.3.1, but it was not. A user found it out and posted the security flaw through a video demonstration. This security flaw allows any person to look at photos and contact lists by simply using Siri.
There are very specific conditions that need to be met in order to use this exploit. According to the video, this will only work specifically on 3D-equipped iPhones, which are the 6s and the 6s Plus, then while holding the Home button, call Siri up, and a Twitter search is required for an email address. With the results of the search, a 3D Touch gesture is again used to access the contact information, and after selecting the "Add to Existing Contact" option, the iPhone's contact list will then show up. While within the contact list, adding a photo to the entry will also bring up the phone's image library, thus giving access to the photos of that particular iPhone owner.
It was reported by Macrumors that this situation will only be applicable if the iPhone owner previously granted the intelligent assistant to access Twitter account information. However, The Washington Post reported that, when they conducted their own test, disabling Siri's Twitter access does not fix the problem.
Moreover, the YouTube channel owner, videosdebarraquito, whose Twitter account is named after Jose Rodriguez, has other videos that show other ways to gain access to particular areas of the iPhone's iOS. Many of them involve Siri. Rodriguez also suggested that Apple should start offering a "bug bounty" program that offers monetary rewards for persons discovering bugs for the tech giant.
However, also according to The Washinton Post report, the issue has been fixed since Tuesday morning and users should not be worried about it any longer. No specific software update is needed for the said issue.
