iOS to expose new Siri vulnerabilities bypass password access Address Book

"TechWeb Report" May 6 news, according to foreign media reported that the IOS 7.1.1 in addition to the previous exposure of the mail vulnerabilities and then add a new loophole, so that anyone can easily bypass the lock screen password access to the Address book, and can directly call or send text messages. At present, iOS 7.1.1 can be locked in the case of bypassing unlock password directly access to the Address book, and through the Voice assistant Siri can be achieved, the method is very simple. When you do not know the lock screen password, the home key calls Siri, calls the king or call A (any English initials), you can call all of the surname phone, the focus is to click on the other after the direct access to all the Address book. Siri itself has restricted address book permissions, such as direct access to the address book via Siri, prompting you to enter a password to unlock. The method in the vulnerability, then, is to retrieve all users of the relevant last name through the boot of the last name. Through this vulnerability, anyone can easily view and call the lock screen all the address book personnel, set up a similar method can also send text messages or mail to everyone.