A bypass method will be discovered in which all photographs in the locked iPhone and personal information are easily peeped.

Without releasing the lock screen of the iPhone, a bypass method was discovered that allows you to look up contact information and peek through all the photos in the device. This is unavoidable hole in the next update iOS 10.2 (beta 3), so Apple's measures are inevitable.

New Hack: How to Bypass iPhone Passcode to Access Photos and Messages
http://thehackernews.com/2016/11/iphone-hacking.html

The bypass method for accessing contacts and pictures in the terminal without entering the passcode is explained in the following movie.

How To Unlock ANY iPhone Photos Without Passcode! - YouTube


So I tried it as per the movie guide.

First, check the phone number of the locked iPhone. Press and hold the Home button to activate Siri.


Ask Siri "Who am I?", It will tell you the personal information of the owner of the iPhone.


Thanks to Siri I got the phone number of the iPhone.


Next, using another iPhone, Apple's video call application "FacetimeCall the phone number of the locked iPhone.


Tap 'Send message' which appears on the incoming screen without answering the call.


Tap "Custom".


The new iMessage screen has started.


Now press and hold the Home button to activate Siri again, call "VoiceOver On" to activate the VoiceOver function.


After turning on VoiceOver, tap the software keyboard at the same time while double-tapping the destination of iMessage screen → long pressed state.


If the timing matches, "Tool icon" will be slide displayed from the left. The timing is severe, so you need to repeat it over and over again. Furthermore, it was not possible to operate it successfully on the iPhone with the glass film pasted on the display.


Start Siri again, speak to "VoiceOver off" and turn off VoiceOver function.


Press the appropriate key on the software keyboard ......


Since contact list with initial key pressed is displayed, contact information in the terminal is made naked. In addition, find the one with the icon "i" on the right end of the screen in this contact information and tap it.


Tap "Create new contact".


Tap 'Add photo'.


Tap 'Select photo'.


I have access to photos inside the device.


If you select "All photos", you can view all photos in the device.


The bypass method discovered this time can be prevented by each setting below.

· Do not register "your information" in Siri
· Siri's "Access on lock screen" is invalidated
· Do not allow Siri to access "photos"
· Set the Siri function itself to OFF
· Disable FaceTime

By the way, it is also known that there is a case where there is a case where there is no contact which displays "i" icon when there are few registered contacts, and there is a case where it is possible to avoid peeping out of the picture.