MacRumors

A Siri vulnerability that allowed access to a user's photos and contacts on a locked iPhone running iOS 9.3.1 was patched server-side this afternoon by Apple.

Shared last night by Jose Rodriguez, the vulnerability used Siri's ability to access Twitter to find an email link or phone number, which could be pressed to open up an editable list of contacts even on a device that was locked. Through access to contacts, a user's full photo library was also visible.

As seen in the video below, the vulnerability relied on asking Siri to perform a Twitter search. If an email address, phone number, or other contact related detail came up, it would give direct access to Photos and Contact data. While the method worked on the iPhone 6s as of this morning, it is now disabled on all devices because it is no longer possible for Siri to conduct a Twitter search on a locked device.

When using a locked iPhone, asking Siri to "Search Twitter" now results in the personal assistant saying "You'll need to unlock your iPhone first." Without the ability to search Twitter on a locked device, there is no way to get the exploit to work. Apple confirmed the fix in a short statement given to The Washington Post.

According to 9to5Mac, a second Siri-related bug was also fixed today. Previously it was possible to enable both Night Shift and Low Power Mode by asking Siri to enable Night Shift after Low Power Mode was turned on, but that is no longer possible. Siri now warns that turning on Night Shift requires turning off Low Power Mode.

In early iOS 9.3 betas, Night Shift did work with Low Power Mode, but in iOS 9.3 beta 4, Apple removed the functionality. Night Shift and Low Power Mode cannot be run simultaneously.

The United States Federal Bureau of Investigation is still working on analyzing the information found on the iPhone of San Bernardino Shooter Syed Farook, reports The Wall Street Journal. FBI general counsel James Baker shared news on the iPhone earlier today at the International Association of Privacy Professionals conference, where he said it's too early to tell if the data on the device is useful.

"We're now doing an analysis of that data, as we would in any other type of criminal terrorism investigation,'' Mr. Baker said, adding: "That means we would follow logical leads." But because the agency has only had access to the data for a short period of time, he said "it's simply too early'' to say whether anything found on the phone has been valuable to investigators.

After a very public legal battle in which the FBI obtained a court order demanding Apple help the government unlock the iPhone used by Farook in a December shooting in San Bernardino, the Justice Department last week announced it had found an alternate method to gain access to the iPhone in question and dropped the lawsuit.

While the FBI has not shared how it was able to unlock the iPhone, nor shared details on what was found, it is believed Israeli mobile software developer Cellebrite, a company that offers "mobile forensic solutions," was enlisted to break into the device.

According to Baker, the FBI has not decided whether or not it will divulge details on what was found on the iPhone and will not make a decision on whether to do so until the full analysis is complete on both the device and the cracking tool used to unlock it.

It remains unclear if the hacking method used to break into the iPhone is only viable for the iPhone 5c used by Farook, but in a previous piece, The Wall Street Journal said the FBI is testing to see if it can be used to unlock other versions of the iPhone.

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Bernie Sanders, candidate for the 2016 Democratic presidential nomination in the United States, was today queried about Apple in an interview with the Daily News, where he commented on the company's manufacturing policies and rumors that Apple dodges taxes.

When asked if Apple is part of corporate America that is "destroying the fabric of our nation," a question inspired by statements made by Sanders' himself, Sanders said he does not believe that to be the case, instead pointing the finger at big banks like JPMorgan Chase and corporations like General Electric. He went on to clarify that he would, however, like Apple to move manufacturing of some devices to the United States and pay a fair share of taxes.

No, Apple is not destroying the fabric of America. But I do wish they'd be manufacturing some of their devices, here, in the United States rather than in China. And I do wish that they would not be trying to avoid paying their fair share of taxes.

Sanders is not the first presidential candidate to comment on Apple's manufacturing policies, with Donald Trump also claiming he would force Apple to manufacture its products in the United States.

Though the bulk of Apple products are manufactured overseas, Apple has in fact made an effort to move some production jobs back to the United States, something that Sanders and Trump both appear to be unaware of. Apple's Mac Pro line of computers is assembled by Flextronics in Austin, Texas, an effort that cost Apple $100 million. Many third-party components used in Apple devices are also created by suppliers located in the United States, as Re/code points out. Corning's Gorilla Glass, used in iPhones and iPads, is made in Kentucky, for example.

In a December interview with Charlie Rose, Apple CEO Tim Cook gave some color on why Apple products are made in China. "It's skill," he said, going on to explain that China has focused heavily on training people to create machinery and parts for electronic devices.

The US, over time, began to stop having as many vocational kind of skills. I mean, you can take every tool and die maker in the United States and probably put them in a room that we're currently sitting in. In China, you would have to have multiple football fields.

When it comes to taxes, Tim Cook has previously said that Apple pays all of the taxes that it owes. During the same December interview, he said accusations Apple avoids taxes on revenue held overseas is "total political crap." "There is no truth behind it," he said. "Apple pays every tax dollar we owe."

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Apple this morning launched a new Twitter account for Apple News, giving its Apple News team a way to promote stories and content on the social network. Created last year but activated today, the Apple News Twitter account will be used to share "top stories" and "great reads" curated by Apple News editors in the United States.

Thus far, the account has shared two new stories covering the Panama Papers and an NCAA Tournament championship game from publishers Wired and SBNation.

Apple has recently been bolstering its presence on Twitter, and the Apple News Twitter account joins accounts for services like Apple Music, Beats 1 radio, iTunes, the App Store, iBooks, Podcasts, Swift, and more.

Apple's biggest push into Twitter came last month with the launch of the Apple Support account on the social network, which is dedicated to answering customer support questions. Though Apple has multiple Twitter accounts for support and services, it does not have a main company-wide @Apple Twitter account in use, but many Apple executives maintain personal Twitter accounts including Tim Cook, Phil Schiller, and Eddy Cue.

Sony today announced plans to bring the PlayStation 4's Remote Play capabilities to the PC and Mac through an update that will be released tomorrow. With the update, PS4 owners will be able to play games remotely through a PC or a Mac.

Remote Play is a feature that lets the PlayStation 4 send audio and video to a peripheral device, but it was previously only compatible with Sony's handheld console, the PlayStation Vita, the PlayStation TV set-top box, and select Sony smartphones and tablets. Remote Play has been around since the PlayStation 3 and the PSP, but Sony has never made an effort to expand it before.

The decision to bring Remote Play to PCs and Macs comes after Microsoft introduced a remote gameplay feature for the Xbox One, allowing Xbox games to be played using a PC that runs Windows 10. Sony's feature is more robust as it also works with Macs and it works remotely -- the Xbox game streaming feature requires a connection through a home network.

Sony makes Remote Play compatibility a requirement for all PlayStation 4 games that don't use peripherals, so most users will find that their entire PS4 game catalogs can be streamed to a Mac or PC.

On Macs, Remote Play will work with the latest versions of Apple's OS X operating system, OS X 10.10 Yosemite and OS X 10.11 El Capitan. On PCs, the feature is compatible with machines running Windows 8.1 or 10 or later. A single DualShock 4 controller can be connected to a PC or Mac via a USB cable to serve as the gameplay controller for Remote Play.

Games can be played in several resolutions and at several frame rates, adjustable based on Internet bandwidth. Resolution defaults to 540p, but can be changed to 360p or a max of 720p. The default frame rate setting is 30fps, adjustable to 60fps.

Remote Play will be available as soon as the PlayStation 4 is updated tomorrow. Once the update goes out, Mac and PC users will be able to download the software to enable the feature from the PlayStation Remote Play website (download is not yet live).

A video surfaced online yesterday purporting to show a vulnerability in iOS 9.3.1 that allows anyone to access photos and contacts on a locked iPhone without having to enter a passcode.

The YouTube video, uploaded by Jose Rodriguez and first spotted by The Daily Dot, depicts a user performing a Siri search followed by a series of relatively simple steps, one of which involves 3D Touch, limiting the exploit to iPhone 6s and 6s Plus devices.

The procedure starts by invoking Siri on the locked phone by holding the home button or using the "Hey, Siri" function, and then asking the personal assistant to initiate a Twitter search. When the returned results include contact details such as an email address, a 3D Touch gesture is used on the contact information to bring up a Quick Actions menu. Tapping "Add to Existing Contact" then brings up the iPhone's Contacts list. By selecting a contact and opting to add a photo to the entry, the phone's photo library can also be freely accessed.

The flaw is only applicable if the iPhone owner has previously granted Siri permission to access Twitter account information as well as to Contacts or Photos, operations which require establishing ownership of the device with the passcode or Touch ID. Additionally, if the iPhone has exited a Touch ID grace period, a passcode is still required before using Siri.

Users worried about the vulnerability can protect themselves by ensuring Siri's access to Twitter and Photos is disabled. On your device, go to Settings -> Privacy -> Twitter and if Siri is listed, turn off its access. Likewise, in Privacy -> Photos, turn any listing of Siri access to the Off position. Revoking Siri's access to your Contacts requires the more drastic action of disabling Siri lock screen activation. To do so, go to Settings -> Touch ID & Passcode and turn off the Siri switch.

Apple released iOS 9.3.1 to the public last week, marking the first update to iOS 9 since iOS 9.3 launched on March 21. iOS 9.3.1 came just over a week after the launch of iOS 9.3 and brought a fix for a significant web link crashing issue that affected many iOS users.

Barclays appears to have enabled much-anticipated support for Apple Pay in the United Kingdom during the early morning hours on Tuesday.

A growing number of Barclays customers on Twitter have been successfully able to add their debit or credit cards from the large British bank to Apple Pay since shortly after midnight local time.

Barclays was notably absent from the list of banks and participating issuers supporting Apple Pay when the mobile payments service first expanded to England, Scotland, Wales, and Northern Ireland in July 2015.

Barclays cardholders can set up Apple Pay through the Wallet app on iOS 8.1 or later. Bank-issued cards can be scanned or added manually by tapping the "Add Credit or Debit Card" option. Follow the on-screen verification steps.

Apple Pay is also supported at Bank of Scotland, First Direct, Halifax, HSBC, Lloyds Bank, M&S Bank, MBNA, Nationwide, NatWest, Royal Bank of Scotland, Santander, Tesco Bank, TSB, and Ulster Bank in the United Kingdom.

When a customer buys an Apple product in an Apple retail store, it's packaged in a white plastic drawstring bag emblazoned with an Apple logo, something that's become an iconic part of the Apple experience. Starting later this month, Apple is introducing changes to its bagging policy, phasing out plastic bags in favor of a more environmentally friendly paper option.

Apple is planning to switch from the plain white plastic bags to paper bags made from 80 percent recycled materials, which Apple says will further its goal of leaving the world "better than we found it." Apple informed employees of the impending change in a note, which was shared by 9to5Mac.

In addition to handing out paper bags, employees are also being asked to adopt a new policy of querying customers as to whether a bag is needed at all instead of simply providing one.

We're committed to leaving the world better than we found it. One bag at a time. So on April 15, we'll switch to paper shopping bags made from 80 percent recycled materials. These bags come in medium and large.

When customers are buying a product, ask if they need a bag. They may decide they don't. And you'll encourage them to be even more environmentally friendly.

If you still have plastic bags in stock, use them before you switch to the new paper bags.

While Apple will begin offering the new bags on April 15, employees have been instructed to continue to use all of the available stock of plastic bags before switching to paper. Once the supply is exhausted, the new paper bags, the design of which is unknown, will be used exclusively.

Given Apple's focus on recycling, clean energy, and reducing its carbon footprint, the company's switch from plastic to paper should come as no surprise. Apple already focuses on minimizing packaging size for its products from iPhones to Macs and two-thirds of the paper used for packaging is from recycled content with the rest sourced from sustainable forests.