Siri Will Tell People Where You Live

Originator:justatheory
Number:rdar://15898098 Date Originated:23-Jan-2014 04:56 PM
Status:Closed Resolved:Duplicate 9923605
Product:iOS Product Version:6.0
Classification:iPhone/iPod touch Reproducible:Always
 
Summary:
Siri will happily tell anyone who asks the home address of the owner of an iPhone, without requiring the phone to be unlocked. This might be reasonable if no security code is set, but if one is set, it seems unfortunate.

Steps to Reproduce:
1. Steal an iPhone
2. Activate Siri
3. Say, “Take me home.”
4. Write down the address
5. Until the phone is remotely wiped, follow Siri's directions to the address.
6. Steal more stuff.

Expected Results:
If the phone is locked, any request for personal information should require that the phone be unlocked before revealing that information.

Actual Results:
Siri tells the bad guys where to find me!

Version:
iOS 6+

Notes:


Configuration:


Attachments:

Comments

My reply to product-security@apple.com

Hi Brandon,

I do not wish to disable Siri when the device is locked. She is very useful there! I would like her to be more circumspect, however, and not reveal my address or phone number or other personal information. Better would be if she had a way to send an email to the owner of a device without revealing personal information about the owner of a device. This would allow me to have the phone send an email to the owner of the phone, if I happened to find it left on a bus or something, but would not tell me the address to which the email was sent.

Call it a feature request.

Thanks,

David

By justatheory at Jan. 31, 2014, 11:09 p.m. (reply...)

Reply from product-security@apple.com

Follow-up: 603278951

Hello David,

Thank you for your report.

iOS security settings allow you to disable Siri when your device is locked, if desired. If you wish to do this, in Settings, under General, Passcode Lock, set the Siri switch to Off.

Best regards, Brandon Apple Product Security

By justatheory at Jan. 31, 2014, 11:09 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!