Although iOS 13 hasn't been released until September 19, but a bug has been discovered that allows a hacker to see contacts even if the iPhone is locked.
Jose Rodriguez, a security researcher who discovered a gap in Apple's operating system. In the video on YouTube he shows by making FaceTime calls and then activating the Siri VoiceOver feature iPhone users can obtain access to the contact list on the owner of the cellphone.
So this makes it possible to provide hackers with a list of phone numbers, e-mail addresses, street addresses and more all without having to create an iPhone device key.
Nevertheless for the photos of the owner of the cell phone can still be protected. VoiceOver allows Siri to read text that appears on the iPhone's screen and is considered an accessibility feature for those who are blind or have visual impairments.
"I have sent a video showing the vulnerability to Apple on July 17," Rodriguez said.
This appears in the iOS 13 Gold Master (GM) version which will be distributed next week. Using the GM iOS version 13 on the iPhone X, The Verge is able to duplicate screen lock shortcuts.
Last year, Rodriguez discovered a similar exploitation on iOS 12.1, which allowed hackers to not only access phone user contacts, but also photos from cellphone users.
Apple then patch this problem in the next update. VoiceOver also plays a role in other similar exploits that allow hackers to see iPhone user contacts with iOS 8 installed.
As Rodriguez discovered last year, a vulnerability in the new iOS 13 requires the hacker to hold the user's iPhone for a long time to complete the entire hacking process. In addition, it also requires a second cell phone to be able to make FaceTime calls with the user's iPhone. Apple is expected to be able to patch bugs on iOS 13 before officially launching it on 30 September.
No comments