Another wonderful security issue from Apple---
1) Set a passcode lock on your phone.
2) Lock your phone
3) Hit the home button to turn the screen on.
4) Hold the home button, wait for the Voice Control App
5) Call anyone from your contacts list without entering your passcode.
Brilliant!
I think this was already addressed, if you go back into the security you can hit a voice dial switch to turn it off while locked.
Ahh, good catch. I hadn't seen the option yet but you're 100% correct:
Settings -> General -> Passcode Lock -> Voice Dial
Thanks for the reply! I'm surprised that this is allowed by default as opposed to disallowed.
Thanks again for the info.
The idea behind voice dialing is you do not have to mess with too many steps in order to get it working, for example, when you are driving. Would you want to slide to unlock and then enter your 4-digit passcode while you are trying to activate voice control when you are on the wheel? I can certainly understand why Apple left it as the default.Quote:
Originally Posted by n1ckn4m3
I'm not saying that I don't agree with your specific logic here, but people (and then Apple) raised a large fuss about the fact that you could access someone's favorites list by double-tapping the home button from the Emergency Call screen and fixed it in their immediate next patch -- that shows me that somewhere, someone is whispering into their ear that allowing access to the contacts in the phone while it's locked is a bad idea...
The fact that it's not mentioned anywhere on the phone or in either of the two 'manuals' that are included with it ('finger tips'? seriously? and the regulatory book...) is somewhat of a faux pas. It would be one thing if the device was so good at voice recognition that it didn't find the 'closest match' and dial without regard to what you actually said. I tested with my fiancee and no matter what we said to it, we were unable to get it to 'not recognize' a command. Every time we said anything in it, it decided to call the 'closest match' from my phone book. Not aligned with their previous stance on security, I don't think...
Either way, as I said before, you have a point -- I agree that having it enabled by default is appealing because voice dialing is for ease of use -- and I agree that as a default, that would work if I had paired a bluetooth device or had a headset plugged in and they had reason to believe the device was not in hand.... But having it enabled by default on a device where the passcode is enabled effectively gives anyone a backdoor to dialing any contact in the phone (albeit at random, because you'd be amazed what the iPhone comes up with when you just say random things at it), and I think that goes against the whole premise of having a passcode on the device in general...