Apple iOS 5.0.1 Security Bug Allows Anyone To Make FaceTime Calls From Your Locked iPhone

We’re able to trick Voice Control to enumerate through the private address book and make live FaceTime video calls on a locked iPhone 4, even with Voice Dial specifically disabled in the settings.

After enabling passcode, turning off voice control and setting the higher security settings, he could make calls from emergency page, as he sends commands through voice control without entering passcode. He couldn’t make voice calls, he could only make FaceTime calls.

Now Voice Control leaks that I have two numbers for Lisa Klein: her “mobile” and another number at the “love shack“. Had this been my jealous girlfriend probing my locked phone, I would’ve been totally busted! Remember, we’re getting all this info from a locked phone with Voice Dial explicitly disabled. So far we’ve only enumerated through the Contacts. Can we actually complete a call from the locked phone? With FaceTime, the answer is yes! Again starting from the Emergency Call screen, this time I say, “FaceTime”.

iPhone 4S users are infected with this trick in case they turned off Siri.