Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cracking Siri

applidium.com

Post reply on HN
Print view View original

11–20 of 105 posts

Re: Cracking Siri

#11

Post by X-Cubed »

LeafStorm wrote: post #4

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

They're possibly just reusing their existing HTTP request libraries for creating the request. But bear in mind that with an HTTPS connection, once the secure session has been established you can send anything you like over it. There's nothing to enforce strict HTTP over an HTTPS connection.

That's how tools like Corkscrew can tunnel SSH (and practically any other TCP-based protocol) over an HTTPS connection.

Re: Cracking Siri

#13

Post by hmottestad »

victoknight wrote: post #5

guess who doesn't verify the root CA. Think of all the fun to be had with a Siri man-in-the-middle

You can add a root CA to both linux and os x. No problems. Though on an iPhone you'll have to jailbreak it first...so I guess apple didn't think of that, or they don't care.

Re: Cracking Siri

#14

Post by planb »

hmottestad wrote: post #13
victoknight wrote: post #5

guess who doesn't verify the root CA. Think of all the fun to be had with a Siri man-in-the-middle

You can add a root CA to both linux and os x. No problems. Though on an iPhone you'll have to jailbreak it first...so I guess apple didn't think of that, or they don't care.

No, you don't. Installing a root ca an iOS device is as easy as sending it via mail to the device and then clicking on it (with a few more clicks to confirm).

edit (because I can't reply): It does show a big warning and you have to enter the device unlock code to do this, so it should be reasonably safe.

Re: Cracking Siri

#15

Post by randomdata »

LeafStorm wrote: post #4

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

Did Apple re-implement the protocol to be HTTP-like, or is it a holdover from before the acquisition of Siri?

Especially when you are a startup, building the perfect protocol isn't your biggest concern. Being able to reuse already existing components like load balancers and connection libraries allows you to get your MVP out sooner.

Re: Cracking Siri

#16

Post by jodrellblank »

icebraining wrote: post #10
sjs wrote: post #6

Earlier quoted context omitted.

Probably so it'll work through strict proxies.

Since it's HTTPS, those proxies can't see the traffic anyway, so as long as they used SSL on port 443, they could use any protocol on top.

They potentially can; commercial firewalls can man-in-the-middle HTTPS traffic with a locally signed and organization-computer-trusted SSL certificate.

Re: Cracking Siri

#18

Post by planb »

sjs wrote: post #6
LeafStorm wrote: post #4

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

Probably so it'll work through strict proxies.

Unfortunately, Siri does not use the system wide proxy. At least it does not on my iPhone. I tried intercepting the traffic with sshmitm which did work for all other iOS services (e.g. game center) but not for Siri. I'm wondering how these guys sniffed the traffic.

Re: Cracking Siri

#19

Post by icebraining »

jodrellblank wrote: post #16
icebraining wrote: post #10

Earlier quoted context omitted.

Since it's HTTPS, those proxies can't see the traffic anyway, so as long as they used SSL on port 443, they could use any protocol on top.

They potentially can; commercial firewalls can man-in-the-middle HTTPS traffic with a locally signed and organization-computer-trusted SSL certificate.

Yes, you're right, in fact I found a few weeks ago that even Squid can do that.

Re: Cracking Siri

#20

Post by hmottestad »

planb wrote: post #14
hmottestad wrote: post #13

Earlier quoted context omitted.

You can add a root CA to both linux and os x. No problems. Though on an iPhone you'll have to jailbreak it first...so I guess apple didn't think of that, or they don't care.

No, you don't. Installing a root ca an iOS device is as easy as sending it via mail to the device and then clicking on it (with a few more clicks to confirm). edit (because I can't reply): It does show a big warning and you have to enter the device unlock code to do this, so it should be reasonably safe.

Hmm. That sounds like a big security hole. Phishing attacks in particular. Though I guess the extra clicks should discourage users.
Post reply on HN