Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

Post reply on HN
Print view View original

131–140 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#131

Post by Kye »

josephg wrote: post #126
pftburger wrote: post #33

Earlier quoted context omitted.

Seconded. I get way too many "Im sorry Dave, I just can't do that" moments

I've given up asking her arbitrary questions - the other day I asked what the weather was like in Sydney. (I live in Australia, so the context is really obvious). She told me what the weather was like at "Sidney's tool shed" - wherever that is. But I use siri daily for things like: - Setting and stopping alarms and timers: ("Hey siri - set alarm for tomorrow morning at 9:25" / when the alarm goes off: "Hey siri stop"…

Siri handles this fine on my new phone from the opposite end of the globe. This seems to support my suspicion that they ship increasingly less sophisticated Siris to increasingly older phones. Siri on my 6S Plus before this became almost useless once they switched to on-device processing. It's also much better at identifying objects in photos for searches.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#132

Post by TheLoafOfBread »

dylan604 wrote: post #130
TheLoafOfBread wrote: post #105

Earlier quoted context omitted.

That really depends how will judge and lawyers look on it.

Or the words used in the negotiation. "I feel the work done to discover this bug is worth $X" vs "You'll give me $X or I release it into the wild or sell it on the black market"

Yeah, let's be realistic. It will be either take the meager offer or we will subpoena it from you for free. Don't like it? Sucks to be you.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#133

Post by JKCalhoun »

throwaway290 wrote: post #90
aquajet wrote: post #79

Earlier quoted context omitted.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

I use dictation a lot, I hate typing on touchscreens and hate voice messages.

Ha ha, worse, I use it so often in Messages that when I leave an actual voice mail I say out loud, “Period” to end a sentence.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#134

Post by metafunctor »

SamuelAdams wrote: post #124
cstejerean wrote: post #15

Earlier quoted context omitted.

Even worse, it looks like on MacOS you can just straight up start recording on-demand, no need for dictation or siri. > Even worse, this particular exploit would also allow the app to request DoAP audio on-demand, bypassing the need to wait for the user to talk to Siri or use dictation.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

No post body was provided.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#135

Post by dylan604 »

TheLoafOfBread wrote: post #132
dylan604 wrote: post #130

Earlier quoted context omitted.

Or the words used in the negotiation. "I feel the work done to discover this bug is worth $X" vs "You'll give me $X or I release it into the wild or sell it on the black market"

Yeah, let's be realistic. It will be either take the meager offer or we will subpoena it from you for free. Don't like it? Sucks to be you.

Oops, I was trying to install a used HDD and wanted to make sure it was clean with the forensic 7x write option, but I chose the wrong device from the CLI and wiped out the data you're too cheap to pay for

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#136

Post by concinds »

runjake wrote: post #85

A $7,000 bounty for eavesdropping and TCC (app permissions) vulnerabilities. Insulting.

Not just insulting to the dev, but to users as well. Any app on my Mac being able to eavesdrop at all times when wearing AirPods is "worth" just $7k to Apple?

I'm reminded about the Apple Music passage in the After Steve book, where Apple tried to fuck over musicians just because they thought they could get away with it (zero royalty payments during Apple Music trials, so the trial was 100% subsidized by labels and artists), before walking it back. The executives are clearly far more concerned with bad PR, and not guided by values or principles.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#137

Post by spaghettiToy »

metafunctor wrote: post #134
SamuelAdams wrote: post #124

Earlier quoted context omitted.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

Quoted post unavailable.

No post body was provided.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#138

Post by concinds »

crazygringo wrote: post #125
TheJoeMan wrote: post #61

Earlier quoted context omitted.

I think you missed the end of the article where any MacOS app could turn on your AirPods microphone without any permissions at all and at any time at all.

No it can't. It's only during Siri commands and dictation. It's not always-on. Edit: NEVER MIND, that's correct, sorry. Why the heck does the article put the most dangerous part only at the end, and not include it in the tl;dr or anywhere else at all...??

Wrong, read it again.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#139

Post by [deleted] »

concinds wrote: post #138
crazygringo wrote: post #125

Earlier quoted context omitted.

No it can't. It's only during Siri commands and dictation. It's not always-on. Edit: NEVER MIND, that's correct, sorry. Why the heck does the article put the most dangerous part only at the end, and not include it in the tl;dr or anywhere else at all...??

Wrong, read it again.

[deleted]

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#140

Post by alphabetting »

freeplay wrote: post #11
QuackyTheDuck wrote: post #4

Sigh … I so much want Apple to get their shit together. To me it feels like software quality reached a new low.

Couldn't agree more. As stupid as it may be, the only reason I haven't moved to Andoid/GrapheneOS is iMessage.

that's the main reason for most iphone users i know and exactly why Apple will stall for as long as possible on RCS compatibility
Post reply on HN