Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

151–160 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#151

Earlier quoted context omitted.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

The internal microphone is entirely unrelated to this bug.

It's not this bug that's the reason he has the internal microphone disconnected. It's the presense of such bugs...

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#152

Earlier quoted context omitted.

I use dictation a lot, I hate typing on touchscreens and hate voice messages.

Ha ha, worse, I use it so often in Messages that when I leave an actual voice mail I say out loud, “Period” to end a sentence.

Same happened to me most times I tried to use voicies. Question marks, commas, full stops...

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#153
post #93
post #85

A $7,000 bounty for eavesdropping and TCC (app permissions) vulnerabilities. Insulting.

This is why people sell bugs.

It's an example of why people report bugs to vendor bounty programs since you could not sell this bug for $7000.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#154
post #79

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

To throw in my anecdote: very frequently. I've been using it since I first saw it as an option in 2013. Only on my phone, never on my laptop.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#155

Earlier quoted context omitted.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

Quoted post unavailable.

>I'm talking about national security level sensitive things, not your little brothers surprise birthday plans...

You added "national security level sensitive things", not the parent. There are thousands of subjects one might not want to be eavesdropped on that are not "national security level sensitive things".

Not to mention "national security level sensitive things" are not that far-fetched either. Not everybody lives a life as uniteresting as you imagine.

What about a activist or a mere vocal critic living in an opressive regime? Or a politician with enemies in the other party (happens all the time, and judging from Watergate and Hoover, also happens in the US)? Or an investigative journalist talking with his sources for that matter? Or how about a businessman discussing some multi-million dollar deal, or an investor?

Heck, how about a developer with several NDAs, in some major role in a big company, perhaps a FAANG one - like hundreds of people on HN?

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#156

Earlier quoted context omitted.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

Quoted post unavailable.

> hardware you cannot trust?

So... hardware?

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#157

Earlier quoted context omitted.

And this is why I have the internal microphone disconnected on my macbook pro. The only time a mike is attached is when I'm actively using it, and even then they have hardware kill switches. Simple kill switches would be nice to see but I doubt Apple would ever implement something like that.

Quoted post unavailable.

I talk about my personal life (including such topics as my marriage and other things) quite often, and I don't want others to be able to record those conversations.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#158
post #143

Earlier quoted context omitted.

I mean, you might be surprised but I'm sure there are more than a few users on HN that discus digital security configurations of large companies in their day jobs. I've been party to more than one conversation where some company unintentionally opened a security flaw for a short period of time that we discussed over a meeting, that if some evil 3rd party listened to may have gave them a window to exploit services.

The probability of someone just happening on that conversation while listening in, at just the right time, to just the right security engineer of the many security engineers in the company, approaches the probability of someone accidentally discovering the security flaw on their own. I think. It's hard to know with probabilities that are vanishingly small.

Winning lotteries is very small, as in better chance you are struck by lightning multiple times in you life, but it happens.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#159
post #75

Earlier quoted context omitted.

I use Siri to set a timer. That's it. And I do it by holding my power button to activate her. My only other use of Siri usually involved phrases like "stop", "go away", "close", "fucking close!", "you stupid f cking * ** close the **** thing" when Siri would pop up out of nowhere and interrupt whatever I was actually doing. I had it turned off, but occasionally somehow it's back on, listening. Other actual attempts a…

My only usage of it is as a push-button dictionary/translator, "define x", "how do you say x in Spanish". For every other use I've found it extremely limited, you have to ask the right questions, otherwise it defaults to a web search on my wife's phone, even if she's not in the room. How, after all these years, is it still so stunted? There are Telegram bots with better interaction.

I almost got excited. "how do you say x in Spanish", what a great use of Siri.

"How do you say Thank You in Dutch?" => "I can't translate into Dutch yet."

Oh come on, there are only half a dozen online translators which can do it.

Some mid-upper level manager in Apple should be ashamed. And every exec above them in the line to the top.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#160

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

Even worse, it looks like on MacOS you can just straight up start recording on-demand, no need for dictation or siri. > Even worse, this particular exploit would also allow the app to request DoAP audio on-demand, bypassing the need to wait for the user to talk to Siri or use dictation.

No post body was provided.
Post reply on HN