Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

161–170 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#161
post #153
post #93

Earlier quoted context omitted.

This is why people sell bugs.

It's an example of why people report bugs to vendor bounty programs since you could not sell this bug for $7000.

What makes you think it wasn't sold?

Even if by another party that could have found it before?

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#162

Earlier quoted context omitted.

Yes, the question is how to permanently restrict the attack surface / time windows for audio and video surveillance attacks.

Instead of Bluetooth defaulting to on, and re-enabling itself next day if you turn it off from the control center, I'd like for Bluetooth to default to off. You'd have to enable it from the control center, and it would disable itself after a certain period of inactivity. I suppose that won't happen, as it would wreck the Find My network if it depends solely on Bluetooth.

You can create a Shortcut (in the Shortcuts app) that actually turns off Bluetooth completely. Then you can add automation to run your "turn bluetooth off" shortcut multiple times a day. Haven't look into it but you might be able to create another shortcut that turns Bluetooth on, but then sets a background timer for X minutes after which it'll then turn Bluetooth off again.

Not that elegant of course, but sort of makes it possible.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#163

Earlier quoted context omitted.

Instead of Bluetooth defaulting to on, and re-enabling itself next day if you turn it off from the control center, I'd like for Bluetooth to default to off. You'd have to enable it from the control center, and it would disable itself after a certain period of inactivity. I suppose that won't happen, as it would wreck the Find My network if it depends solely on Bluetooth.

When you turn off bluetooth from CC, it’s not even turning it off. The radio is still on - it just doesn’t make any new connections. You have to turn it off in preferences for that.

Right. If you want it off, use Settings. Then it stays off.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#164
post #32

Don't forget that iOS and macOS silently re-enable Bluetooth on every software update. https://lapcatsoftware.com/articles/bluetooth.html

Even worse, Control Panel buttons only "suspend" BT/WiFi, you have to go into Settings to turn them off again ... and again ... and again.

As a half solution: You can create a Shortcut that turns of BT/Wi-Fi completely. You can then add that Shortcut to your home screen for easy access. That's what I do and it's way nicer than going to Settings, though I wish it was just in Control Center.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#165
post #161
post #153

Earlier quoted context omitted.

It's an example of why people report bugs to vendor bounty programs since you could not sell this bug for $7000.

What makes you think it wasn't sold? Even if by another party that could have found it before?

Who would you sell it to and what would the buyer do with it? Outline the scenario you have in mind and we can try to sort out how to leverage this specific bug for $7000 worth of some kind of value.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#166
post #165
post #161

Earlier quoted context omitted.

What makes you think it wasn't sold? Even if by another party that could have found it before?

Who would you sell it to and what would the buyer do with it? Outline the scenario you have in mind and we can try to sort out how to leverage this specific bug for $7000 worth of some kind of value.

Conceivably, a state actor could use this bug to eavesdrop on an espionage target, no? There is a market for zero-day exploits, where state espionage entities and criminal organizations both pay to learn about the existence of vulnerabilities like this—with prices in the hundreds of thousands to the millions of dollars.

Are you saying that this particular bug would not be worth more than $7000 in one of these markets, or are you questioning the very existence of these markets?

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#167
post #165
post #161

Earlier quoted context omitted.

What makes you think it wasn't sold? Even if by another party that could have found it before?

Who would you sell it to and what would the buyer do with it? Outline the scenario you have in mind and we can try to sort out how to leverage this specific bug for $7000 worth of some kind of value.

CIA, NSA, FBI, and those are just the US-based agencies.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#168
post #32

Don't forget that iOS and macOS silently re-enable Bluetooth on every software update. https://lapcatsoftware.com/articles/bluetooth.html

Even worse, Control Panel buttons only "suspend" BT/WiFi, you have to go into Settings to turn them off again ... and again ... and again.

It’s good UX - presumably most users want to turn off WiFi/bluetooth temporarily when using these buttons and this saves you from forgetting to turn it back on. I was delighted when they changed.

I agree it’d be nice to have a choice for how it works on your device, but current behavior would still be a good default.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#170

Earlier quoted context omitted.

Even worse, Control Panel buttons only "suspend" BT/WiFi, you have to go into Settings to turn them off again ... and again ... and again.

I called this a data grab from day 1 and stand by that. The amount of fellow iOS developers I've had argue for the "convenience" is astounding. There should be a settings toggle to control the auto-reenable behavior.

Yeah, this behavior sounds a bit anti-user to me. The action pretty much boils down to,

"Oh, you disabled Bluetooth and left it that way? Well, we know better so we're going to turn it back on without your knowledge or approval. You're welcome."

I don't buy the convenience excuse either otherwise the behavior could be disabled if desired.

Post reply on HN