Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Rigged YouTube videos can use Siri and Google Now to hijack your phone

nakedsecurity.sophos.com

Post reply on HN
Print view View original

21–27 of 27 posts

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#21

Post by banana_giraffe »

sparky_z wrote: post #18
yeukhon wrote: post #6

Earlier quoted context omitted.

Can you really distinguish sound emitted from the speaker from someone with a hoarse voice? Furthermore, what about medium? Traveling different medium should be considered.

Well, the device knows exactly what signal it's putting out through the speaker, so it can predict what the microphone will pick up. It doesn't know what someone with a hoarse voice is about to say.

That attack described in the video isn't something the phone is producing and picking up (most phones already ignore what they playback), but rather a sound played by a laptop picked up by the phone.

And further, the attack described is a sentence that doesn't sound to a human like "Ok Google" or "Hey Siri", or whatever

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#22

Post by dcohenp »

superuser2 wrote: post #19

I don't understand why anyone would leave "Hey Siri" turned on. I do use Siri occasionally, but no result of any Siri query is of any value to me while my phone is in my pocket. If I'm going to take it out of my pocket anyway, there's no additional friction in pressing the home button.

Car. Nightstand. Kitchen counter while you cook/wash dishes. There's a myriad situations where you want to use your device hands-free. In fact, it's the driver behind an entire new product category (see Amazon Echo, Google Home, etc.).

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#23

Post by paavokoya »

dcohenp wrote: post #22
superuser2 wrote: post #19

I don't understand why anyone would leave "Hey Siri" turned on. I do use Siri occasionally, but no result of any Siri query is of any value to me while my phone is in my pocket. If I'm going to take it out of my pocket anyway, there's no additional friction in pressing the home button.

Car. Nightstand. Kitchen counter while you cook/wash dishes. There's a myriad situations where you want to use your device hands-free. In fact, it's the driver behind an entire new product category (see Amazon Echo, Google Home, etc.).

>it's the driver behind an entire new product category

Yeah.. the "consumer as product" category

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#25

Post by insmod88 »

superuser2 wrote: post #19

I don't understand why anyone would leave "Hey Siri" turned on. I do use Siri occasionally, but no result of any Siri query is of any value to me while my phone is in my pocket. If I'm going to take it out of my pocket anyway, there's no additional friction in pressing the home button.

"Hey Siri" feature is great! It has totally changed the way I interact with my phone. I use it everyday .. some of the commands are 1. Hey Siri what is the time ? (When i'm still in bed and my eyes are closed) 2. turn on all alarms. (yes I have multiple alarms to wake me up) 3. turn off all alarms. 4. Hey siri what song is this ? If i'm too lazy to open up shazam 5. Hey Siri remind me to do abc at 7am ...

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#26

Post by dogma1138 »

1024core wrote: post #10

In the old days, kids TV commercials would tell the kids to hold up the phone to the TV, and then play DTMF tones to dial a 1-900 number. For example: http://articles.latimes.com/1991-04-21/news/mn-860_1_horror-... Today, they can probably do the same via "Siri" or "OK Google" ... ?

Or the more modern version of Xbox live trolling when people name themselves Xboxoff or xboxinternet and wait for some one to yell their name.

The Siri thing isn't new tho you used to be able to shout at Siri trough some ones phone when you were on speaker but I think Apple implemented some voice recognition restrictions.

Re: Rigged YouTube videos can use Siri and Google Now to hijack your phone

#27

Post by sparky_z »

banana_giraffe wrote: post #21
sparky_z wrote: post #18

Earlier quoted context omitted.

Well, the device knows exactly what signal it's putting out through the speaker, so it can predict what the microphone will pick up. It doesn't know what someone with a hoarse voice is about to say.

That attack described in the video isn't something the phone is producing and picking up (most phones already ignore what they playback), but rather a sound played by a laptop picked up by the phone. And further, the attack described is a sentence that doesn't sound to a human like "Ok Google" or "Hey Siri", or whatever

Okay, that's what I didn't understand. Thanks.
Post reply on HN