Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

Post reply on HN
Print view View original

201–210 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#201

Post by f1refly »

javajosh wrote: post #200
SamuelAdams wrote: post #127

Earlier quoted context omitted.

> Can physical microphones be removed from Apple devices by a repair shop, while still allowing use of wired/wireless headsets? Yes, this is what I do. The mike is actually still in the laptop but it's disconnected from the motherboard. On a 2021 M1 Macbook pro all you need to do is pop off the back cover and disconnect one cable on the right side of the motherboard. All in all takes about 10 minutes of work.

It's a good idea, but I can imagine how frustrating it would be if someone called and I didn't have my headset. The EV of avoiding that experience seems slightly higher than the EV of avoiding risk of being eavesdropped on by a wayward smartphone process by disabling the internal mic.

> but I can imagine how frustrating it would be if someone called and I didn't have my headset.

"Sorry, I don't have a headset right now, we'll have to talk later". It's not that "frustrating", really.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#203

Post by scarface74 »

walterbell wrote: post #199
scarface74 wrote: post #183

Earlier quoted context omitted.

You mean it’s anti user when it says in big letters “turn off Bluetooth until tomorrow” when you click on the button in control center?

It's an anti-user and anti-dictionary dark pattern when "turn off" doesn't mean Turn Off, but only stops new connections.

It’s anti dictionary when it actually says the words what it’s about to do when you press the button? How much clearer could it be.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#205

Post by semireg »

atlex2 wrote: post #193

Confused why you can’t use this to transcribe from any AirPods in your vicinity? I thought anyone could subscribe to a btle gatt attribute.

The BLE peripheral (AirPods) have to be connected and paired. Then, this connected device was “explorable” via other apps on the same device because the actual connection is maintained by the middleware/OS… e.g. an app may disconnect from a peripheral but it’s only a request, and the OS will only truly disconnect if all apps are “disconnected.”

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#206

Post by judge2020 »

hoorible wrote: post #192
SamuelAdams wrote: post #127

Earlier quoted context omitted.

> Can physical microphones be removed from Apple devices by a repair shop, while still allowing use of wired/wireless headsets? Yes, this is what I do. The mike is actually still in the laptop but it's disconnected from the motherboard. On a 2021 M1 Macbook pro all you need to do is pop off the back cover and disconnect one cable on the right side of the motherboard. All in all takes about 10 minutes of work.

There actually is a physical microphone disconnect for new Mac laptops (~2019 and later). When the clamshell is closed, the mic’s connection to the MLB is physically severed. I actually just learned this exists on new iPad models too, with any MFi-compliant case! I know this isn’t strictly relevant, since the vulnerability discussed here is during active use, just thought you might find it interesting. https://suppor…

My only problem is knowing whether it’s on or off - IIRC the indicator next to the camera is indeed a dumb LED wired right into the camera, but the microphone doesn’t have a hardware indicator.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#207

Post by walterbell »

scarface74 wrote: post #203
walterbell wrote: post #199

Earlier quoted context omitted.

It's an anti-user and anti-dictionary dark pattern when "turn off" doesn't mean Turn Off, but only stops new connections.

It’s anti dictionary when it actually says the words what it’s about to do when you press the button? How much clearer could it be.

The button no longer Turns Off the Bluetooth radio.

The same button in Control Center previously Turned Off the Bluetooth radio.

The button does not do what it (a) claims to do, (b) previously did.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#209

Post by NayamAmarshe »

aaronharnly wrote: post #31
mikece wrote: post #6

I don't want stories like this to be the reason I'm glad I switched to Graphene OS. I don't want anyone hacked or spied on.

Pro tip: all systems have bugs.

Not all systems come with easy eavesdropping mechanisms. Especially the ones focused on Privacy.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#210

Post by walterbell »

f1refly wrote: post #201
javajosh wrote: post #200

Earlier quoted context omitted.

It's a good idea, but I can imagine how frustrating it would be if someone called and I didn't have my headset. The EV of avoiding that experience seems slightly higher than the EV of avoiding risk of being eavesdropped on by a wayward smartphone process by disabling the internal mic.

> but I can imagine how frustrating it would be if someone called and I didn't have my headset. "Sorry, I don't have a headset right now, we'll have to talk later". It's not that "frustrating", really.

Indeed, many audio/video calls are preceded by text communication.
Post reply on HN