Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cracking Siri

applidium.com

Post reply on HN
Print view View original

61–70 of 105 posts

Re: Cracking Siri

#61

Post by Volpe »

skore wrote: post #59
Volpe wrote: post #58

Earlier quoted context omitted.

"As a result, we are able to use Siri’s recognition engine from any device. Yes, that means anyone could now write an Android app that uses the real Siri!" Are they just lying then? There demo said they got siri to work with no iphone involved (in the end). Also... DDoS would still be effective, no? (the server still has to 'filter') > Hacks are admired here You sure about that? A lot of China-bashing happens here ba…

You are confusing cracking and hacking.

I see so, "cracking" is admired here. "hacking" condemned.

Got it! :)

Re: Cracking Siri

#62

Post by ConstantineXVI »

jentulman wrote: post #40

The question that springs to my mind is not 'how can I play with this?' but 'Are Apple bringing Siri to the desktop?', seeing as it appears there's nothing specific to the 4S hardware in how this works. I'd quite like to be able to add calendar entries or tweet without moving to another application.

You can do that already, as long as you don't mind using your antiquated fingers to do so. Alfred[1] is my personal favorite, but Quicksilver[2] will do the job too (and is free).

[1] http://www.alfredapp.com/

[2] http://qsapp.com/index.php

Re: Cracking Siri

#63

Post by brown9-2 »

Volpe wrote: post #54

No one is at all concerned that this is a hack? I know it's interesting stuff, but I'm curious what "rights" Applidium have in publishing this information. With this information, (if I'm not wrong) it wouldn't take long to simply DDoS Siri... Or port Siri to Android (effectively stealing IP). (I have no bias either way, just pointing out, if someone figured out how to reverse engineer dropbox, so you could use their…

Anyone with Wireshark or tcpdump could have already seen what IP address the Siri client communicates with it.

Any competitor's jealous of Siri aren't learning too much to find out that the client uses HTTP, compression, and binary payloads in what it sends over the wire to the Siri service - the magic is server-side. The client has to communicate with the service somehow.

Re: Cracking Siri

#64

Post by lazugod »

Volpe wrote: post #54

No one is at all concerned that this is a hack? I know it's interesting stuff, but I'm curious what "rights" Applidium have in publishing this information. With this information, (if I'm not wrong) it wouldn't take long to simply DDoS Siri... Or port Siri to Android (effectively stealing IP). (I have no bias either way, just pointing out, if someone figured out how to reverse engineer dropbox, so you could use their…

The denizens of Hacker News are not concerned that this is a hack, no.

Re: Cracking Siri

#65

Post by jentulman »

ConstantineXVI wrote: post #62
jentulman wrote: post #40

The question that springs to my mind is not 'how can I play with this?' but 'Are Apple bringing Siri to the desktop?', seeing as it appears there's nothing specific to the 4S hardware in how this works. I'd quite like to be able to add calendar entries or tweet without moving to another application.

You can do that already, as long as you don't mind using your antiquated fingers to do so. Alfred[1] is my personal favorite, but Quicksilver[2] will do the job too (and is free). [1] http://www.alfredapp.com/ [2] http://qsapp.com/index.php

Thank you, I'm actually a user and big fan of Alfred already, but I second your recommendation to everyone else.

But this is the future and I want my jetpack/siri :)

Re: Cracking Siri

#66

Post by code_duck »

Volpe wrote: post #54

No one is at all concerned that this is a hack? I know it's interesting stuff, but I'm curious what "rights" Applidium have in publishing this information. With this information, (if I'm not wrong) it wouldn't take long to simply DDoS Siri... Or port Siri to Android (effectively stealing IP). (I have no bias either way, just pointing out, if someone figured out how to reverse engineer dropbox, so you could use their…

> 'No one is at all concerned that this is a hack?'

You're asking that on a site called 'Hacker News' if I'm not mistaken. It is indeed a 'hack', a clever and skilled exploration of technology carried out with perfectly good or neutral intent.

Re: Cracking Siri

#67

Post by ahlatimer »

planb wrote: post #35
pflats wrote: post #28

Earlier quoted context omitted.

Did you read the article? When the proxy failed, they "ressorted (sic) to using tcpdump on a network gateway". They eventually had to "setup a custom SSL certification authority, add it to our iPhone 4S, and use it to sign our very own certificate"

I have read that, but they used tcpdump only to detect what kind of traffic Siri sends after failing to use a normal HTTP proxy. Setting up a custom SSL certification authority is exactly what sshmitm does - but it does not (yet) support transparent proxying. Somehow they have redirected traffic for guzzoni.apple.com to a fake server that acts as a man in the middle (probably simply by using their own DNS), but what…

They did mention using their own DNS: "In that case, the simplest solution is to fake an HTTPS server, use a fake DNS server, and see what the incoming requests are."

Re: Cracking Siri

#69

Post by leoh »

Looks like guzzoni.apple.com is named after Didier Guzzoni (http://www.ai.sri.com/~guzzoni/), an employee at SRI.

He's also listed on an interesting Apple patent that was only filed a few weeks ago, "INTELLIGENT AUTOMATED ASSISTANT"(http://www.wipo.int/patentscope/search/en/WO2011088053).

Some very interesting implementation details there.

Re: Cracking Siri

#70

Post by z92 »

Volpe wrote: post #58
modeless wrote: post #57

Earlier quoted context omitted.

Hacks are admired here, not condemned. Reverse engineering should always be allowed. This information doesn't make it possible to DDoS Siri or port it to Android as each request requires a unique iPhone ID; Apple can easily filter out unauthorized requests.

"As a result, we are able to use Siri’s recognition engine from any device. Yes, that means anyone could now write an Android app that uses the real Siri!" Are they just lying then? There demo said they got siri to work with no iphone involved (in the end). Also... DDoS would still be effective, no? (the server still has to 'filter') > Hacks are admired here You sure about that? A lot of China-bashing happens here ba…

From the article:

"The iPhone 4S sends identifiers everywhere. So if you want to use Siri on another device, you still need the identfier of at least one iPhone 4S. Of course we’re not publishing ours"

Post reply on HN