Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

71–80 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#71
post #13

Quoted post unavailable.

> Find out how much the vuln is worth in the black market, then ask Apple double that.

Well, because he is not a corporation, he will get jumped on by lawyers and will go to jail for blackmailing Apple.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#72
post #52
post #34

Earlier quoted context omitted.

Siri killer apps for me are asking for factoids via my watch, and opening my garage door as I approach while driving (my building uses an app that requires multiple taps + swipes to open the garage door, using Siri makes it palatable.)

Are you using proprietary garage door software? Would live to have any better kind of integration there so any setup details that aren't crazy specific to some manufacturer would be interesting

My apartment building recently switched to an access control system called Brivo. It replaced a keyfob + garage door opener system with an app. Overall not the greatest as it's now difficult to get into the building if you leave your phone at home.

My "integration" with Siri is to set up an iOS shortcut and use Siri to trigger it.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#73
post #13

Quoted post unavailable.

The right amount for a security bounty is the sum of all assets covered by that vulnerability minus $1. This is the only way companies will take the right processes to protect those assets.

The impact and difficulty of exploit are pivotal parts of assessing the risk of a vulnerability. It doesn’t really matter how many dollars of things are involved if the exploit can’t be exploited or if it’s not a big deal if anyone does.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#74
post #18

Is anyone else an avid iPhone user, yet also someone who never uses Siri? I've used an iPhone exclusively for the past 8 years, and I can count on one hand the number of times I've used Siri. Interestingly, the one person I know who loves using Siri is my 70yr old dad.

I just use it in text-mode ie. Double tap siri button, type the thing I want (wake me 7am). Done.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#75
post #18

Is anyone else an avid iPhone user, yet also someone who never uses Siri? I've used an iPhone exclusively for the past 8 years, and I can count on one hand the number of times I've used Siri. Interestingly, the one person I know who loves using Siri is my 70yr old dad.

I use Siri to set a timer. That's it. And I do it by holding my power button to activate her.

My only other use of Siri usually involved phrases like "stop", "go away", "close", "fucking close!", "you stupid fcking * ** close the **** thing" when Siri would pop up out of nowhere and interrupt whatever I was actually doing. I had it turned off, but occasionally somehow it's back on, listening.

Other actual attempts at using it have been no better than 50% effective, so it wasn't worth the trouble. And I was speaking very clearly and articulately.

I've observed a friend (a Googler who had Google-fied his house) have frequent useless conversations with the Google assistant, so maybe 50% is the best you can hope for. No experience with Alexa, but I'd be too scared to even turn it on; I might end up with three refrigerators delivered the next day.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#76
post #43
post #10

Earlier quoted context omitted.

The scary thing is it's the least bad option when it comes to overall reliability.

I think it depends on the phone. The Google Pixel series seems pretty solid for reliability. I have a Pixel 7 Pro and it's been really good so far in terms of software and build quality. I strongly prefer it to my iPhone 13 Pro, which I'm currently selling off. But iPhone vs Samsung Galaxy? iPhone wins by a mile. I never got used to the custom interface Samsung loaded onto those phones, and hated that it included Sam…

Pixels had a defect where emergency calls didnt work with MS teams installed. Both platforms wither under the lights

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#77

Earlier quoted context omitted.

first sentence: "and audio from the iOS keyboard dictation feature"

And who is using that? Half of characters are misspelled, second half misunderstood. Nobody has time to argue with a phone.

Android it works pretty much perfectly and you can speak at normal speed.

With Android it pretty much works perfectly and you can speak at normal speed. <== Same sentence dictated at full speed.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#78
post #28

Earlier quoted context omitted.

Occasionally I ask her (it?) to set a timer or add a reminder, but mostly I don't. Siri is quite slow and frustratingly limited. The other day in a hurry and driving somewhere, I ended up w/ both Apple Maps and Google Maps open, simultaneously giving me directions. "Hey Siri, close Google Maps" "To close an application, swipe up from the bottom of the phone..." To paraphrase a quote from Steve Jobs, if your voice ass…

It makes no sense that Siri is so stunted in what she can do.

No kidding! She obviously knew what was wanted, but instead of doing her fing job, she tells you how to do it yourself. She doesn't like when I tell her to F herself. I hope some of those recordings end up with Apple training.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#79

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#80
post #18

Is anyone else an avid iPhone user, yet also someone who never uses Siri? I've used an iPhone exclusively for the past 8 years, and I can count on one hand the number of times I've used Siri. Interestingly, the one person I know who loves using Siri is my 70yr old dad.

For sure. I stood in line for the original iPhone, owned every model (except the 5C) up through the 6, then an SE, X, and now an 11 Pro since it came out. I played around with Siri when it debuted, but didn't use it much. I turned it off at some point (I think it was when Apple was catching grief for keeping recordings or something like that) and haven't missed it. I'm not against it especially -- it just never reall…

My colleagues and I had a moment of fun somewhere in remote Iceland, offroading on the way to a glacier. On an iPhone 3G, we were able to ask trivia questions and get pretty useful responses.

Aside from setting a timer, I've not seen Siri do anything more useful in 9 years. You haven't missed anything.

Post reply on HN