Live data from Hacker News

SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

rambo.codes

81–90 of 259 posts

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#81
post #18

Is anyone else an avid iPhone user, yet also someone who never uses Siri? I've used an iPhone exclusively for the past 8 years, and I can count on one hand the number of times I've used Siri. Interestingly, the one person I know who loves using Siri is my 70yr old dad.

The first day i asked her for the weather, songs and alarms. The second day i turing tested her, asked it philosophical questions and insulted it the worst way. Yes, that was pretty much it.

Ironically, she will complain if you cuss at her and call her names, but she won't turn herself off. And when she pops up without my request, and I want her to go off, it seems there's no verbal way to make her go away... even verbally abusing her.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#82
post #77

Earlier quoted context omitted.

And who is using that? Half of characters are misspelled, second half misunderstood. Nobody has time to argue with a phone.

Android it works pretty much perfectly and you can speak at normal speed. With Android it pretty much works perfectly and you can speak at normal speed. <== Same sentence dictated at full speed.

Yeah not for me. Android, nor Siri, nor Alexa.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#83
post #39

Earlier quoted context omitted.

Note this Bluetooth only.

Yes, the question is how to permanently restrict the attack surface / time windows for audio and video surveillance attacks.

Instead of Bluetooth defaulting to on, and re-enabling itself next day if you turn it off from the control center, I'd like for Bluetooth to default to off. You'd have to enable it from the control center, and it would disable itself after a certain period of inactivity.

I suppose that won't happen, as it would wreck the Find My network if it depends solely on Bluetooth.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#84

Sigh … I so much want Apple to get their shit together. To me it feels like software quality reached a new low.

There were some stubborn bad decisions that Steve Jobs stuck to (1 button mouse, windows that don't appear when you cmd-tab to them), but his Apple seemed to have better software. Since him, it really seems to have gone downhill in terms of bugs and UI consistency.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#86
post #79

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

My mother does it because of arthritis. Constantly.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#87
post #79

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

I don't for multiple reasons, not the least of which is the possibility of an exploit that leaks it. I don't trust software.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#88
post #85

A $7,000 bounty for eavesdropping and TCC (app permissions) vulnerabilities. Insulting.

My first thought as well - the author must be doing this stuff as a hobby/for fun, because that's not nearly enough to comp you for the time spent.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#89

Earlier quoted context omitted.

Yes, the question is how to permanently restrict the attack surface / time windows for audio and video surveillance attacks.

Instead of Bluetooth defaulting to on, and re-enabling itself next day if you turn it off from the control center, I'd like for Bluetooth to default to off. You'd have to enable it from the control center, and it would disable itself after a certain period of inactivity. I suppose that won't happen, as it would wreck the Find My network if it depends solely on Bluetooth.

That would be a good safety-first default. If Control Center could have buttons linked to iOS Automations for radio state, then advanced users could control this behavior with custom scripts.

> wreck the Find Me network if it depends solely on Bluetooth

Find Me presumably uses all identifiable radios, including BT, UWB, Wi-Fi.

Re: SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri

#90
post #79

I think they burried the lede here. Conversations with Siri are probably pretty generic but being able to evesdrop on keyboard dictation is pretty severe. I know people that use dictation for the majority of their text messages and email.

How many people use diction? I'm surprised cause I know virtually no one who uses diction, myself included.

I use dictation a lot, I hate typing on touchscreens and hate voice messages.
Post reply on HN