Cracking Siri

#1

Post by nolanbrown23 » Mon, Nov 14, 2011, 7:47 PM UTC

Re: Cracking Siri

#2

Post by pdenya » Mon, Nov 14, 2011, 8:39 PM UTC

Really interesting. I'm curious what their tools look like but the github repository the article links to is currently empty.

Re: Cracking Siri

#3

Post by mirkules » Mon, Nov 14, 2011, 8:46 PM UTC

Is there a possibility to craft a Siri server reply with malicious code? Shouldn't be too hard for the applidium guys to attempt (maybe even use a fuzzer?)

Re: Cracking Siri

#4

Post by LeafStorm » Mon, Nov 14, 2011, 8:48 PM UTC

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

Re: Cracking Siri

#5

Post by victoknight » Mon, Nov 14, 2011, 8:54 PM UTC

guess who doesn't verify the root CA. Think of all the fun to be had with a Siri man-in-the-middle

Re: Cracking Siri

#6

Post by sjs » Mon, Nov 14, 2011, 8:56 PM UTC

LeafStorm wrote: post #4

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

Probably so it'll work through strict proxies.

Re: Cracking Siri

#7

Post by sjs » Mon, Nov 14, 2011, 8:56 PM UTC

pdenya wrote: post #2

Really interesting. I'm curious what their tools look like but the github repository the article links to is currently empty.

They're fixing it soon: https://twitter.com/#!/applidium/status/136175883055661057

Re: Cracking Siri

#8

Post by [deleted] » Mon, Nov 14, 2011, 8:56 PM UTC

[deleted]

Re: Cracking Siri

#9

Post by icebraining » Mon, Nov 14, 2011, 8:57 PM UTC

mirkules wrote: post #3

Is there a possibility to craft a Siri server reply with malicious code? Shouldn't be too hard for the applidium guys to attempt (maybe even use a fuzzer?)

Maybe, but then you need to manually add your own root CA to the iPhone, or the cert verification will fail, so it's not a security issue.

Re: Cracking Siri

#10

Post by icebraining » Mon, Nov 14, 2011, 8:59 PM UTC

sjs wrote: post #6

LeafStorm wrote: post #4

I'm kinda wondering why Apple bothered using HTTP for something that really doesn't use anything recognizable as proper HTTP. Was it just for HTTPS?

Probably so it'll work through strict proxies.

Since it's HTTPS, those proxies can't see the traffic anyway, so as long as they used SSL on port 443, they could use any protocol on top.