The future of Siri, or: why private inference isn't private enough

blog.cryptographyengineering.com