Siri's been cracked!

["Rob, grandpa of Ryan, Trevor, Devon & Hannah" <rmslade () shaw ca>]

Well, no, not exactly.

http://applidium.com/en/news/cracking_siri/

The protocol for Siri's communication has been cracked.  That still tells us a lot.

Siri isn't really resident on your iPhone.  Your requests (raw audio) are sent to 
Apple's server.  (No wonder Siri is a bandwidth hog.)  The server sends back what 
it has been able to figure out.  (A fair volume of information itself.)  (Also, think 
about that: Apple has the full audio of every request you make of Siri.  And 
anything it can parse out of the audio.)

These guys have been able to figure out enough to a) get Siri talking to fake 
servers, and b) get a fake "Siri" to work on other devices.

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
Nearly all men can stand adversity, but if you want to test a
man's character, give him PowerPoint.   - Nancy Duarte after Lincoln
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.