4 ms·

As presented, people are only vulnerable if they: - Allow Siri from the lock screen - Have headphones plugged in (presumably Apple's) - Are not using their d

As presented, people are only vulnerable if they: - Allow Siri from the lock screen - Have headphones plugged in (presumably Apple's) - Are not using their device or have their headphones in (otherwise the attack would be detected immediately) OR: - Have audible feedback from Siri disabled P.S. Link to source article: http://www.wired.com/2015/10/this-radio-trick-silently-hacks-siri-from-16-feet-away/ http://www.wired.com/2015/10/this-radio-trick-silently-hacks... Original research publication: http://ieeexplore.ieee.org/xpl/articleDetails.jsp?reload=true&arnumber=7194754 http://ieeexplore.ieee.org/xpl/articleDetails.jsp?reload=tru...

TazeTSchnitzel 11y ago
> - Allow Siri from the lock screen Lots of people use 'Hey Siri', myself included. > - Have headphones plugged in (presumably Apple's) Not that unlikely. > - Are not using their device or have their headphones in (otherwise the attack would be detected immediately) OR: > - Have audible feedback from Siri disabled These would be the killers. The moment Siri's activated you'd hear it loudly in your ears.
- dkokelley 11y ago
  Does "Hey Siri" work when unpugged? My 30 seconds of Google seemed to show that it needed to be plugged in.
  - blowski 11y ago
    On the new iPhone 6S, it does not need to be plugged in. > The integrated M9 works so eﬃciently and intelligently that Siri is always on and waiting for your voice commands. You can easily activate Siri by saying “Hey Siri” whenever your iPhone 6s is nearby. (Taken from http://www.apple.com/uk/iphone-6s/technology/ http://www.apple.com/uk/iphone-6s/technology/)
- Laaw 11y ago
  So what? You know your phone visited a website, but if that site had a zero-day, would it matter?
  - dkokelley 11y ago
    Generally the result is not immediate. The speed of your network and Siri's delay you should have a second or two to interrupt the attack.
  - PhasmaFelis 11y ago
    Or the example from the article, calling a paid number.

TazeTSchnitzel 11y ago

> - Allow Siri from the lock screen Lots of people use 'Hey Siri', myself included. > - Have headphones plugged in (presumably Apple's) Not that unlikely. > - Are not using their device or have their headphones in (otherwise the attack would be detected immediately) OR: > - Have audible feedback from Siri disabled These would be the killers. The moment Siri's activated you'd hear it loudly in your ears.

dkokelley 11y ago
Does "Hey Siri" work when unpugged? My 30 seconds of Google seemed to show that it needed to be plugged in.
- blowski 11y ago
  On the new iPhone 6S, it does not need to be plugged in. > The integrated M9 works so eﬃciently and intelligently that Siri is always on and waiting for your voice commands. You can easily activate Siri by saying “Hey Siri” whenever your iPhone 6s is nearby. (Taken from http://www.apple.com/uk/iphone-6s/technology/ http://www.apple.com/uk/iphone-6s/technology/)
Laaw 11y ago
So what? You know your phone visited a website, but if that site had a zero-day, would it matter?
- dkokelley 11y ago
  Generally the result is not immediate. The speed of your network and Siri's delay you should have a second or two to interrupt the attack.
- PhasmaFelis 11y ago
  Or the example from the article, calling a paid number.