iPhone Siri Self-Reference Exploiting - An Esoteric Vulnerability with no CVE

Main Author: Marc Ruef
Format: Article eJournal
Bahasa: eng
Terbitan: , 2019
Subjects:
iOS
Online Access: https://zenodo.org/record/3522033
Daftar Isi:
  • We accidentally discovered a vulnerability in Apple iPhones. For certain videos, Siri responds even though she is not actually summoned. At first, we suspected a special effect in the resonating body. But it could also have been related to audio processing in quiet environments. Apple sees no risk and has not accepted it as a vulnerability. However, it looks like the problem has been quietly fixed in iOS 13.
  • This paper was written in 2019 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20191010 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture.