iPhone Siri Self-Reference Proof-of-Concept (on the table)

Channel:
Switzerland Marc Ruef
Subscribers:
3,170
Published on ● Video Link: https://www.youtube.com/watch?v=AeuGjMbAirU


Duration: 0:45
471 views
3

During some experimental testing we were able to let YouTube videos call Siri on the same device. This should usually not be possible.

Description: This video is able to initiate a “hey” call if the volume is set to 2. If the volume is higher, it does not work.
PoC Video: https://youtu.be/AeuGjMbAirU
Source Video: https://youtu.be/SWrkw_W8YdI (Time: 3:38)
Test Device: Apple iPhone XS

It looks like some resonance disturbance (within the case) is responsible for this effect. An attacker might be able to create a video with controls a device.

More information about this vulnerability is available at https://www.scip.ch/en/?labs.20191010



Other Videos By Marc Ruef


2019-10-20The Witcher 3: Wild Hunt (PS4 Pro) - 07 - Brother Bastien missing
2019-10-19The Witcher 3: Wild Hunt (PS4 Pro) - 06 - Devil by the Well
2019-10-18The Witcher 3: Wild Hunt (PS4 Pro) - 05 - Twisted Firestarter
2019-10-17The Witcher 3: Wild Hunt (PS4 Pro) - 04 - Preparing for the Beast of White Orchard
2019-10-16The Witcher 3: Wild Hunt (PS4 Pro) - 03 - Ask the Nilfgaardians about Yennefer
2019-10-15The Witcher 3: Wild Hunt (PS4 Pro) - 02 - Go to the Tavern in White Orchard
2019-10-14The Witcher 3: Wild Hunt (PS4 Pro) - 01 - Intro and Tutorial
2019-10-13LittleBigPlanet (PSP) - 01 - Tutorial (Playthrough Complete)
2019-10-13Indiana Jones and the Staff of Kings (PSP) - 01 - Rivalry (Playthrough)
2019-10-13GTA Chinatown Wars (PSP) - 01 - Yu Juan (Mission Playthrough Complete)
2019-10-09iPhone Siri Self-Reference Proof-of-Concept (on the table)
2019-10-08FIFA 20 (PS4 Pro) - England vs. Germany
2019-10-07FIFA 20 (PS4 Pro) - Intro and Volta
2019-10-06Mario Kart Tour (iPad) - 13 - Baby Mario Cup (50cc Playthrough Complete)
2019-10-06Mario Kart Tour (iPad) - 08 - Dry Bones Cup (100cc Playthrough Complete)
2019-10-05Mario Kart Tour (iPad) - 12 - Shy Guy Cup (50cc Playthrough Complete)
2019-10-03Mario Kart Tour (iPad) - 06 - Peach Cup (150cc Playthrough Complete)
2019-10-03Mario Kart Tour (iPad) - 08 - Dry Bones Cup (150cc Playthrough Complete)
2019-10-03Mario Kart Tour (iPad) - 07 - Bowser Cup (150cc Playthrough Complete)
2019-10-02Mario Kart Tour (iPad) - 05 - Toad Cup (150cc Playthrough Complete)
2019-10-02Mario Kart Tour (iPad) - 04 - Koopa Troopa Cup (150cc Playthrough Complete)


Tags:
Apple
iPhone
Siri
iOS
Self
Call
Bug
Issue
Vulnerability
PoC
Proof-of-Concept
Example
Exploit
Flaw