IPhone voice assistant How to send electromagnetic waves to Siri and take over?

ByVincent Brown

Sonic in iOS and Google Now on Android have a voice command function and can be operated by calling out. However, a technique of hijacking the smartphone from the outside by exploiting the nature of this voice command function has been devised, and the unexpected risk of the voice command function is clarified.

Hackers Can Silently Control Siri From 16 Feet Away | WIRED
http://www.wired.com/2015/10/this-radio-trick-silently-hacks-siri-from-16-feet-away/

ANSSIFrench researchers José López Estevez and Shauki Kasumi, who study security at Madrid, have disclosed methods to hack from the outside by misusing the voice command input function of iPhone's Siri.

To iPhone "Without speaking"You can check how remote operation is done with the following movie.


Mr. Estevez and Mr. Kasumi focused on recognizing input signals captured from microphones inserted in smartphones and tablets earphones / microphone jacks, such as Siri and Google Now. By creating a mechanism to reproduce the process by which the voice command function converts voice to digital signal by irradiating a strong electromagnetic wave from the outside, by realizing the same operation as if input by voice by electromagnetic wave from the outside, That made Siri the illusion that there was a voice command.

Using hacking of entering counterfeit voice commands made with electromagnetic waves in Siri allows you to display the URL of phishing sites with a browser, steal personal information from contacts, make calls to specific numbers, email And that there is a risk of stealing information on SNS accounts.

Also, according to the two researchers, it is possible to take over Siri's voice command function even if it is an iPhone in a bag, using a mobile battery and a laptop will take about 6.5 feet (about 2 meters) It is possible to hack an iPhone in a bag from a remote place, if you can secure a large electric power by loading a big battery in a car, you can also hack from a position 16 feet away (about 5 meters) away It seems to be.

The damage caused by such a hacking method can be assumed as a bar where unspecified people go in and out, a lounge at the airport, and so on. The only way to prevent hacking damage by misusing the voice command input function is to only turn off voice command input function. In this regard, on Android, the voice input function on the lock screen is off by default, whereas in iOS it is on in the default state, so if the iPhone is at risk I point out.

·bonus
You can check the state of "hack" which forces the iPhone to offline mode by instructing Siri with sound without irradiating strong electromagnetic waves can be confirmed in the following movie.

Toyota: Siri Safety Message That Turns Off iPhone Via Radio Station - YouTube


This movie that sounds "Siri, in airplane mode" is issued from the automobile radio and is put in the offline state is said to have been made with the aim of alarming the danger of operating a smartphone while driving.