DolphinAttack: Hacking Voice Assistants with Inaudible Voice Commands

About a year ago it came to my attention that voice assistants such as Siri can lead to easily exploitable security issues. As voice assistants are not aware who is talking to them, it doesn’t matter if it’s you or your neighbour shouting “Unlock the door” at ‘m …

Now a team from Zhejiang University has taken it another level by sending out voice commands at frequencies above the 20KHz limits of human ears:

Using a technique called the DolphinAttack, a team from Zhejiang University translated typical vocal commands into ultrasonic frequencies that are too high for the human ear to hear, but perfectly decipherable by the microphones and software powering our always-on voice assistants. This relatively simple translation process lets them take control of gadgets with just a few words uttered in frequencies none of us can hear.

With only $3 worth of hardware one can build such a converter themselves.

A Simple Design Flaw Makes It Astoundingly Easy To Hack Siri And Alexa →

Your iPhone’s lockscreen is unsafe

Before you know it, anyone with physical access to your ‘locked’ device could be accessing your personal photographs and contacts.

Even with the latest iOS 9.0.1 update, your iPhone’s lockscreen is unsafe →

On a sidenote: The audio stack of my iPhone crashed today — “Hello IT, have you tried …”

Siri, start my car

That, of course, was inevitable:

Here’s proof with my car of using my “Viper Control” plugin with plamoni’s “Siri Proxy” to start and stop my Viper SmartStart enabled vehicle.

The command is sent from Siri to a Viper server, then relayed via cellular connection to the car. The car then broadcasts an update via RF to the key chain remote.

Siri Proxy: Using Siri to control your thermostat

Siri Proxy is a proxy server for Apple’s Siri “assistant.” The idea is to allow for the creation of custom handlers for different actions. This can allow developers to easily add functionality to Siri. Here’s a demonstration that I wrote: It allows me to control my thermostat when I am at home. Doesn’t require a jailbreak or anything, since it’s all going on off the device.

Siri Proxy →

via OrT

Why we won’t see Siri appearing on Apple TV any time soon

From the TV show 30 Rock:

What if you didn’t need a remote control, because the remote control is your own voice?

Along with a good laugh this also raises an upcoming solution voice control technology creators will have to think of: how can we assure that you — and only you — can control the device?


Remember The Milk, now with Siri Support

You can now use Siri on iPhone 4S to add tasks to Remember The Milk. Just ask Siri to remind you (e.g., “Remind me to pick up the milk”), and that task will be magically added to Remember The Milk.

Cleverly enabled by sporting a CalDav server on RTM, and then adding it on your iPhone 4S.

Remember The Milk: Add tasks with Siri →