Thanks to tipster Agent0Hibachi inside our forum we have now learned that some hackers have cracked Siri to work on any device. A group of hackers from Applidium posted a story explaining how they were able to hack Siri to run on any device. Seems Siri uses TCP to communicate back to a server 17.174.4.4 using port 443 (SSL). From a desktop the group realized that the IP address resolved back to a Apple server named “guzzoni.apple.com”. From here the group was able to create a fake guzzoni.apple.com address and tricked Siri into sending commands there instead of Apple’s own server. In the process the group learned that every time you send a command to siri it sends a date and timestamp back to the Apple server. To get the program to run on any device you will need to have one iPhone 4S identifier and some coding know-how. The group of hackers published some tools for future developers to create Siri-enabled applications and have encouraged fellow hacker to continue and see what they can develop.
© 2011, tsowen. All rights reserved.
haha wow! Nice!
lol imagine someone making an app that routes siri to their own site… then when someone asks siri something they’ll get “insert credit card number for more information” comments
This was a good find. Would be a great thing to have that on android phones. Even though we do have similar apps, still would be cool to have siri as well. hell we already have everything the IPHONE already has an wishes it had.
@Agent0Hibachi,
Iris is a siri clone for android… even took siri and spelt name backwards lol
So, there is no preshared key to two phase authentication on the web interface to Siri? This is what you get when you don’t have a security review.
The “hackers” (gag) did nothing more than spoof a DNS entry and look at the web request API (which is all they should be able to see, given SSL encryption of the contents.) One would hope there was more authentication inside the payload.
If this is actually true, and they can replay anything to the Siri web interface, it’s an even more horrible implementation than it seemed at first blush.
I bet Steve Jobs is rolling over in his grave.
What? Too Soon?
Isn’t Siri now obsolete with the introduction of Iris?
– 2 Bunny
@2 Bunny,
Try speaktoit one word “speak to it” from the market it is better than iris for android and it has a female avatar who is top heavy!
can i get a .cab?
@shatner,
In New York City. There are always .cabs around.