Hacker Read

mirkules | karma 2677 | avg karma 3.19 · 2011-11-14 20:46:01+00:00

Is there a possibility to craft a Siri server reply with malicious code? Shouldn't be too hard for the applidium guys to attempt (maybe even use a fuzzer?)

icebraining | karma 48925 | avg karma 2.14 · 2011-11-14 20:57:19+00:00

Maybe, but then you need to manually add your own root CA to the iPhone, or the cert verification will fail, so it's not a security issue.

defen | karma 7933 | avg karma 3.58 · 2011-11-14 23:08:15+00:00

Might be a way to jailbreak the phone though, no?

aperiodic | karma 498 | avg karma 5.13 · 2011-11-15 00:22:29+00:00

Only if there's an exploitable bug in the Siri client.