VoiceControl still can't be turned off completly.

Originator:pepi.zawodsky
Number:rdar://23107911 Date Originated:14-Oct-2015 04:33 PM
Status:Open Resolved:
Product:iOS Product Version:ANY, but still in iOS 9.0.x, 9.1.x
Classification:Security Reproducible:Always
 
Summary:
VoiceControl still can't be turned off completly.

Steps to Reproduce:
Search though all of iOS Settings.app to find a way to completely turn OFF VoiceControl. (Not Siri, that old VoiceControl thing.)

Expected Results:
Find a switch somewhere deeply buried in Settings that I can turn OFF to prevent VoiceControl from ever activating.

Actual Results:
Fail to find a switch that allows you to turn off this feature.

Regression:
This has been the case since VoiceControl was introduced. It's still missing in iOS 9 and 9.1 betas.


Notes:
This attack vector also applies to VoiceControl, not only Siri. BUT Siri CAN be turned off, Voice Control can't be turned off.
http://www.wired.com/2015/10/this-radio-trick-silently-hacks-siri-from-16-feet-away/
Not only does this leave any iOS device vulnerable, but also without a way to mitigate.

Further: VoiceControl is frequently triggered without my intention to do so. This pauses any audio/video playback, like Music, PodCasts, etc. which then often can't be resumed without entering the playing application again and find the play button. 

Futhermore VoiceControl is also always available from the Lock screen, with and without a headset. This allows calls to be made, data to be exfiltrated and is a general security and privacy issue. Yet, Apple has failed to mitigate this. (This is not the first time this has been filed…)

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!