Siri hacked reveals how your humble assistant does her magic

Through a well-known hacking method called reverse-engineering, they were able to figure out how Apple humble personal assistant communicates with the company servers. Unsurprisingly, it turns out that Siri uses a secure connection, and a valid security certificate was needed in order to establish one. However, the guys discovered that any self-signed certificate would do the trick just fine, meaning that they had no trouble obtaining permission to transfer data with Apple server.

Incoming and outgoing connections were monitored via a proxy server during the procedure, which is why the folks could take a look at the data that is sent to Apple and at the data that is returned to the iPhone 4S. In a nutshell, Siri compresses your audio input and sends it to the server, after which the data gets processed and returned to the sender device. However, before replying, Apple server verifies whether the the iPhone in use is valid or not via its unique identifier, also known as UDID.

Soruce