Slashdot Mirror


Worried About Information Leaks, IBM Bans Siri

squiggleslash writes "CNN reports that IBM CEO Jeanette Horan has banned Siri, the iPhone voice recognition system. Why? According to Horan '(IBM) worries that the spoken queries might be stored somewhere.' Siri's backend is a set of Apple-owned servers in North Carolina, and all spoken queries are sent to those servers to be converted to text, parsed, and interpreted. While Siri wouldn't work unless that processing was done, the centralization and cloud based nature of Siri makes it an obvious security hole."

30 of 168 comments (clear)

  1. Not CEO by bws111 · · Score: 4, Informative

    Jeanette Horan is the CIO, not the CEO.

    1. Re:Not CEO by jdgeorge · · Score: 2

      Right. And here's a Related article about Jeanette Horan's mobile strategy from earlier this year.

      For reference, this is IBM's CEO

  2. The Cloud is a security hole. by couchslug · · Score: 3, Insightful

    Water is also wet. Must be a slow news day.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
    1. Re:The Cloud is a security hole. by Mister+Transistor · · Score: 2

      Not all locks can be bumped. Particularly, Medeco (would have to bump 3 axes at once) and ACE (cylindrical tumbler type) types won't work with a standard bump gun. ACE can be picked with a different type of pick, Medeco are purportedly pick-proof (I'm not entirely convinced of that, though).

      --
      -- You are in a maze of little, twisty passages, all different... --
  3. Sooo... by StefanWiesendanger · · Score: 2, Insightful

    I guess they're about to ban Google and Bing too?

  4. How is that different from any search engine? by Karmashock · · Score: 2, Interesting

    By this logic google, bing, etc would be security holes.

    And given that IBM is marketing Watson which is basically a super computer version of Siri... how does any of this make any sense?

    I honestly don't understand the worry here.

    When I looked at this, I thought the initial worry might be that the phone was listening all the time and could be parsing real time conversations through the apple servers all the time. That is TECHNICALLY possible. My understanding of siri is that it only listens when you cue it.

    I'm just tying to piece together what situation or insight lead IBM to have this worry? Possibly someone pocket dialed Siri, a sensitive conversation fed into siri, and siri responded to the conversation in context from someone's pocket? That would be spooky. But I don't really see it as a security hole especially since it's hard to pocket dial iphones. The slider tends to make that rare.

    --
    I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    1. Re:How is that different from any search engine? by gweilo8888 · · Score: 3, Interesting

      When you type a query into a search engine, it's fairly unlikely that somebody else's unrelated typed conversation will also be recorded and transmitted along with it. That's quite possible when using an audio-based search on a device with a sensitive microphone. Likewise as you note, it's unlikely that you'll accidentally type a conversation with your phone in your pocket, but pretty feasible that you'll accidentally record your own conversation.

    2. Re:How is that different from any search engine? by squiggleslash · · Score: 3, Informative

      They probably are, but not to the same extent.

      Siri differs in two crucial respects:

      1. Bing and Google don't, by default, tie searches to an individual. (Yes, I know, they can, you can log in, and sometimes are already, but you can use both services with cookies turned off without problems.)

      2. Siri searches your personal information. At least, that's what I figure from the ads. If Samuel L. Motherfucking Jackson can cancel his golf game by telling Siri to cancel it, then clearly Siri knows SLMFJ's schedule, amongst other things. Google and Bing, unless your business uses Office 365 or Google Apps (in which case...), only has limited personal information on you.

      I'm not arguing they're not potential security holes, but they're not in the same ballpark as Siri. If you're talking to Siri all the time, in order to modify your work schedules, send emails, etc, then, well, you are passing much, much, more information to Apple.

      --
      You are not alone. This is not normal. None of this is normal.
    3. Re:How is that different from any search engine? by Karmashock · · Score: 2

      I think I can input a voice search into google if I want. Isn't there a little microphone next to the text box? Lets say I press that... then say something... what I said should roughly wind up in that search field. So... this is a larger problem assuming it's a problem at all which seems unlikely.

      --
      I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    4. Re:How is that different from any search engine? by bws111 · · Score: 4, Informative

      Watson did NOT have speech recognition for the Jeopardy game (although it gave it's answers as speech). Watson has nothing to do with speech recognition at all.

  5. Flaw with the "cloud" by cpu6502 · · Score: 4, Insightful

    Finally someone recognizes that the "cloud" is a danger to security. It's understandable that IBM would not want Apple being aware of what their employees are working on.

    --
    My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
  6. Re:But make sure to buy our cloud offering! by binarylarry · · Score: 5, Funny

    I hope she doesn't find out what her employees use Google for!

    --
    Mod me down, my New Earth Global Warmingist friends!
  7. The tables will have turned. by FreedomOfThought · · Score: 4, Funny

    Post-Ban of Siri

    IBM Employee: "Siri?"
    Siri:"Yes?"
    IBM Employee: "Remind me to file for the patent on the [insert technology here], tomorrow."
    Siri: "I'm sorry, Dave. I'm afraid I can't do that."

  8. Re:But make sure to buy our cloud offering! by cygnwolf · · Score: 2

    Because, somehow, the fact that it was spoken and not typed makes it less secure...

    --
    Free Pie! The Pie is Also Evil!
  9. iPhone Voice Recognition also uses cloud by Tangential · · Score: 2

    The iPhone/iPad's regular voice recognition for diction (the mic on the virtual keyboard) isn't Siri but it also uses the cloud. On top of that, many apps and browsers store data in the cloud and not just iOS phones; Android, RIM and others store data on servers in the cloud. Seems like a pointless ban to me.

    --
    Suppose you were an idiot. And suppose you were a member of congress. But then I repeat myself. -- Mark Twain
  10. Re:But make sure to buy our cloud offering! by cygnwolf · · Score: 5, Informative
    Ok, replying to myself because I shot my mouth off without reading TFA....

    For one, Siri can be used to write e-mails or text messages. So, in theory, Apple could be storing confidential IBM messages.

    So it's stuff like this, that wouldn't be sent through Google or Bing, that she is concerned about. That actually makes a teensy, tiny grain of sense for a change...

    --
    Free Pie! The Pie is Also Evil!
  11. Re:But make sure to buy our cloud offering! by bws111 · · Score: 4, Informative

    Or maybe the fact that Apple knows WHO is doing the queries, and also that Siri collects a bunch of other stuff like names from your address book and 'other unspecified user data' makes it MUCH less secure.

  12. why is network need for speech to text? by contrapunctus · · Score: 2

    I don't understand why Siri has to use the cloud for speech to text. I had a samsung phone 6 years ago that could do this on the device itself with. I understand if the text part (after it's been converted) needs to be sent for analysis but the device certainly has enough processing speed to understand speech without a network...
    I'm sure I'm missing something.

    When I'm driving is when I really want to use Siri so I don't have to look at my phone and that it when it fails most (I'm not always on 3G areas).

    1. Re:why is network need for speech to text? by ColdWetDog · · Score: 2

      Because of the semantic processing. Takes quite a bit more horsepower.

      It's the cool part of Siri. Mostly useless, but cool.

      I'd tag the story 'Andnothingofvaluewaslost'

      --
      Faster! Faster! Faster would be better!
  13. Scheduling meetings by chenjeru · · Score: 5, Insightful

    Before everyone chimes in about how you might as well ban Google and Bing too, I think that there is a valid security concern for using Siri when you consider that many people use it for making appointments. Search history is much easier to obfuscate. I can understand if IBM doesn't want Apple to know who it is having "top secret" meetings with.

    --
    Even if you're on the right track, you'll get run over if you just sit there. - Will Rogers
  14. Domain knowledge by AliasMarlowe · · Score: 2

    I asked Siri if she was spying on me for Apple. She said that she's not good with food.

    It seems the domain knowledge in Siri is somewhat uneven. According to reports, if you ask Siri for a blow job, it will recommend escorts close to you. However, if you ask Siri to eat your pussy, it will recommend some nearby pet stores...

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  15. Re:IBM UBM WE ALL BM FOR IBM by Charliemopps · · Score: 4, Funny

    IBM invents new things, clearly something Apples never been interested in. Good call.

  16. Re:But make sure to buy our cloud offering! by DangerFace · · Score: 4, Insightful

    Sorry, what? When I write an email or text on my Android the entire text gets sent to Google? Even if I decide not to send it? The issue is that, when using Siri, the full recording is sent back to Apple's servers where they perform processing. This could allow them to do spy stuff with what people falsely assumed was privat einformation, since a lot of people don't realise that anything you tell Siri you also tell Apple HQ.

    Now, are Apple doing evil with what Siri sends them? Probably not. but when you're the CIO of a billion dollar tech company you probably don't want to base your company's technological future on "it's probably fine".

  17. Re:But make sure to buy our cloud offering! by the_povinator · · Score: 2

    I used to work for IBM and I recall that they used to disallow Skype. They had the particularly lame reason that "because Skype is not open-source, it is against our business strategy" or some such nonsense. [Yet they had no problem with Windows!].

    --
    The .sig is dead, and I believe I had a hand in killing it.
  18. Re:But make sure to buy our cloud offering! by RoboRay · · Score: 3, Funny

    But... Google's not evil. They said so!

  19. Siri is NOT banned by Anonymous Coward · · Score: 3, Interesting

    This is factually incorrect.

    IBM enforces a profile on iOS devices that requires an 8-character password with a 15 minute lock timeout, along with the Lotus Traveller package for push email, calendar and contacts.

    Siri is not permitted unless the phone is unlocked, and is therefore unavailable from the lock screen.

    It's THAT simple. Really.

  20. It's Furby All Over Again! by ilikenwf · · Score: 2

    Remember back in the 90's when Furby first came out, the Federal Government banned Furbies from entering the building to protect state secrets?

    Via Wiki: "There was a common misconception that they repeated words that were said around them. This belief most likely stemmed from the fact that it is possible to have the Furby say certain pre-programmed words or phrases more often by petting it whenever it said these words. As a result of this myth, several intelligence agencies banned them from their offices."

  21. Re:But make sure to buy our cloud offering! by adonoman · · Score: 4, Insightful

    For sending internal messages? I would hope so! If my company has it's own internal, monitored, secured, approved, etc.. email set up, and I go and start doing all my work correspondance from a gmail account, I would assume that they would take issue with that. Likewise, if I started using Siri to dictate emails which were then sent over that corporate network.

  22. Re:But make sure to buy our cloud offering! by Mc+Fly · · Score: 2

    I really hope you are trolling, I also used to work there. They have a very legitimate reason to disallow Skype... it is a P2P application with supernodes, and it has already been shown that if you have a supernode, you could sniff some information about the calls. Therefore, your competitors could be running supernodes and sniffing information. Now that Skype is owned by Microsoft, their concerns are really valid..

    --
    He is the Path, the Truth and the Life
  23. Re:But make sure to buy our cloud offering! by lachlan76 · · Score: 2

    The real reason is probably that in the past, if it realised that you were on a fast connection, it would turn into a supernode and use gigantic quantities of bandwidth.