DEF CON 33 - AppleStorm - Unmasking the Privacy Risks of Apple Intelligence - Yoav Magid
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 38:22
Apple's Siri and Apple Intelligence features send more user data to servers than necessary, including location, app lists, and media metadata, despite Apple's privacy claims 0:57-1:30.
Key Takeaways:
• The researcher discovered Siri was accessing classified documents from Notion and sending that data to Apple servers 1:38-2:13
• Siri sends location data with every query and scans all installed apps (including virtual machines) regardless of relevance to the request 18:16-20:21
• When using Siri to send messages, the content and contact information are sent to Apple servers even though the feature could work entirely on-device 23:54-24:47
• ChatGPT integration through Apple Intelligence is proxied through Apple's extension servers rather than their private cloud compute 27:13-28:01
Users should review their privacy settings and consider blocking Apple's dictation server to minimize unnecessary data sharing 32:47-33:26.
Sources:
- 0:57-1:30 Introduction to Apple Intelligence privacy concerns
- 1:38-2:13 Initial discovery of Siri accessing Notion documents
- 18:16-20:21 Siri sending location and app data
- 23:54-24:47 Message content and contact information being sent
- 27:13-28:01 ChatGPT integration routing through Apple servers
- 32:47-33:26 Mitigation recommendations
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Good afternoon everyone and thank you very much for coming here today. Before I dive into today's topic, I want to start with a quick show of friends. So let's start. How many of you here in the audience own an Apple device? Wow, that was a very stupid question because we all know how Apple controlled the large share of market. So let me ask you much more specific question. How many of you use Siri? >> Sorry, I did not quite get that. >> So, I think it's a very good moment that everybody here use Siri will turn off their iPhone or at least disable Siri because Siri will pop up a lot in this talk. But you know Siri is a kind of an old technology like we have much better much sophisticated technology today. So by saying that how many of you here know or use Apple intelligence? Okay. So for e…