[mirkules]

Is there a possibility to craft a Siri server reply with malicious code? Shouldn't be too hard for the applidium guys to attempt (maybe even use a fuzzer?)

[icebraining]

Maybe, but then you need to manually add your own root CA to the iPhone, or the cert verification will fail, so it's not a security issue.

[defen]

Might be a way to jailbreak the phone though, no?

[aperiodic]

Only if there's an exploitable bug in the Siri client.