The future of Siri, or: why private inference isn’t private enough (blog.cryptographyengineering.com) AI

Cryptography engineer Matthew Green argues that Apple’s planned “private” Siri/AI via Private Cloud Compute and confidential inference may limit direct access by Apple and Google, but privacy is not assured once Siri-style agents must interact with external services for real-world actions, creating new avenues for data leakage through queries and the agent’s discretion.