They turned Amazon Echo into an audio snitch
Hackers have managed to create, in the smart enclosure, a seemingly innocuous application that continuously records conversations.
With a microphone, smart speakers sometimes cause discomfort in some users who wonder if they do not record their words constantly. Checkmarx's hackers have just given some grit to this conspiracy theory as part of Amazon Echo.
They developed a calculator in the form of a "skill", that is to say a voice application that extends the functionality of Amazon Echo. Just say "start calculator" to access and make calculations. Until then nothing abnormal. The problem is that the application continues to record the words of the user even if they are unrelated to the application. The speeches are then transformed into text and sent to the developer of the skill.
To achieve this, hackers used a flaw in Amazon Echo's programming interface settings. Normally, a skill is supposed to turn off automatically after a certain time, when it is no longer used. But by means of a very precise configuration, they manage to extend this time limit to infinity.
However, and it's still reassuring, this listening does not go completely unnoticed: the user can realize that there is a problem with the circle of light that turns on automatically when the speaker is waiting for a command. In addition, Amazon has since patched its programming interface. This hack is no longer feasible. We are reassured. The technical details of this research are available as a PDF document.
paypal,facebook,yahoo,mail,google,maps,ebay,amazon,barcelone,realmadrid,netflix,craigslist,AliCarter,Liverpool,AlfieEvans,YankeesVsAngels,RonanFarrow,YeVsThePeople,MesotheliomaLawFirm,Donate,CarToCharity,California,Donate,Car,ForTaxCredit,DonateCarsInMa;Insurance,Loans,Mortgage,Attorney,Credit,Lawyer,Donate,Degree,Hosting,Claimcashfear,softwares,money,football,SPORTNEWS,cars,carrental,cellphone,phonenumber,forex,torrent,voip,net,adsence,tollsspeakers,tipsspeakers,iphonespeakers,phones,iphone4,facebook,youtube,twitter,livematch,newslive,watchmatchforfree,watchlaligaforfree,watchserieAliveonjsc+,softwares,football,SPORTNEWS,cars,carrental,cellphone,phonenumber,forex,torrent,voip,net,adsence,tollsspeakers,tipsspeakers,iphonespeakers,phones,iphone4,facebook,youtube,twitter,livematch,newslive,watch match for free,watch laliga for free,watch serie A live on jsc+,windows 7,windows 8
Commentaires
Enregistrer un commentaire