Voice assistants such as Amazons Alexa, Apples Siri and Google Assistant can be hackedby shining a laser on the devicesmicrophones, according to an international team of researchers.
Dubbed Light Commands, the hackallows attackers to remotely inject inaudible and invisible commands into voice assistants, according to a statement from experts at the University of Electro-Communications in Tokyo and the University of Michigan.
By targeting the MEMS (Microelectro-Mechanical Systems) microphones with lasers, the researchers saythey were able to make the microphones respond to light as if it was sound. Exploiting this effect, we can inject sound into microphones by simply modulating the amplitude of a laser light, they wrotein the research paper.
3 ESSENTIAL PRIVACY SETTINGS FOR YOUR AMAZON ECHO
In their study the authors used lasers to gain full control of voice assistants at distances up to 110 meters (361 feet).
We show that user authentication on these devices is often lacking or non-existent, allowing the attacker to use light-injected voice commands to unlock the targets smartlock-protected front doors, open garage doors, shop on e-commerce websites at the targets expense, or even locate, unlock and start various vehicles (e.g., Teslaand Ford) that are connected to the targets Google account, they wrote.
The researchers have shared their findings with Amazon, Apple, Google, Tesla and Ford. We subsequently maintained contact with the security teams of these vendors, as well as with ICS-CERT and the FDA, they said, noting that the findings were made public on the mutually-agreed date of Nov. 4.
The Industrial Control Systems Cyber Emergency Response Team aims to reduce the risk to Americas critical infrastructure by forging strong partnerships between government and industry.
AMAZON PUSHES ALEXA PRIVACY WITH NEW DELETE OPTIONS
Customer trust is our top priority and we take customer security and the security of our products seriously, an Amazon spokesperson told Fox Newsvia email. We are reviewing this research and continue to engage with the authors to understand more about their work.
We are closely reviewing this research paper. Protecting our users is paramount, and were always looking at ways to improve the security of our devices, a Google spokesperson told Fox Newsvia email.
Apple, Tesla and Ford have not yet responded to a request for comment on this story.
Privacy concerns have swirled around voice assistants for a number of years. Amazons popular Echo device, for example, has repeatedly come under scrutiny for its handling of user data. Amid concerns about privacy, Amazon recently announced new tools to give Alexa users greater control over stored voice recordings.
AMAZONS ALEXA VOICE ASSISTANT ILLEGALLY RECORDS CHILDREN WITHOUT CONSENT, LAWSUITS CLAIM
Alexa is at the forefront of Amazons efforts to harness the so-called Internet of Things, which aims to connect a vast array of consumer gadgets.
To keep their data locked down, Amazon customers can set up voice PINs for shopping, smart home requests such as unlocking doors and accessing sensitive information such as banking.
It should be noted that hacking a voice assistant with a laser requires both expertise and specialized equipment, as well as an unobstructed view of the targeted device.
THOUSANDS OF AMAZON WORKERS LISTEN TO RECORDINGS FROM ALEXA: REPORTS
Other factors also limited the extent of the researchers hacks. For example, in the study, the experts say that, while they were able to lock and unlock the doors and trunk of a Tesla Model S with Google Assistants EV car app installed, they were unable to start the car without key proximity.
On a Ford car, the researchers say they were able to remotely open the doors and start the engine via the Ford Pass app. However, shifting the vehicle out of parkimmediately stopped the engine and prevented the unlocked car from being driven, they wrote.
CLICK HERE TO GET THE FOX NEWS APP
Fox News Christopher Carbone contributed to this article.Follow James Rogers on Twitter@jamesjrogersB:
10【日】【晚】，SuperM【成】【员】【黄】【旭】【熙】、【李】【永】【钦】、【李】【泰】【容】、【李】【马】【克】【因】“SuperM WE ARE THE FUTURE LIVE【美】【国】【巡】【演】”【日】【程】【经】【由】【仁】【川】【国】【际】【机】【场】【出】【发】【前】【往】【美】【国】【达】【拉】【斯】，【巡】【演】【加】【油】！2016韶关市一中高中特长生有哪些10【日】【下】【午】，【歌】【谣】【界】【大】【前】【辈】【太】【珍】【儿】【通】【过】【个】【人】INS【上】【传】【了】《【音】【乐】【中】【心】》【待】【机】【室】【与】【后】【辈】【歌】【手】GOT7、WINNER、MonstaX、【刘】【永】【才】，VICTON【的】【合】【照】，【照】【片】【中】【太】【珍】【儿】【举】【着】【后】【辈】【们】【送】【来】【的】【亲】【笔】【签】【名】【专】【辑】【露】【出】【明】【朗】【的】【微】【笑】，【展】【现】【了】【前】【后】【辈】【之】【间】【暖】【暖】【的】【情】【谊】。