Hackers can control your smart speakers by shooting laser beams at them - Android

Get it on Google Play

Hackers can control your smart speakers by shooting laser beams at them - Android

Hackers were able to open garage doors and start cars by simply pointing a laser at devices with voice assistants.

Amazon echo 2019 top angle

In a series of bizarre experiments conducted by researchers from the University of Michigan and Tokyo’s University of Electro-Communications, smart speakers from Google, Amazon, Facebook, and Apple were hacked using laser beams.

It might sound like something straight out of a sci-fi movie, but all that was needed to remotely control smart speakers was less than $400 worth of equipment. In return, the hacked voice-enabled devices were tricked into opening garage doors and even starting vehicles in some cases.

Light based smart speaker attackLight Commands: Laser-Based Audio Injection on Voice-Controllable Systems

How does the smart speaker laser hack work?

Since smart home devices are usually placed near doors or windows, attackers can have a clear line of sight for initiating this laser-based attack.

Microphones on smart speakers and even smartphones convert sound into electrical signals. Instead of sound, however, an attacker can encode unauthorised voice commands into a laser light beam.

Editor's Pick

For the trick to work, the malicious laser needs to hit the microphone on a smart speaker or phone. This remotely causes the microphone to pick up electrical signals representing the attacker’s commands.

For instance, a hacker can use this trick to switch on/off the voice controlled devices in your home or even open your front door remotely.

Researchers were able to send these spiked laser beams and control most smart speakers from a distance of 164 feet. They say it was harder to remotely control voice assistants on phones (both Android and iOS) using the method.

Android phones could only be controlled from a distance of 16 feet, while iPhones could be controlled from 33 feet away.

Editor's Pick

The researchers are now working with Google, Apple, Amazon and others to mitigate the issue.

A Google spokesperson told Wired that the company is “closely reviewing” the research paper. “Protecting our users is paramount, and we’re always looking at ways to improve the security of our devices,” the spokesperson added.

More posts about Smart Speakers

Polk Command Bar Alexa speaker with LED indicator ring lit up.

Best Alexa speakers: There’s more than just Echo

2019 Echo family image with Dot and Show

Amazon Echo 2019 speakers and devices: Here’s the huge new hardware lineup

Alexa In Hindi On A Marketing Poster

You can now talk to Alexa in Hindi, here’s how

Galaxy Home Mini

Samsung begins Galaxy Home Mini beta testing program in South Korea

Pixel 3a back on table

Google tipped to shift Pixel production to Vietnam, starting with Pixel 3a

05/11/2019 09:42 AM