Attackers can use audio frequencies beyond human hearing to exploit smart speakers

Attackers can use audio frequencies beyond human hearing to exploit smart speakers

While the undetected voice commands demonstrated by the researchers are harmless, it is easy how attackers can exploit the technique.

Researchers in China and the United States have discovered that Apple's Siri, Amazon's Alexa, and Google's Assistant can be controlled by hidden commands undetectable to the human ear, The New York Times is reporting. The New York Times reports that researchers in China and the USA have discovered a way to surreptitiously activate and command those virtual assistants by broadcasting instructions that are inaudible to the human ear. The students were able to get smart devices to switch over to airplane mode and navigate to websites by hiding commands to do so in white noise that way played through YouTube videos and loudspeakers.

"My assumption is that the malicious people already employ people to do what I do", Nicholas Carlini, a Ph.D. student in computer security at UC Berkeley and co-author of the study, tells WRAL Tech Wire.

Amazon said that it doesn't disclose specific security measures, but it has taken steps to ensure its Echo smart speaker is secure. Apple points out that HomePod can't do things like open doors, while iPhones have to be unlocked to execute certain Siri commands. Shen has looked into the possibility of commands outside the range of human hearing opening doors, placing online orders, and doing other malicious things without the owner of the device hearing a single thing. Android devices with voice-enabled search would respond by reading from the Whopper's Wikipedia page. While DolphinAttacks require the transmitter to be placed in close proximity to the smart device receiving the hidden message, last month researchers were able to send these subliminal message via ultrasound from 25 feet away.

They used a technique called DolphinAttack, which translates voice commands into ultrasonic frequencies that are too high for the human ear to recognize.

We need hardware makers and AI developers to tackle such subliminal messages, particularly for devices that don't have screens to give users visual feedback and warnings about having received secret commands. They were able to hide the command, "OK Google, browse to evil.com" in a recording of the spoken sentence, 'Without the dataset, the article is useless.' Humans can not detect the command. Researchers used the loophole to embed this command into a four-second clip from Verdi's Requiem in music files.

Testing against Mozilla's open source DeepSpeech voice recognition implementation, Carlini and Wagner achieved a 100 percent success rate without having to resort to large amounts of distortion, a hallmark of past attempts at creating audio attacks.

"We want to demonstrate that it's possible, and then hope that other people will say, "Okay this is possible, now let's try and fix it", Carlini added.

Related News:



Most liked

Fancy cakes at Sonam Kapoor's wedding
While mehendi , sangeet and the wedding day were a family affair, the reception was a star-studded evening. It stars Kareena Kapoor, Swara Bhaskar and Shikha Talsania in the lead besides Sonam.

Patriots to release OT Tony Garcia
Garcia missed the entire 2017 season on the non-football illness list with reported blood clots in his lungs. With Garcia out, there will likely be a battle between two newcomers for the vacant left tackle spot.

Sudanese Teenager Sentenced to Death for Killing Husband She Says Raped Her
Forced child marriage and marital rape are not considered crimes in Sudan, and can not be used as evidence in a defence. Randa Elzein, who works for the Seema Center, a Khartoum-based organization that has advocated for Ms.

Wall Street rises as CPI data cools inflation fears
Papa John's worldwide dropped 3.7 percent to $56.55 after the pizza chain's first-quarter results fell short of analyst estimates. The June gold contract ended up $9.30 at US$1,322.30 an ounce and the July copper contract was up five cents at US$3.11 a pound.

Lightning, Capitals open Eastern Conference Final at Amalie Arena
This time, they've forged on with just enough offense and with starter Braden Holtby regaining his game in the net. Few teams can match the Lightning's top two forward lines, but if Nicklas Backstrom is healthy, Washington can.

Scott McTominay eyeing 'dream' spot in FA Cup Final squad
The United faithful will be holding their breath regarding the fitness of star forward Romelu Lukaku who is now nursing an ankle injury back in his native.

Jacqueline Fernandez caught up in vehicle accident following 'Race 3' party
The first two Race films were directed by Abbas-Mustan while the third film in the franchise is being directed by Remo D'Souza. Yesterday, Salman shared a brand new poster of Race 3 and he also announced the release date of the trailer too.

Disney parade float bursts into flames
The parade soundtrack merrily continues as characters for later floats are seen dancing before being rerouted to return backstage. The Orlando Sentinel reported a Disney World spokeswoman said the fire was extinguished quickly, and the area cleared.

Google: AI calling voice will identify itself to humans
While the calls are obviously initiated by you, one could question who holds the responsibility for information shared over them. Google announced the feature would be available to developers next month as part of MLKit so they can make use of app actions .

Melania Trump Doesn't Share a Bedroom With Donald Trump!
A number of critics took to social media to blast Ryan for her comment about Melania, a Slovenia native who moved to the USA in 1996 on a work visa.

Nation's Earliest WWII veteran, Richard Overton, turns 112: '# & He039;sa crackerjack'
Family and friends gathered to celebrate Overton's birthday with a party outside of his Bastrop County home in Austin, Texas. "I love to have an birthday", he also told the paper, adding that he hopes toldquo;are living a second five years.

Beware of fake statements ascribed to President Buhari
President of the Senate, Bukola Saraki, read the letter from Buhari at the plenary on Tuesday in which he sought legislative approval for the appointments.

Matt Harvey's Reds career starts Friday: 'I'd like to move forward'
Harvey's average fastball velocity has gone from close to 97 miles per hour in 2015 to a shade over 93 miles per hour in 2018. Harvey was no longer in New York's plans after four failed starts and four relief appearances in which he was hit hard.

Alia Bhatt and other celebs arrive at special screening of 'Raazi'
However, her change of stance comes late in the 140-minute film, and by then, the audiences would have made up their mind. For instance, in one scene, Iqbal tells his father that Sehmat's actions are a result of her love for her country.

AP special status row: TD activists attack Amit Shah's convoy in Tirupati
It has alleged that the Centre failed to fulfil its commitments toward Andhra Pradesh after the state was bifurcated in 2014. The TDP workers shouted slogans like "Amit Shah, go back", "We want justice" and "Give us special category status".