Attackers can use audio frequencies beyond human hearing to exploit smart speakers

Attackers can use audio frequencies beyond human hearing to exploit smart speakers

While the undetected voice commands demonstrated by the researchers are harmless, it is easy how attackers can exploit the technique.

Researchers in China and the United States have discovered that Apple's Siri, Amazon's Alexa, and Google's Assistant can be controlled by hidden commands undetectable to the human ear, The New York Times is reporting. The New York Times reports that researchers in China and the USA have discovered a way to surreptitiously activate and command those virtual assistants by broadcasting instructions that are inaudible to the human ear. The students were able to get smart devices to switch over to airplane mode and navigate to websites by hiding commands to do so in white noise that way played through YouTube videos and loudspeakers.

"My assumption is that the malicious people already employ people to do what I do", Nicholas Carlini, a Ph.D. student in computer security at UC Berkeley and co-author of the study, tells WRAL Tech Wire.

Amazon said that it doesn't disclose specific security measures, but it has taken steps to ensure its Echo smart speaker is secure. Apple points out that HomePod can't do things like open doors, while iPhones have to be unlocked to execute certain Siri commands. Shen has looked into the possibility of commands outside the range of human hearing opening doors, placing online orders, and doing other malicious things without the owner of the device hearing a single thing. Android devices with voice-enabled search would respond by reading from the Whopper's Wikipedia page. While DolphinAttacks require the transmitter to be placed in close proximity to the smart device receiving the hidden message, last month researchers were able to send these subliminal message via ultrasound from 25 feet away.

They used a technique called DolphinAttack, which translates voice commands into ultrasonic frequencies that are too high for the human ear to recognize.

We need hardware makers and AI developers to tackle such subliminal messages, particularly for devices that don't have screens to give users visual feedback and warnings about having received secret commands. They were able to hide the command, "OK Google, browse to evil.com" in a recording of the spoken sentence, 'Without the dataset, the article is useless.' Humans can not detect the command. Researchers used the loophole to embed this command into a four-second clip from Verdi's Requiem in music files.

Testing against Mozilla's open source DeepSpeech voice recognition implementation, Carlini and Wagner achieved a 100 percent success rate without having to resort to large amounts of distortion, a hallmark of past attempts at creating audio attacks.

"We want to demonstrate that it's possible, and then hope that other people will say, "Okay this is possible, now let's try and fix it", Carlini added.

Related News:



Most liked

Fancy cakes at Sonam Kapoor's wedding
While mehendi , sangeet and the wedding day were a family affair, the reception was a star-studded evening. It stars Kareena Kapoor, Swara Bhaskar and Shikha Talsania in the lead besides Sonam.

Patriots to release OT Tony Garcia
Garcia missed the entire 2017 season on the non-football illness list with reported blood clots in his lungs. With Garcia out, there will likely be a battle between two newcomers for the vacant left tackle spot.

Oncologists May Not Be Adequately Informed About Medical Marijuana
Ilana Braun of Dana-Farber Cancer Institute in Boston, who led the study published Thursday in the Journal of Clinical Oncology . One or more co-authors disclosed relationships with UpToDate and Wolters Kluwer, and compensation for expert testimony.

Nasa will send helicopter to Mars to test otherworldly flight
That extra boost is necessary, because most Earth helicopters would be completely unable to travel in Mars' thin atmosphere. The development on the Mars helicopter began almost five years ago at NASA's jet propulsion laboratory in California.

Scott McTominay eyeing 'dream' spot in FA Cup Final squad
The United faithful will be holding their breath regarding the fitness of star forward Romelu Lukaku who is now nursing an ankle injury back in his native.

Jacqueline Fernandez caught up in vehicle accident following 'Race 3' party
The first two Race films were directed by Abbas-Mustan while the third film in the franchise is being directed by Remo D'Souza. Yesterday, Salman shared a brand new poster of Race 3 and he also announced the release date of the trailer too.

Disney parade float bursts into flames
The parade soundtrack merrily continues as characters for later floats are seen dancing before being rerouted to return backstage. The Orlando Sentinel reported a Disney World spokeswoman said the fire was extinguished quickly, and the area cleared.

Rashford told to dump Man Utd after West Ham snub
The Frenchman has the ability to leave any defender in his wake, but he's struggled to produce the goods consistently for United. United manager Jose Mourinho thought the referee got it right on the night, telling reporters: "It was handled well".

Pep Guardiola hails "amazing" Bernardo Silva
Maybe he didn't play as much as we wanted to this season but he is been an fantastic part of the team and the success of the team. Maybe he didn't play as much as we wanted to this season but he is been an awesome part of the team and the success of the team.

Adrian Peterson Eager To Prove He's 'Still The Best'
Peterson appears to be open to a return to New Orleans, but it is unlikely that the Saints are going to make that move. Free agent running back Adrian Peterson said he is fully healthy and ready to play for the 2018 season.

Beware of fake statements ascribed to President Buhari
President of the Senate, Bukola Saraki, read the letter from Buhari at the plenary on Tuesday in which he sought legislative approval for the appointments.

Senate Appeals Ruling Nullifying Omo-Agege's Suspension
The judge further ruled that constitutional provisions only allow the Senate to suspend its member for not more than 14 days.

Matt Harvey's Reds career starts Friday: 'I'd like to move forward'
Harvey's average fastball velocity has gone from close to 97 miles per hour in 2015 to a shade over 93 miles per hour in 2018. Harvey was no longer in New York's plans after four failed starts and four relief appearances in which he was hit hard.

AP special status row: TD activists attack Amit Shah's convoy in Tirupati
It has alleged that the Centre failed to fulfil its commitments toward Andhra Pradesh after the state was bifurcated in 2014. The TDP workers shouted slogans like "Amit Shah, go back", "We want justice" and "Give us special category status".

Lawyer Says He Consulted Cohen on Schneiderman Accusers
Gleason's information could help explain a cryptic September 2013 tweet from Trump about Schneiderman, the former New York Rep. An attorney has filed a protective order in federal court over certain documents seized from Michael Cohen's office.