Attackers can use audio frequencies beyond human hearing to exploit smart speakers

Attackers can use audio frequencies beyond human hearing to exploit smart speakers

While the undetected voice commands demonstrated by the researchers are harmless, it is easy how attackers can exploit the technique.

Researchers in China and the United States have discovered that Apple's Siri, Amazon's Alexa, and Google's Assistant can be controlled by hidden commands undetectable to the human ear, The New York Times is reporting. The New York Times reports that researchers in China and the USA have discovered a way to surreptitiously activate and command those virtual assistants by broadcasting instructions that are inaudible to the human ear. The students were able to get smart devices to switch over to airplane mode and navigate to websites by hiding commands to do so in white noise that way played through YouTube videos and loudspeakers.

"My assumption is that the malicious people already employ people to do what I do", Nicholas Carlini, a Ph.D. student in computer security at UC Berkeley and co-author of the study, tells WRAL Tech Wire.

Amazon said that it doesn't disclose specific security measures, but it has taken steps to ensure its Echo smart speaker is secure. Apple points out that HomePod can't do things like open doors, while iPhones have to be unlocked to execute certain Siri commands. Shen has looked into the possibility of commands outside the range of human hearing opening doors, placing online orders, and doing other malicious things without the owner of the device hearing a single thing. Android devices with voice-enabled search would respond by reading from the Whopper's Wikipedia page. While DolphinAttacks require the transmitter to be placed in close proximity to the smart device receiving the hidden message, last month researchers were able to send these subliminal message via ultrasound from 25 feet away.

They used a technique called DolphinAttack, which translates voice commands into ultrasonic frequencies that are too high for the human ear to recognize.

We need hardware makers and AI developers to tackle such subliminal messages, particularly for devices that don't have screens to give users visual feedback and warnings about having received secret commands. They were able to hide the command, "OK Google, browse to evil.com" in a recording of the spoken sentence, 'Without the dataset, the article is useless.' Humans can not detect the command. Researchers used the loophole to embed this command into a four-second clip from Verdi's Requiem in music files.

Testing against Mozilla's open source DeepSpeech voice recognition implementation, Carlini and Wagner achieved a 100 percent success rate without having to resort to large amounts of distortion, a hallmark of past attempts at creating audio attacks.

"We want to demonstrate that it's possible, and then hope that other people will say, "Okay this is possible, now let's try and fix it", Carlini added.

Related News:



Most liked

Fancy cakes at Sonam Kapoor's wedding
While mehendi , sangeet and the wedding day were a family affair, the reception was a star-studded evening. It stars Kareena Kapoor, Swara Bhaskar and Shikha Talsania in the lead besides Sonam.

Patriots to release OT Tony Garcia
Garcia missed the entire 2017 season on the non-football illness list with reported blood clots in his lungs. With Garcia out, there will likely be a battle between two newcomers for the vacant left tackle spot.

Kim Kardashian Jokingly Blames Kanye West For Her First Gray Hair
Thank you Donatella Versace'. "You would be messed up for the rest of your life"'. "I would have maybe one more". In addition to promoting her own brands, Kim continues to work and promote brands across the fashion spectrum.

Oncologists May Not Be Adequately Informed About Medical Marijuana
Ilana Braun of Dana-Farber Cancer Institute in Boston, who led the study published Thursday in the Journal of Clinical Oncology . One or more co-authors disclosed relationships with UpToDate and Wolters Kluwer, and compensation for expert testimony.

Mumbai Dabbawalas plan exclusively to celebrate Prince Harry's wedding
Due to the amount of time that the couple and members of the royal family will be spending outside, it is no surprise that security plans are in place.

Jacqueline Fernandez caught up in vehicle accident following 'Race 3' party
The first two Race films were directed by Abbas-Mustan while the third film in the franchise is being directed by Remo D'Souza. Yesterday, Salman shared a brand new poster of Race 3 and he also announced the release date of the trailer too.

Disney parade float bursts into flames
The parade soundtrack merrily continues as characters for later floats are seen dancing before being rerouted to return backstage. The Orlando Sentinel reported a Disney World spokeswoman said the fire was extinguished quickly, and the area cleared.

Google: AI calling voice will identify itself to humans
While the calls are obviously initiated by you, one could question who holds the responsibility for information shared over them. Google announced the feature would be available to developers next month as part of MLKit so they can make use of app actions .

Policeman killed in militant attack in J&K
The slain jawan Sgct Shamim Ahmad No 834 Bd (EXK 981992) is a resident of Check Hanjan Yaripora Kulgam. The spokesman said that the police "successfully thwarted" the weapon-snatching attempt in Wadwan.

De Gea Is Premier League's Safest Hands
The 27-year-old has had 118 clean sheets in 314 appearances for Manchester United since joining the club in 2011. It means we defended well in this league, I am happy for me and happy for the team.

Brexit 'pushing food prices up'
While the PM attempts to heal Cabinet divisions, the elephant in the room remains the EU's rejection of Theresa May's two customs options.

Pep Guardiola hails "amazing" Bernardo Silva
Maybe he didn't play as much as we wanted to this season but he is been an fantastic part of the team and the success of the team. Maybe he didn't play as much as we wanted to this season but he is been an awesome part of the team and the success of the team.

Beware of fake statements ascribed to President Buhari
President of the Senate, Bukola Saraki, read the letter from Buhari at the plenary on Tuesday in which he sought legislative approval for the appointments.

Senate Appeals Ruling Nullifying Omo-Agege's Suspension
The judge further ruled that constitutional provisions only allow the Senate to suspend its member for not more than 14 days.

SpaceX launches updated Falcon 9 carrying Bangladesh's BangaBandhu satellite
The rocket is built to re-fly up to 10 times with minimal refurbishment, SpaceX CEO Elon Musk told reporters ahead of the launch. That's more than half of the estimated overall $62 million price of the Falcon 9, according to various trade publications.