Hackers can attack Siri, Alexa and Google Assistant with just one laser
Smart speakers such as Google Home, Amazon Echo, and more are slowly coming into every home. However a device that “always listens” raises security questions. Especially when this device can be controlled by someone outside the home.
University of Michigan security researchers have revealed how they can remotely control Google Assistant, Alexa and Siri using a laser beam.
So as you give a voice command to the device, a similar command can be transmitted by the laser light. The intricate technical details are mentioned in the paper published after 7 months of experiments. The researchers then took advantage of this weakness of the system and were able to target a laser beam hundreds of meters away using a telephoto lens. The beam arrived at the Google Home microphone door through an open window and essentially commanded ” OK Google, open the garage door ” via electrical signals.
In addition to home access, this method can be used to make online purchases, open doors with smart locks, and unlock cars that have voice command compatibility. Researchers have already alerted Tesla, Ford, Amazon, Apple and Google about the issue, and point out that covering adhesive tape with microphones doesn’t help.
The same method was used to crack smartphones, but it took a much shorter distance of 20 meters. The devices that have been successfully tested by researchers are:
Device | Voice Recognition System | Minimun Laser Power at 30 cm [mW] | Max Distance at 60 mW [m]* | Max Distance at 5 mW [m]** |
Google Home | Google Assistant | 0.5 | 50+ | 110+ |
Google Home mini | Google Assistant | 16 | 20 | – |
Google NEST Cam IQ | Google Assistant | 9 | 50+ | – |
Echo Plus 1st Generation | Amazon Alexa | 2.4 | 50+ | 110+ |
Echo Plus 2nd Generation | Amazon Alexa | 2.9 | 50+ | 50 |
Echo | Amazon Alexa | 25 | 50+ | – |
Echo Dot 2nd Generation | Amazon Alexa | 7 | 50+ | – |
Echo Dot 3rd Generation | Amazon Alexa | 9 | 50+ | – |
Echo Show 5 | Amazon Alexa | 17 | 50+ | – |
Echo Spot | Amazon Alexa | 29 | 50+ | – |
Facebook Portal Mini | Alexa + Portal | 18 | 5 | – |
Fire Cube TV | Amazon Alexa | 13 | 20 | – |
EchoBee 4 | Amazon Alexa | 1.7 | 50+ | 70 |
iPhone XR | Siri | 21 | 10 | – |
iPad 6th Gen | Siri | 27 | 20 | – |
Samsung Galaxy S9 | Google Assistant | 60 | 5 | – |
Google Pixel 2 | Google Assistant | 46 | 5 | – |