Fix upcoming for Google Home, Chromecast bug that can tattle on your location

Your trusty Google Home speaker may not be all that trustworthy after all — at least, not for now. Security researcher Craig Young from the firm Tripwire has discovered a bug that allows both the Google Home and the Google Chromecast TV stick to share user location, which needless to say is less than ideal. Apparently, the bug works by exploiting a loophole, and results in cross-checking the wireless networks in the vicinity with Google’s exacting geolocation services.

But don’t worry — this vulnerability won’t be present for long. On Monday, June 18, security expert Brian Krebs reported that Google will fix the location privacy leak “in the coming weeks.” And not a moment too soon — exploiting the bug is apparently quite straightforward, and requires attackers to simply run a script in the background in order to collect location data on anyone with a Google Home or Chromecast installed on their local network. The attacker wouldn’t even need to be connected to your network; they would only need to send you a malicious link, and for you to keep that link open for about a minute while they triangulated your position.

“I’ve only tested this in three environments so far, but in each case the location corresponds to the right street address,” Young told Krebs. “The Wi-Fi based geolocation works by triangulating a position based on signal strengths to Wi-Fi access points with known locations based on reporting from people’s phones.” Although IP-based geolocation is only accurate to about three miles around the compromised device, the method that Young has discovered actually delivers location data to an accuracy of about 30 feet. Young has even produced a demo of the bug in action, which you can check out in the above video.

Krebs notes that Google only agreed to address the issue after he contacted them and informed the team that he would be publishing a piece about the problem. In fact, Young had previously made contact with Google, but the tech giant refused to issue a patch, noting that the geolocation feature was “intended behavior.” Clearly, Google has changed its tune, and now, the fix should go live in mid-July.

Product Review

Traeger’s Timberline smoker starts to get smart, but isn't ready to graduate

Renowned for its line of wood pellet grills, Traeger has taken its game to the next level with the Timberline 850 Wi-Fi-controlled grill. Just how smart is this smoker? Read our review.
Mobile

10 common Google Pixel problems and how to deal with them

Google's Pixel smartphone may be running the latest software, but it still has its fair share of issues. We've rounded up some of the more common Google Pixel problems, along with a few solutions for addressing them.
Mobile

Google Pixel 3 XL may feature a massive 6.7-inch display

It hasn't been too long since Google launched the Pixel 2, but it's already gearing up for the next iteration, the Google Pixel 3. Here's everything we know about the upcoming phones so far.
Smart Home

iDevices Thermostat now compatible with Alexa, Google Assistant, and Siri

The iDevices Thermostat now works with voice requests from Google Assistant. Check or set your iDevices Thermostat with questions such as, "Hey Google, what's the thermostat set to?" or "OK Google, set the temperature to 75 degrees."
Smart Home

A 10-step guide on Google Home setup for your new device

This device can do a whole lot, from playing music to reading the weather to controlling your smart home devices. We break down how to set up your Google Home so that you can get started your new device.
Deals

TP-Link smart plugs are on sale for just $16 on Amazon right now

Did you know there is a way to make just about any plug-in device a smart device? It's called a TP-Link smart plug, and for a limited time, you can pick one up for just $16 on Amazon and Walmart.
Emerging Tech

Awesome Tech You Can’t Buy Yet: Robo sidekicks, AC for your bed, and more

Check out our roundup of the best new crowdfunding projects and product announcements that hit the Web this week. You can't buy this stuff yet, but it sure is fun to gawk!
Product Review

Samsung DW80M9 Chef Collection dishwasher review

Samsung aims to change the dishwasher game with its newest model, the DW80M9 Chef Collection model featuring Samsung’s WaterWall technology. But it’s the thoughtful design elements that really make this dishwasher stand out.
Smart Home

Put away that sponge and let us help you pick the best dishwasher for your buck

Tired of doing dishes by hand? Take a look at our picks of the four best dishwashers currently available and let a machine do the dirty work for you. They’ll do a much better job, anyway.
Smart Home

Amazon to launch Alexa in Mexico later this year, following June debut in France

After successful launches in Germany, Japan and India, Amazon launched its Alexa-enabled Echo devices in France in June with localized features. Alexa will launch in Mexico later this year.
Smart Home

Samsung SmartThings adds A.I.-based Wi-Fi for faster, smarter home networking

Samsung introduced the SmartThings Wifi, an A.I.-based multifunction mesh networking router with an integrated smart home hub. The device intelligently allocates network speed and bandwidth based on device and application needs.
Smart Home

White-hat Chinese hackers turn Alexa into a spy, briefly

A team of Chinese researchers revealed this week that they were able to use a cracked Amazon Echo to exploit a series of Alexa interface flaws to take control over an unteuched Echo running on the same network.
Smart Home

Get the support you deserve at work in one of the best office chairs

Sitting at the office all day can be tough on more than just your back. Check out our picks for the best office chairs, whether you're in the market for something basic or a bit more luxurious.
Emerging Tech

Be a master of your own ever-changing ‘galaxy’ with this kinetic wall art

Art Machine is a stunning work of kinetic art that looks like a continuously swirling galaxy or turbulent weather formation viewed through a ship's porthole. Check it out in all its glory.