Amazon has fixed a bug that allowed hackers to listen in on Alexa devices

amazon alexa laugh echo night creepy feature

One of the most convenient things about Amazon’s Echo smart speaker is that Alexa is always ready to listen to your commands. However, a team from the Checkmarx, a security testing firm, wanted to see if that always-on feature could turn the gadget into a hacking device — and it turns out the answer was yes.

Checkmarx was able to create a skill that allowed hackers to listen in on Echo devices and their users’ conversations. Amazon fixed the problem earlier this month, but the incident serves as a cautionary tale as our homes become more connected and voice assistant speakers become more common.

Here’s how Checkmarx did it: Ordinarily, Alexa stops listening after it carries out your command and doesn’t start again until you say the “Alexa” wake word. However, the researchers figured out that hackers could take advantage of Alexa’s “re-prompt” feature. If Alexa doesn’t understand what you say the first time, she lets you know that and keeps listening until you repeat yourself.

Checkmarx’s researchers found it would be possible for hackers to develop an Alexa skill that made the virtual assistant continue to listen despite initially understanding a command. They were also able to mute the follow-up Alexa gives, when she asks users to repeat a prompt, thereby making the speaker stay silent but continue to listen. The next part of the Checkmarx hack involved orchestrating a way for Alexa not only to keep listening without people realizing it, but also to transcribe what she heard. Amazon’s servers store the audio content of people when they are speaking to Alexa.

Usually, developers who make skills get transcriptions of those conversations as long as spoken words are in the context of the skill. In this case, Checkmarx’s team made the skill record any word that was part of Alexa’s built-in dictionary.

Users have plenty of security considerations to worry about when it comes to cloud stored-data. With that in mind, Checkmarx’s researchers wanted to ensure their findings held true in real life. They created a seemingly innocent calculator skill that made Alexa keep listening for over a minute until someone from Checkmarx told it to stop. People in the room talked as the skill kept running. They found that, sure enough, the dialogue got captured in a word-for-word transcript, effectively giving a person the ability to “eavesdrop” by reading the text.

Checkmarx reached out to Amazon to tell the company about the device’s flaw earlier this month, and Amazon fixed the problem on April 10.

Amit Ashbel, Checkmarx’s director of product marketing, said Amazon shortened the amount of time Alexa continues to listen and removed the ability to silence Alexa’s reprompting dialog. Those adjustments make it impossible to re-create the hack. Amazon did not comment on the hack.

If you’re worried about Alexa listening in on you, you can always go into the app and delete your history.

Product Review

Amazon's new Echo is smaller and cheaper; firmware upgrade improves sound

The all-new Echo is shorter, cuter, and comes with several different color and fabric choices. Our Amazon Echo review reveals that while the acoustics initially weren't great upon release, a firmware upgrade has improved the sound.
Smart Home

Amazon has a huge team dedicated to enhancing Alexa and Echo

An Amazon executive on Tuesday, November 13 revealed the huge size of the team that's tasked with developing the Echo, the company's smart speaker, and Alexa, the digital assistant that powers it.

Say goodbye to Cortana: An Alexa app is available on all Windows 10 PCs

Amazon revealed today that its Alexa app is now available as a download on all Windows 10 PCs running the April 2018 Update, allowing for all the conveniences of yet another digital assistant. 
Smart Home

How’s your Spanish, Alexa? Some Amazon Echo devices pick up a new language

Amazon's Alexa voice assistant and Echo devices are now available for customers in Mexico. Alexa has been customized for the Mexican market with local knowledge, a new voice, and support for the Spanish dialect spoken in Mexico.
Smart Home

Thanksgiving in an Instant ... Pot? Here are our favorite recipes

Did you know you can cook the majority, if not all, of your Thanksgiving menu items in your Instant Pot? It's all about picking the right recipes. These are our picks for the best Instant Pot recipes for Turkey Day.
Smart Home

You can now use Amazon Echo Buttons to set up multitasking Routines

Amazon announced that its Echo Buttons now work with Routines. You can craft custom Routines — multiple tasks performed together — and have Alexa carry out the command for you when you hit the Echo Button.
Product Review

You don't need Alexa in your microwave, but you'd be surprised what she can do

Amazon has added to its long portfolio of products with the AmazonBasics Microwave, a small appliance that works with Alexa. We took the microwave for a test drive to find out more.
Smart Home

Ecobee announces Black Friday deals on smart thermostats and smart switches

Ecobee's 2018 Black Friday deals are live. Ecobee's smart thermostats and smart wall switch are compatible with smart home voice assistant systems including Amazon Alexa, Google Home, Apple HomeKit, and Samsung SmartThings.

Here are the best Amazon Echo and Google Home deals for Black Friday

Google Home and Amazon Echo smart speakers compete head to head when it comes to smart home tech. Whether you're a fan of Alexa or Google Home, we've found the best prices on your favorite smart home devices.
Smart Home

Wynd’s new air-purifying bundle lets smart home owners breathe easier

Wynd is already well known in the tech industry for its popular Kickstarter-backed air purifier and now the company is launching two new products designed to improve air quality to inform smart home owners.
Smart Home

Google Assistant adds smart home bells and whistles in time for the holidays

Just in time for the holidays, Google Assistant is introducing a bunch of new smart home features, including the ability to reply to broadcast messages, create and use cookbooks, and access enhanced storybook content for kids.
Smart Home

Brew it fast, hot, and flavorful with our favorite coffee makers

Whether you're looking for a simple coffee maker to get you through the morning or a high-end brewer that will impress your taste buds and your friends, you'll find some of the best coffee makers around on this list.
Emerging Tech

These Alexa-stuffed retro phones don’t listen until you take them off the hook

Looking for an Amazon Echo with a cool vintage touch? Los Angeles-based Grain Design is taking old, non-working antique phones and transforming them into amazing Alexa smart speakers.
Smart Home

This alarm clock uses targeted light and sound to wake you, but not your partner

The Wake v2 isn't like your typical bedside alarm. Instead, it wakes you by shining a soft light directly into your face, thereby not disturbing the person sharing a bed with you. Pretty smart, huh?