White-hat Chinese hackers turn Alexa into a spy, briefly

This won’t come as any surprise to those of you who put tape over your laptop’s cameras, but Alexa might not be 100 percent secure. This week at the Def Con Hacking Conference in Las Vegas, researchers from the Chinese conglomerate Tencent Holdings disclosed that they were able to use a modified Amazon Echo to hack into another Echo running on the same network. The researchers were not only able to take full control over the secondary device but also silently record and transmit audio to a third party, essentially turning the smart speaker into great big bugging devices, as reported by Wired.

If you’re feeling the slightest bit paranoid right now, cool your jets. These white-hat hackers have already informed Amazon of the exploit and the company rolled out security fixes last month.

Researchers Wu Huiyu and Qian Wenxiang also explained that their technique involved far more than a straight-up remote hack, fortunately. First, they had to drastically modify a standard Echo by removing a flash memory chip, modify its firmware to get root access, and solder the chip back to the circuit board. Sure, this involves little more than a little engineering knowledge and some things from RadioShack but it’s still not something your average spy is likely to have on hand.

However, once they placed their rogue device on the same network as other Echo devices, they could use Amazon’s proprietary communication protocols plus some undiscovered Alexa interface flaws (address redirection, cross-site scripting, and web encryption downgrades) to gain full access over the device. They could, for a more banal example, play any sound they wanted to. Or, they could silently record and transmit every single sound in the room, including conversations in adjacent rooms.

When we extend the logic, that means that an espionage outfit could simply replace a single Amazon smart speaker in a hotel’s network and take complete command over every smart speaker on the network. Sleep tight.

“After several months of research, we successfully break the Amazon Echo by using multiple vulnerabilities in the Amazon Echo system, and [achieve] remote eavesdropping,” the hackers said in a statement to Wired. “When the attack [succeeds], we can control Amazon Echo for eavesdropping and send the voice data through the network to the attacker.”

In addition to noting that the Alexa interface flaws have been patched, Amazon stressed that this particular hack requires a malicious actor to take physical access over at least one device.

This is just the latest in a series of attempts to crack the smart speaker’s security platform. Last year, British hacker Mark Barnes was able to install malware on an Echo via metal contacts accessible under the speaker’s rubber base. The security firm Checkmarx also revealed a potentially dangerous security flaw earlier this year when it hacked Alexa’s recording function via malware on a seemingly innocuous calculator app.

Smart Home

Colored fridges are back, baby! GE’s new appliances revive the 1950s trend

GE Appliances is coloring us surprised at KBIS 2019 by introducing new hues for its signature Cafe line of smart home appliances including four new hues launching this fall to complement its black and white options.
Smart Home

Amazon Echo Dot vs. Echo Dot Kids Edition: What’s the difference?

The Echo Dot Kids Edition combines a free year subscription to FreeTime Unlimited with a two-year, worry-free warranty. But is the Kids Edition really all that much different than the regular Echo Dot?
Smart Home

OK Google, what else can you do? The best tips and tricks for Google Home

The Home functions in a similar fashion to its main competitor, the Amazon Echo, but has the added benefit of select Google services. Here are few tips to help you make the most of the newfangled device.
Smart Home

Google Home vs. Amazon Echo: Which one is better for you?

What happens when you compare the Google Home vs the Amazon Echo? Both smart speakers have good qualities, but what happens when you compare they're features side-by-side? We think one of these smart gadgets wins over the other.
Smart Home

What exactly is Alexa? Where does she come from? And how does she work?

While "Alexa" has become synonymous with products like the Amazon Echo, you can't actually go out and buy an "Alexa." So what is Alexa? How does she work? Here's everything you need to know about Amazon's virtual assistant.
Home Theater

Reasons not to mount a TV over your fireplace (and other helpful tips)

Mounting a TV above your fireplace may be popular and it might even seem appealing, but we have some concerns. We've got a list of reasons why placing your digital picture machine over a fire should be avoided, if at all possible.
Smart Home

Stainless steel is so last year. In 2019, it’s all about colorful appliances

For the past couple of decades, the color of choice for appliances has been stainless steel. Now, makers are introducing ovens, fridges, and dishwashers in vibrant hues to give customers a more customized, refined look in the kitchen.
Product Review

Miele's TWI180 dryer has one job, but struggles to get it done

Miele’s Heat-Pump Dryer is a compact machine that steams your clothes by recycling the water collected during the drying process. But how well does this technique work for getting clothes dry?
Deals

Suck up the savings with these vacuum cleaners on sale for $100 or less

Keeping your floors clean around the home is a constant chore. To help make things a whole lot easier, we've picked out some great vacuum cleaner deals available right now, from full-sized upright models to robot vacs.
Smart Home

1 in 4 people plan to buy a smart lock this year, study says

According to new research published by Parks Associates, one in four households in the United States are planning to purchase as smart door lock within the next 12 months to protect their home.
Smart Home

Samsung lets slip that its Galaxy Home speaker will be here by April

Samsung has been teasing customers about its Galaxy Home smart speaker, powered by the Bixby digital assistant, for some time but after neglecting to mention it at Galaxy Unpacked, the company let it slip that it's coming in April.
Smart Home

Become a master chef with restaurant-grade gear you can put in your home

Hestan's new line of customizable indoor cooking suites for home chefs features ranges and range tops in a variety of sizes, single or dual fuel sources, number of burners, and griddles in two sizes with single or multiple heat zones.
Smart Home

Mount your TV correctly with the best stud finders of 2019

Endlessly searching for a stud in your wall can be a chore. Fortunately, these stud finders are both high-tech and straightforward, meaning you can drill, nail, and hang with the utmost confidence.
Smart Home

From fridges to fireplaces, the most luxurious home items you can’t afford

KBIS 2019 was a chance to see what's new in kitchen and bath tech, including all kinds of cool appliances. Some of these are the over-the-top luxury items that are destined for a very small number of mansions.