News for hackers. Stuff that matters.
Re:Alexa shows private Wyze Cam feed to stranger [video] by maxheadroom on Sunday June 02, 2019 @01:36AM (#20073673)
>Feels like a kind of SQL Injection ("voice injection attack"?).

We used to take advantage of this on conference calls, where one of the participants was on speaker-phone and had an Alexa.

"Alex, play 'Never going to give you up' by Rick Astley"

Hopefully, people start waking up to this attack surface, as it's taken adventage of more because it's a very dangerous "gotcha".

Consider, for example, saying, "OK, Google, show me my last messages," during a conference call, in which Google will also read the messages aloud.

Fun times...

There are no comments on this comment yet.