Thursday 30 June 2016

Hack attack: How Siri or Google Now can hear silent commands from 16 feet away!

You might not want to keep your wired headphones plugged into your iPhone or Android handset. The wires act as an antenna and with the right equipment, hackers can take advantage of that.



Shh.... Hear that? It's the sound of silence.
And that's why you won't know if a hacker is controlling your phone via Siri or Google Now through radio waves.
Wired reports that a group of researchers at France's government information security group found a way to silently send commands to nearby iOS and Android smartphones. I wouldn't panic just yet because the tools they needed are a full laptop and antenna but the team says their kit could fit into a backpack and you'd never know.

With the open source GNU Radio software on a laptop, electromagnetic signals can be sent to those devices. Depending on the sent command, Siri or Google Now can told to open up a website, send a text, place a call or do any other number of things.The attacking method uses connected headphones in an iPhone or Android handset to act as a receiving antenna; similar to how FM radio chips do so inside mobile devices.
Granted, most handset owners don't have wired headphones plugged into them when not in use. And if someone was remotely sending silent "voice" commands to your phone, you'd likely see what's going on; the hack doesn't disable the handset's display.
Even so, it's a concerning proof of concept that both Google and Apple should consider researching and finding a way to close the door on any potential unwanted access. The researchers say they have shared their information with both companies.
In a demonstration of the remote control, the researchers were about six feet from a phone. They say that with more battery power and a stronger antenna, the exploit could occur in up to a 16 foot range. The equipment to do so wouldn't be as portable, however.

No comments:

Post a Comment