Voice assistant sabbotage
Everyone and every device are susceptible to a cyber-attack. But what happens if those cyber-attacks turn into real life threats?
It’s more possible than you think. Researchers at China’s Zheijiang University discovered a new tactic that manipulates smart devices’ voice assistants.
Wolf in sheeps clothing
They call it DolphinAttack. It sounds like a non-threatening name, but there is power behind its meaning. DolphinAttack refers to using high frequency voices to silently activate and successfully hack voice assistants. Researchers tested the method by converting human commands into ultrasonic frequencies, over 20,000 hz.
They used a smartphone with an amplifier, ultrasonic transducer and battery to play back the silent commands, which activated the voice assistants.
It’s a simple and extremely inexpensive option for hackers. The total cost of parts was less than $3.
Silent but Detrimental
Ultrasonic frequencies are inaudible to humans because they are too high for us to hear. However, devices using microphones recognize them as a human voice. Researchers tested these silent commands across all hardware in five languages (French, English, Chinese, German, Spanish) and came to the same conclusion across the board.
The method worked was successful on 16 smart devices and 7 systems.
Think of how many devices you have linked to voice assistant. Even if you do not own an at home assistant, you may still use Siri or Google Assistant to search the web and communicate. Hackers can use ultrasonic manipulation to open malicious websites.
The attacks can also become even more direct. In the case where a smart device is linked to unlocking your door, these threats turn into real life dangers.
Devil is in the details
Luckily, there are regulations that can diminish the chances of such an attack. In order to use silent commands, hackers must be at least 5-6 feet from the device. The voice assistants also need to be activated beforehand.
Upon hearing the command, the voice assistant will repeat the action which will alert the owner. This type of attack will be the most successful in a public place as it requires a significant amount of distractions.
Device makers have a chance to stop these attacks before they start. By implementing a program to ignore commands over 20,000 hz and modify microphones to limit high frequencies, smart devices will be immune from such attacks.
However, not everyone is on board. Some companies site ultrasonic pairing with other devices as a reason to not create such limitations. However, is it worth it?
Google set to release new AI-operated meeting room kit… and it’s pretty baller
(TECH NEWS) Google’s newest toy is designed to “put people first” by alleviating video and audio issues for conference room meetings.
Remote meetings can be the worst sometimes. The awful video and audio quality are frustrating when you’re trying to hear important details for an upcoming project. Even with the fastest internet connection, this doesn’t guarantee you’ll be able to clearly hear or see anyone who’s in the office. But Google is re-imagining conference rooms with their new video conferencing hardware.
Yesterday, the company introduced Google Meet Series One. In partnership with Lenovo, this meeting room kit is made exclusively for Google Meet and is poised to be the hardware that “puts people first.”
The Series One has several components that make it stand out. First is the “Smart Audio Bar,” powered by eight beam-forming microphones. Using Google Edge TPUs, the soundbar can deliver TrueVoice®, the company’s “proprietary, multi-channel noise cancellation technology.” It removes distracting sounds, like annoying finger and foot-tapping noises, so everyone’s voices are crystal clear from anywhere in the room.
The hardware also has 4K smart cameras that allow for high-resolution video and digital PTZ (pan, tilt, zoom) effects. Processed with Google AI, the device knows to automatically zoom in and out so all of the meetings’ participants are framed in the camera. With an i7 processor and Google Edge TPUs, the system is built to “handle the taxing demands of video conferencing along with running the latest in Google AI as efficiently and reliably as possible.”
The meeting kit has Google grade security built-in, so the system automatically updates over-the-air. The system also works seamlessly with Google services and apps we already use. Its touch control display is powered by a single ethernet cable. From the admin controls, you can manage meeting lists and control room settings. Powered by assistant voice commands, their touch controller provides a “touchless touchability”; if you want to, you can join a meeting just by saying, “Hey Google, join the meeting.”
These new meeting kits are easy to install and are versatile. They can be configured to fit small, medium, and large-sized rooms. “Expanding kits for larger rooms can be done with just an ethernet cable and the tappable Mic Pod, which expands microphone reach and allows for mute/unmute control.”
According to the Google Meet Series One introductory video, the meeting room kits are “beautifully and thoughtfully designed to make video meetings approachable and immersive so everyone gets a seat at the table.”
Currently, there is no release date set for Google Meet Series One. However, pre-orders will soon be available in the US, Canada, Finland, France, Norway, Spain, Ireland, United Kingdom, Sweden, Australia, New Zealand, Japan, Netherlands, Denmark, and Belgium.
One creepy way law enforcement might have your private data
(TECH NEWS) Wait, geofences do what? Law enforcement can pull your private data if you’re in the wrong place at the wrong time.
By now, it’s pretty common knowledge that our smartphones are tracking us, but what you might not be aware of is just how much law enforcement is taking advantage of our private data. Now, the good news is that some places have gotten wise to this breach of privacy and are banning certain tactics. The bad news is: If you were ever in the vicinity of a recent crime scene, it’s quite possible your privacy has already been invaded.
How are law enforcement doing this? Well, it starts with a geofence.
At its core, a geofence is a virtual border around a real geographic location. This can serve many purposes, from creating marketing opportunities for targeted ads to tracking shipping packages. In the case of law enforcement, though, geofences are often used in something called a geofence warrant.
Traditionally, warrants identify a subject first, then retrieve their electronic records. A geofence warrant, on the other hand, identifies a time and place and pulls electronic data from that area. If you’re thinking “hey, that sounds sketchy,” you are–forgive the pun–completely warranted.
With a geofence, law enforcement can dig through your private data, not because they have proof you were involved in a crime, but because you happened to be nearby.
This practice, though relatively new, is on the rise: Google reported a 15-fold increase in geofence warrant requests between 2017 and 2018. As well as invading privacy, these warrants have led to false arrests and can be used against peaceful protesters. Not to mention, in many cases, geofence warrants can be extremely easy to acquire. One report in Minnesota found judges signed off on these cases in under 4 minutes.
Thankfully, there have been signs of people pushing back against the use of geofence warrants. In fact, there have been multiple federal court rulings that find the practice in violation of the Fourth Amendment, which protects citizens from “unreasonable searches and seizures,” including your electronic data.
If you’re still worried about your privacy, there are ways to keep your electronic data on lock. For example, turn off your location services when you’re traveling, and avoid connecting to open Wi-Fi networks. You can also work to limit location sharing with apps and websites.
Incoming! Amazon drones will be dropping off packages soon (we hope)
(TECH NEWS) The Federal Aviation Administration has approved Amazon for drone delivery service, but when will the drones actually take flight?
Amazon has finally received the stamp of approval from the Federal Aviation Administration (FAA) to deliver packages by drones. This pivotal step brings the online retailer closer to their promise of delivering packages to customers in 30 minutes or less.
In 2013, during CBS’s “60 Minutes” interview, Amazon CEO and Founder, Jeff Bezos, said drones would be delivering customers’ packages within five years. Although the estimate is a couple of years off, it seems like that day might be right around the corner.
Personally, I’m looking forward to the day when little floating presents are sailing through the sky (Animal Crossing balloons, anyone?). Despite our excitement to see our latest Amazon impulse purchase land on our doorstep, it isn’t going to happen overnight.
The Part 135 Air Carrier Certificate Amazon obtained for its fleet of Prime Air drones will allow the company to use unmanned aircraft systems (UAS) “to carry the property of another for compensation beyond visual line of sight.” Although the FAA certification is allowing Amazon to begin test trials, Bloomberg reports that the retail giant still has “regulatory and technical hurdles” to overcome.
In addition, the FAA has yet to set regulations that will “serve as a framework to expand drone flights over crowds, a building block necessary for deliveries.” Amazon hasn’t said when and where it will start testing the delivery service either.
David Carbon, Amazon Vice President who oversees Prime Air, made this statement: “This certification is an important step forward for Prime Air and indicates the FAA’s confidence in Amazon’s operating and safety procedures for an autonomous drone delivery service that will one day deliver packages to our customers around the world.”
This approval is definitely a step forward, but Amazon has been working on the drone delivery service for years. Early last year, the giant retailer revealed they would start offering one-day shipping. They have followed through on this, at least. And during a Las Vegas Conference in June 2019, they revealed their “fully electric drones that can fly up to 15 miles and deliver packages under five pounds to customers in less than 30 minutes.” But it still doesn’t answer when we can expect to see whizzing drones overhead.
I’m not sure when Amazon will fulfill their last promise. But it is getting closer. What I do know is that I look forward to the Amazon drones taking flight. I can’t wait to place my orders knowing that I will get that last-minute present I ordered just in time.
Opinion Editorials3 days ago
The actual reasons people choose to work at startups
Business Marketing2 weeks ago
Why you must nix MLM experience from your resume
Opinion Editorials1 week ago
Online dating is evolving and maybe networking will too
Business Finance2 weeks ago
Bitcoins worth $300K recovered from an old zip file
Business Entrepreneur2 weeks ago
Kanception simplifies your project management with nested tasks
Business News2 weeks ago
Freelancers, rejoice! AB5 modified for the better
Tech News2 weeks ago
Third-party MacBook repair shops will get Apple seal of approval
Business News1 week ago
2020 Black Friday shopping may break the mold