Research

Google Assistant may be vulnerable to attacks via subsonic commands

Google Assistant may be vulnerable to attacks via subsonic commands

That means if you fire up the wrong playlist-a malicious one-it may sound like everything is normal, but in reality someone is attacking your phone or smart speaker. Well, it turns out that there are certain types of white noise that only devices like Amazon's Alexa and Apple's Siri can hear - and experts think hackers know how to use them. A report in Thursday's New York Times revealed that students from University of California, Berkeley, and Georgetown University were able to hide subliminal commands for virtual personal assistants inside white noise played over loudspeakers.

So far, there's nothing to suggest that such subliminal messages have been successful outside of a student research setting, but one of the Berkeley paper's authors says he believes it's just a matter of time:"My assumption is that the malicious people already employ people to do what I do", he told the New York Times.

Amazon said that it doesn't disclose specific security measures, but it has taken steps to ensure its Echo smart speaker is secure.

More news: Canada job growth stalls even with fastest wage gains since 2012

Apple has additional security features to prevent the HomePod smart speaker from unlocking doors and requires users to provide extra authentication, such as unlocking their iPhone, in order to access sensitive data. The receiver must be close to the device, but a more powerful ultrasonic transmitter can help increase the effective range. You'll still need a direct line to the device, as the commands are incapable of penetrating through walls. Moreover, Chinese and American researchers from China's Academy of Sciences and other institutions are said to have showcased how they could control voice-activated devices with commands embedded in songs that can broadcast over the radio or played on YouTube.

Testing against Mozilla's open source DeepSpeech voice recognition implementation, Carlini and Wagner achieved a 100 percent success rate without having to resort to large amounts of distortion, a hallmark of past attempts at creating audio attacks. They say that they have created a way to get rid of sounds that would normally be heard by Google Assistant, Siri and Alexa, and replace them with audio files that can not be heard by the human ear. In the latest development of the research, some of the UC Berkeley students determined a way to hide commands within music or spoken text recordings. But can they be used for nefarious purposes? Researchers used the loophole to embed this command into a four-second clip from Verdi's Requiem in music files.

Carlini added: "We want to demonstrate that it's possible and then hope that other people will say, 'OK this is possible, now let's try and fix it'".


  • Anushka Sharma Gets A Perfect Reply To Her Message To Sonam Kapoor

    Anushka Sharma Gets A Perfect Reply To Her Message To Sonam Kapoor

    The bride joined in the after-party by slipping into a more comfortable outfit, a shiny white kaftan and looked a vision in white. Borrowing a quotation out of popular TV character Ellen DeGeneres, " Anand captioned the post too: "It is wonderful to be loved.
    TDP workers pelt stones at Amit Shah's convoy

    TDP workers pelt stones at Amit Shah's convoy

    The BJP is sending out its top leaders to hold mega road shows across Karnataka on the last day of campaigning for Karnataka Election 2018.
    Miami votes unanimously in favour of 2019 F1 race

    Miami votes unanimously in favour of 2019 F1 race

    The unexpected situation with tyres meant that the headline lap times were potentially not a reflection of real pace. Stroll almost hit the tyre barriers after going off the track with about a half-hour left in the first session.
  • Aston Martin DB11 AMR debuts with 630 horsepower

    Aston Martin DB11 AMR debuts with 630 horsepower

    Aston Martin's engineers also refined the DB11 AMR's chassis to give it a greater sense of connection without harming the ride. To signify its range-topping position, the DB11 AMR gets exposed carbonfibre trim and gloss black detailing on its exterior.
    FCC issues record $120 million robocall fine

    FCC issues record $120 million robocall fine

    Abramovich has denied engaging in "Fraudulent activities" saying, "I am not the kingpin of robocalling that is alleged". Adrian Abramovich of Miami was caught using spoofed robocalls to sell people timeshares and vacation packages.
    Theresa May told ministers to get 'hands on' over customs dispute

    Theresa May told ministers to get 'hands on' over customs dispute

    Trusted trader schemes would enable companies to pay duties every few months rather than every time they crossed the border. The customs union ensures EU member states all charge the same import duties to countries outside the EU.
  • Charlotte Flair To Undergo Surgery For Ruptured Breast Implant

    Charlotte Flair To Undergo Surgery For Ruptured Breast Implant

    The site states that one source believes Flair will undergo the surgery following the WWE European tour that kicks off this week. However, nothing has indicated she'll need tht long, and WWE has yet to rule her out for June 17 Money in the Bank pay-per-view.
    Few showers and storms this afternoon ahead of HOT weekend

    Few showers and storms this afternoon ahead of HOT weekend

    Thankfully, the rain chances will disappear Sunday with temperatures also heating up a bit as we top off at 69° in the afternoon. Monday we will have a linger shower or thunderstorm early Monday then clouds will break for some sunshine.
    De Gea wins EPL Golden Glove award

    De Gea wins EPL Golden Glove award

    Given that it's awards season, we want you to name every single recipient of the honour in just four minutes. We are a team and this is good for me and the team. "David has been terrific", added Jose Mourinho.
  • Massive wave sets southern hemisphere record, scientists say

    Massive wave sets southern hemisphere record, scientists say

    Dr Durrant said it was possible that even bigger waves were generated by the storm but not recorded. Brazilian surfer Rodrigo Koxa, 22, caught a 24.38 meter giant at Nazare in Portugal in November.
    Marcus Rashford urged to think about Manchester United exit

    Marcus Rashford urged to think about Manchester United exit

    So it's just an emotional moment. "We try to organise a team to get that point but give opportunities to people to play". "I was very far from it but when I saw the reaction of the players, I think that was nothing extraordinary".
    Arsene Wenger makes bold prediction about Arsenal next season

    Arsene Wenger makes bold prediction about Arsenal next season

    Arsenal players and the departing Arsene Wenger came together to donate £100,000 in the event hosted at the Emirates Stadium. Arsenal travel to Huddersfield Town to end their Premier League season on Sunday.