Checkmarx researchers including Erez Yalon have created a "rogue Alexa skill" that bypasses Amazon's security checks: it lurks silently and unkillably in the background of your Alexa, listening to all speech in range of it and transcribing it, then exfiltrating the text and audio of your speech to the attacker.
Checkmarx gave Amazon advance notice of the defect they exploited and Amazon has issued a patch; this is the second such flaw known to have been discovered in the Alexa platform. It's not known how many more such defects remain in the platform, or will be introduced in future versions.
Checkmarx did not attempt to get its poisoned skill approved for the Alexa store, so it's not known whether Amazon's internal checks would have detected it. The attack did have a critical weakness: Alexa's blue "listening light" illuminated while it was running; but as the team pointed out, the point of Alexa is that you can use it without looking at it.
One challenge for researchers was the issue of the “reprompt” feature in Alexa. Reprompts are used by Alexa if the service keeps the session open after sending the response but the user does not say anything, so Alexa will ask the user to repeat the order. However, Checkmarx researchers were able to replace the reprompt feature with empty reprompts, so that a listening cycle starts without letting the user know.
Researchers Hacked Amazon’s Alexa to Spy On Users, Again [Lindsey O'Donnell/Threatpost]
(Image: Cryteria, CC-BY)
Attention bookworms and rare book nerds. The Booksellers, opening in March, is a documentary celebrating bookstores and the peculiar business of collecting and selling rare books. Literary Hub writes: Have you ever dreamed of becoming an antiquarian bookseller? Or just wanted to get to know one better? Or maybe you just like old books a […]
Sarah Gailey is one of science fiction's great new talents and their 2019 debut novel Magic for Liars was incredibly strong; now they're back with Upright Women Wanted, a feminist, genderqueer science fiction western novel about gun-toting roving librarians who are secretly the heart of an antifascist resistance.
According to an article on Deadline, Spike Lee has signed on to direct a film adaption of David Byrne’s Broadway hit, American Utopia. Oscar winner Spike Lee has signed on to direct a filmed version of the acclaimed Broadway show David Byrne’s American Utopia. Participant adds another title to its portfolio of films meant to […]
Whether you own or rent your place, insurance on that home is a necessary hassle – but a new tech-driven company called Lemonade is starting to show that while it might indeed be a necessity, it doesn’t have to be a hassle. Here’s the way insurance typically works: You pay premiums and hope an accident never happens. […]
Bad news: Your brain reaches its peak performance sometime before you turn 26, and it’s all downhill from there. Good news: At any age, training with brain exercises has big-time benefits. Better news? The Ultimate Memory Mastery Bundle hooks you up with 20 hours of proven psychology and neuroscience techniques to boost your brain and […]
Admit it…even having a pocket knife within reach at a moment’s notice makes you feel a little like James Bond, right? Like, if you run up against a locked vault or a sinister superweapon, all you’d need are a couple of hand-held tools to diffuse the whole situation and save the world. Look, we don’t […]