April 27, 2018
Security researchers have discovered a troubling flaw that confirms what may be many people’s biggest fear about smart home devices.
By creating a ‘skill’ for Alexa, the popular voice assistant created by Amazon, the researchers were able to make the smart speaker listen in on and record any conversations that it hears while eavesdropping.
Not to worry, though, as Amazon says it has fixed the issue.
Researchers at cybersecurity firm Checkmarx created what seemed to be a harmless calculator skill, or an application used for the voice-activated assistant, that would secretly record long after a user made a command.
Alexa-enabled devices are programmed to only respond and record interactions when they’re prompted by a ‘wake word’, such as ‘Echo,’ ‘Alexa’ or ‘computer’.
After a user gives a command, Alexa is supposed to end the session or listen for another command, which means that the session remains briefly open.
This article was posted: Friday, April 27, 2018 at 4:29 am