Not OK Google: Android, Siri sink in SurfingAttack
Video Voice commands encoded in ultrasonic waves can, best case scenario, silently activate a phone's digital assistant, and order it to do stuff like read out text messages and make phone calls, we're told.
The technique, known as SurfingAttack, was presented at the Network and Distributed Systems Security Symposium in California this week. In the video demo below, a handset placed on a table wakes up after the voice assistant is activated by inaudible ultrasonic waves. Silent commands transmitted via these pulses stealthily instruct the assistant to perform various tasks, such as taking a photo with the front facing camera, read out the handset's text messages, and making fraudulent calls to contacts.
It's basically a way to get up to mischief with Google Assistant or Apple's Siri on a nearby phone without the owner realizing ..
Support the originator by clicking the read the rest link below.
