[HN Gopher] Wiretapping Google smart speakers
       ___________________________________________________________________
        
       Wiretapping Google smart speakers
        
       Author : NotPractical
       Score  : 78 points
       Date   : 2022-12-28 11:19 UTC (11 hours ago)
        
 (HTM) web link (downrightnifty.me)
 (TXT) w3m dump (downrightnifty.me)
        
       | _-____-_ wrote:
       | Very nice write-up and creative exploits.
       | 
       | > That got me thinking, maybe I could provide a scan
       | configuration that instructs the Google Home to scan for itself
       | 
       | This was my favorite bit of creativity. Great work!
        
       | jiayo wrote:
       | Great writeup!
        
       | misnome wrote:
       | > Closed (Intended Behavior)
       | 
       | Christ, this is depressing.
        
         | [deleted]
        
         | progbits wrote:
         | Clearly given it was reopened after providing more details this
         | was a misunderstanding or triage mistake. Given the volume of
         | reports this must happen all the time, and was resolved here as
         | expected.
        
         | phh wrote:
         | Well, I read through most of the article, and felt like "well,
         | this is work as intended". Except the "consider localhost for
         | debugging" part, I don't see any bug anywhere, only UX choices.
         | 
         | In my understanding of TFA, every "trick" until "I can make
         | silent calls" were explicitly made available by Google on
         | purpose and could have been done without reverse engineering by
         | using the standard smartphone Google app (except for wifi
         | deauth -- but the resulting behavior of instantly making an AP
         | is wanted by Google. I personally would have made this happen
         | only on startup, not even for security reasons)
         | 
         | And well, that's the scary part I guess: that this system is so
         | big, that Google can't control all the ins and outs of the
         | various UX choices.
         | 
         | One thing I don't understand, is that Chromecast were
         | historically famous for pairing over ultrasound, guaranteeing
         | physical presence. And to this day, ultrasound support is still
         | a hard requirement for all Google/Android devices for that
         | feature. Has this been completely abandoned? Don't Chromecast
         | <=> Google Home team discuss?
        
       ___________________________________________________________________
       (page generated 2022-12-28 23:00 UTC)