Google Home speakers allowed hackers to snoop on conversation

[{"selector":"#anim-7cc08d5a-b9b5-49aa-a8dc-5c76b80e6277 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-fc84c54e-ad4e-46ea-9141-d3e01acf0d22","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-0577488e-55ea-4c59-a3c2-9e3ffab59e54","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-8d047b03-bee4-4bdc-9483-8b6ab63e1e3d","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-2ec90c99-b09c-4a0a-82b9-24f605c4c4dc","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] It remotely and to turn it into a snooping device by accessing the microphone feed.

A researcher discovered the issue and received responsibly reporting it to Google last year.

[{"selector":"#anim-5af81229-fb78-4e0e-9a77-686c0d974cbb [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(31.249999886225726%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-e75d7a47-7ef9-42b3-9c49-71caee0b9ca1","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-cfcde7fe-490e-41ca-a072-be91f4c402ca","keyframes":{"transform":["translate3d(132.24637%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c1f9261a-34c5-47f8-8936-46fc5805dd2d","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a32ec55a-3164-48ea-8d59-e657b4289345","keyframes":{"transform":["translate3d(134.23076%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

[{"selector":"#anim-9f1a1fd3-89af-497d-b497-824efb5c3e85 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-113475a6-9e08-42a1-92be-7af4234f365c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] The researcher published technical details about the finding and an attack scenario

While experimenting with his own Google Home mini speaker, the researcher discovered that new accounts

[{"selector":"#anim-f8746d53-9796-4811-be44-072015818aef","keyframes":{"transform":["translate3d(123.31081%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8fc41621-42d5-4620-83e3-f630dfaced4c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c56755fe-d6d0-49d7-a075-fa50ee629dab","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-50412fad-4437-4fcc-a05e-303757d323e7","keyframes":{"transform":["translate3d(124.12587%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-795975c5-4f8d-4b59-82ce-95ad558cb21c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b24bb5cf-18c9-40cc-b558-b795fb4a408d","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-05e556a8-7be4-4f39-9f37-61fb8e57257e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-21.874999829338588%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Google Home app could send commands to it remotely via the cloud API.

[{"selector":"#anim-d6b9944c-bc64-46da-a421-9042cbb9d348 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-b5f2e4e2-659c-47b5-8705-eac3477962b8","keyframes":{"transform":["rotate(-359.7719601287372deg) translate3d(-122.26415%, 0px, 0) rotate(359.7719601287372deg)","rotate(-359.7719601287372deg) translate3d(0px, 0px, 0) rotate(359.7719601287372deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-fdb47e31-b762-4809-bfcc-5d270a11ae6f","keyframes":{"transform":["rotate(-359.7719601287372deg) rotateZ(-180deg) rotate(359.7719601287372deg)","rotate(-359.7719601287372deg) rotateZ(0deg) rotate(359.7719601287372deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-71420232-d81e-4bdf-b5b6-fd7dad2176b4","keyframes":{"transform":["rotate(-359.7719601287372deg) translate3d(-116.96751%, 0px, 0) rotate(359.7719601287372deg)","rotate(-359.7719601287372deg) translate3d(0px, 0px, 0) rotate(359.7719601287372deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-4351a292-805a-4bd1-b676-15693750635e","keyframes":{"transform":["rotate(-359.7719601287372deg) rotateZ(-180deg) rotate(359.7719601287372deg)","rotate(-359.7719601287372deg) rotateZ(0deg) rotate(359.7719601287372deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}]

[{"selector":"#anim-2c2733e9-0d18-43c5-b09c-22f61f6d8919 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-3c88d2f7-90e1-4d34-8ef3-62be6e49fafe","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-e43ee7c2-8355-40e9-b312-c7779a763b9f","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-033f1952-5cf8-4341-af07-fd1873e6c3e7","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-de1d47aa-bcb0-49dc-abe1-146219a34509","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] The researcher discovered that adding a new user to the target device is a two-step process

[{"selector":"#anim-d24c25f5-73bb-47fa-bfec-8c9170de1bec [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-d5266d4a-b99f-4c16-9150-e5a082ffd077","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-539a70ee-ef05-4436-bd9a-652bdb0805de","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-912dca49-1f2a-4710-960a-83b59246a3cd","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-cdec2fe4-c224-408b-a720-cf1372191a59","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] With this info, they could send a link request to the Google server.

[{"selector":"#anim-2daf2f56-f078-4575-8ee4-32e353986488 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-31.249999886225726%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}] [{"selector":"#anim-5ed90e26-1422-47ed-a6ea-d44c3529da0b","keyframes":{"transform":["scale(1)","scale(1.5)","scale(0.95)","scale(1)"],"offset":[0,0.33,0.66,1]},"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":1}] The exfiltration of the local device data and reproduced the linking request.

[{"selector":"#anim-6a6471a5-b5c0-4a75-84fe-6e5fabc87fde","keyframes":{"transform":["scale(1)","scale(1.5)","scale(0.95)","scale(1)"],"offset":[0,0.33,0.66,1]},"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":1}] [{"selector":"#anim-f8686a3b-c14b-4b50-bed2-14034ea26d24","keyframes":{"transform":["scale(1)","scale(1.5)","scale(0.95)","scale(1)"],"offset":[0,0.33,0.66,1]},"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":1}] Force it to forget stored Wi-Fi networks, force new Bluetooth or Wi-Fi pairings, and more.