Latest in Gear

Image credit:

Hijacked headphones could be used to listen in on your life

Leaving earbuds plugged into your PC could soon be a security threat.
Sean Buckley, @seaniccus
November 23, 2016
Share
Tweet
Share

Sponsored Links

Fun fact: If you're in a pinch and need a microphone, a spare pair of headphones can do the job. Not so fun fact? A group of researchers at Israel's Ben Gurion University just figured out that those headphones can be hijacked to spy on you. Yeah -- 2016 is scary.

Technically, the group's work doesn't so much hack headphones as it hacks a PC. Researchers created a piece of malware that exploits the audio-jack retasking function of RealTek codecs, the audio technology that comes with most PC motherboards. An attacked computer can remotely be configured to swap the headphone jack for the microphone jack, allowing any headphones that might potentially be plugged in to serve as a microphone -- making it possible to use them as an eavesdropping device. The audio is pretty good, too: in tests done with a pair of Sennheiser headphones, recorded conversation was understandable from up to 20 feet away.

The group's software, called 'Speake(a)r' isn't actually malicious, and was only used to test a theory -- but researchers say the threat is very real. "People don't think about this privacy vulnerability," research lead Mordechai Guri told Wired. "Even if you remove your computer's microphone, if you use headphones you can be recorded."

So far, the group has only replicated the results in PCs using RealTek audio, but it's possible that tablets, smartphones and other devices with audio jacks could be vulnerable to a similar attack. There's no evidence that any such malware exists in the wild, either. Still, better safe than sorry: if you're worried about being spied on, unplug your headphones when you're not using them.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Presenting the Best of CES 2021 winners!

Presenting the Best of CES 2021 winners!

View
Bloomberg: 'Cyberpunk 2077' full development didn't start until 2016

Bloomberg: 'Cyberpunk 2077' full development didn't start until 2016

View
Canon made a site that lets you 'take photos' from a real satellite

Canon made a site that lets you 'take photos' from a real satellite

View
The next iPhone might have an in-screen fingerprint scanner

The next iPhone might have an in-screen fingerprint scanner

View
Philips Hue module turns any light switch into a smart switch

Philips Hue module turns any light switch into a smart switch

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr