Latest in Gear

Image credit: Devindra Hardawar/AOL

Amazon fixed an exploit that allowed Alexa to listen all the time

Researchers found a way to make Alexa record and transcribe your private conversations.
488 Shares
Share
Tweet
Share

Sponsored Links

Devindra Hardawar/AOL

Amazon's Alexa is good at listening, since it has to be ready when you say its wake word, like "Alexa," "Echo" or "Computer." That very same feature, though, has people worried about their own privacy. Researchers from security firm Checkmarx have found a way to get Alexa to listen in and send a transcript of any conversations that it records while eavesdropping.

The researchers were able to create a harmless-seeming Alexa Skill that would actively record long after most Skills shut down to preserve people's privacy. Checkmarx's Amit Ashbel told CNET that it could just keep recording. "As far as we could tell, there was no limit," he said. "As long as you [didn't] tell it to stop, it wouldn't."

Checkmarx says that it notified Amazon of this exploit at the beginning of April; Amazon confirmed to CNET that it has since fixed the issue. "Customer trust is important to us and we take security and privacy seriously," a spokesperson said in a statement. "We have put mitigations in place for detecting this type of skill behavior and reject or suppress those skills when we do."

Via: CNET
Source: Checkmarx
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
488 Shares
Share
Tweet
Share

Popular on Engadget

Disney+ non-fiction shows include Mickey, Wolfgang Puck documentaries

Disney+ non-fiction shows include Mickey, Wolfgang Puck documentaries

View
Mercedes app was leaking car owners' data to other users

Mercedes app was leaking car owners' data to other users

View
AT&T hikes TV Now prices by as much as $15 per month

AT&T hikes TV Now prices by as much as $15 per month

View
Samsung won't support Linux on DeX once Android 10 arrives

Samsung won't support Linux on DeX once Android 10 arrives

View
Twitch 'Watch Parties' let streamers watch Prime Video with viewers

Twitch 'Watch Parties' let streamers watch Prime Video with viewers

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr