Researchers from a security firm called Lookout Mobile claim that they have developed an attack that targets the Google Glass wearable computing device. According to the security firm, their hack could compromise the Google Glass device if the user simply looks at a photo that features a malicious QR code.
The security researchers from the company say that they have reported the bug to Google and have helped Google release a fix for the flaw. When Google Glass looks at a malicious QR code and photographs it, the researchers claim they can crash the Glass device or connect the headset to a rogue Wi-Fi hotspot.
How the Attack Works
The rogue Wi-Fi hotspot can be used to strip out the encryption from the communications of Glass and connect it to a malicious website that could take full control of the wearable computer. This type of attack is particularly concerning because it exploits the very functionality that makes Google Glass innovative. “Google has set up the device so that Glass scans every photo you take for something interesting,” says Lookout researcher Marc Rogers. “While that’s exciting, the fact that Glass can parse photographs opened up a vulnerability. By understanding and reverse engineering the QR codes, we were able to create malicious ones that would silently reconfigure the device.”
The process begins when the user unknowingly photographs a malicious QR code. The QR code then triggers the Glass device to connect to a rogue Wi-Fi network. Once connected, the attacker can intercept data transmitted from the device, potentially gaining access to sensitive information such as emails, passwords, and other personal data. This type of attack is known as a “man-in-the-middle” attack, where the attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other.
Implications and Preventive Measures
The implications of such a vulnerability are significant. Wearable technology like Google Glass is designed to be seamlessly integrated into daily life, making it an attractive target for cybercriminals. The ability to take control of such a device could lead to a range of malicious activities, from simple data theft to more complex attacks involving the manipulation of the device’s functionality.
To mitigate these risks, Google has worked closely with Lookout Mobile to release a fix for the flaw. This fix involves updating the software on Google Glass to better handle QR code scanning and to prevent automatic connections to unknown Wi-Fi networks. Users are also advised to be cautious about the photos they take and to avoid photographing QR codes from untrusted sources.
Moreover, this incident highlights the importance of ongoing security research and collaboration between tech companies and security firms. As technology continues to evolve, so too do the methods used by cybercriminals. Regular updates and patches are essential to maintaining the security of devices and protecting users from emerging threats.
In conclusion, while the discovery of this vulnerability in Google Glass is concerning, it also serves as a reminder of the importance of vigilance in the digital age. By staying informed about potential threats and taking proactive measures to secure their devices, users can enjoy the benefits of wearable technology without compromising their personal security.
via Forbes
Latest Geeky Gadgets Deals
Disclosure: Some of our articles include affiliate links. If you buy something through one of these links, Geeky Gadgets may earn an affiliate commission. Learn about our Disclosure Policy.
