Severe Google Home Vulnerabilities
ฝัง
- เผยแพร่เมื่อ 10 ก.ค. 2024
- TuxCare 👉 bit.ly/3vEkJP1
0:00 Intro
0:13 Spying with Google Home
3:53 Why does Twitter Keep Getting Hacked?
7:46 China Cracks Encryption?
10:18 TuxCare
11:01 Outro
Sources:
downrightnifty.me/blog/2022/1...
thehackernews.com/2022/12/res...
www.bleepingcomputer.com/news...
www.bleepingcomputer.com/news...
www.wired.com/story/twitter-l...
www.darkreading.com/applicati...
go.theregister.com/feed/www.t...
securityaffairs.com/140352/da...
arstechnica.com/information-t...
www.hackread.com/twitter-scra...
therecord.media/chinese-resea...
www.schneier.com/blog/archive...
www.ft.com/content/b15680c0-c...
techmonitor.ai/hardware/quant...
www.schneier.com/blog/archive...
www.theregister.com/2023/01/0...
therecord.media/chinese-resea...
www.darkreading.com/tech-tren...
===============================================
My Website: www.seytonic.com/
Follow me on TWTR: / seytonic
Follow me on INSTA: / jhonti
=============================================== - บันเทิง
Google home hackers will quickly find another victim after hearing me say "PLAY DESPACITO" 20 times a day
"OK, paying Al Pacino"
@@O1OO1O1"You don't have any contacts saved as Al Capone."
You're not well in your head 😂
time to start releasing those quantum safe algorithms.
@@brad1367 you both do and don’t, it is in a state of superstition
That makes no sense.
ANSSI did a few month ago in one of it's public papers
And it does run on normal hardware
AES256 should still be safe no?
Schoedingers Post-It Note
No other media source seems to provide such clear cut and hyper focused information. Keep it up!
Willdo :)
@@Seytonic Absolutely needed info, given the times we live in!
You wouldn't need to hack the router for the Google Assistant hack. You would just need to hack another device on the same network. Many IoT devices have even worse security, so that should be very possible.
like the ring doorbell, especially notorious for having basically no security at all...
It’s even worse when somebody’s security camera gets hacked. My Foscam FI8918W got hacked the other day and I had to reset my router, change my password, and unplug every other device in my house.
Security holes in IoT devices is why I am polishing up my electronic engineering and microprocessor skill set. If I make them, I know what goes into them and what doesn't.
true, and if you fuck something up, you know who to blame :P
This is the right way IMO!
This should be normal
Just give up on this nonsense already. IoT devices will always be a hastle and a security vulnerability no matter what. Even if you dug the copper for the microprocessors yourself, there still could be insecure hardware or software you didn't notice, maybe both.
Learn form other people's mistakes. Rise above this stupidity: stop connecting coffee mugs, condoms, and door handles to wifi
@@marcopeterson805 Wtf are you talking about.
I have already created devices that are local on my network and don't leak a thing.. no foreign servers, no google, no amazon.
How do I know they aren't leaking anything? They don't have access to the net and even if they did... I can monitor their traffic.
You're the one that needs to learn, you do not know everything. You've based everything you have said on assumptions and made yourself out to be a total tool... or fool.. take your pick, both fit.
That weird moment when a high profile hack is done by someone with the same TH-cam subscriptions.
"is google home spying on you" Bona fide google moment
I will play this video to my Google home to inform them 😆 🤣 😂
That is why guys, fuck the IOT devices.
If half my telegram contacts are anything to go by (protogens) then they'd probably enjoy that.
@@jameswalker199 LOL, it is true
It's almost as if some of the "bugs" are put there intentionally.
I can't wait for someone to write a dystopian novel where encryption no longer works and so nobody uses technology anymore.
That's a great idea, actually.
I might use that as a feature in a setting. People would still use technology, just very differently from us.
quantum safe encryption exist, we just don't use it
@Kylo Hacks We don’t use it YET mind you, this is why so much money is being poured into quantum computing, once it reaches a certain point slicing through encryption, this may very well become a reality. That’s still a long time away, but it will come.
@@Kyle_Hacks what kind of encryption is quantum safe?
Encryption will work you just won't be able to use it because only quantum computers will be able to do it
Please keep up your content. I really love it. 💕
Cheers :)
Why would anybody, knowing he is a target, buy a "smart" device.
if you can't deauth the google home for some reason and are willing to take more extreme measures, you could try to somehow cut the power to the house or apartment.
google home usually boots up (and spawns its own hotspot) faster than the router's wifi, at least for me
And with most breakers being pretty easy to access, i can see this being a valid if not easier way to exploit the google home than trying to gain access to the home wifi first.
@@user-xz1ur8us5p oh you're right! when I wrote this, I was thinking more about sawing off a power pole or hollywood style blowing up the closest substation (hence "extreme measures") but yeah I forgot breakers exist
@@jemand771 you would rather blow a substation or break in to trip breakers then clip the 'do not tamper with' tag on the unsecured outdoor power meter?
@@petevenuti7355 just following the rules here
(hey, I never claimed I used my brain when I wrote that comment)
@@jemand771 yeah, if I was using my brain at the time I wouldn't be pointing out pulling the meter !!
Gotta mean that you've made it, when hackers name drop your channel :D
Finally early! Just wanted to say amazing news channel you have, always interesting, on point and educational!
Thanks for the kind words :) Glad you enjoy the vids
@@Seytonic also enjoying my new MalDuino :)
This is a really eye-opening video and highlights the importance of staying vigilant when it comes to IoT security. I appreciate the time and research put into this content. Keep up the great work!
the best IoT security tip: fuck IoT
Quantum computers are weird, but as far as I can wrap my head around, they are kinda like FPGAs for quantum mechanics. You can make really tiny particles do weird things, like entanglement and being in two states at once, and apparently we've even made tiny wormholes with them. Utterly amazing, but also mind boggling machines.
Thanks Seytonic for another awesome video.
Have I been pwned? oh yeah, and I didnt find out throught "have I been pwned either". It so happened that a relative found that my old abandodned facebook account had started posting advertisements for supplements. I then veiwed activity and logins (this happened right after the twittter leak, I did have a long abandoned account there as well with similar cridentials).
After this I changed all of my passwords that literally take sevral minutes to type and kind of look like a hexidecimal code. after doing that on twitter and facebook I set the accounts to be deleted (also set up 2 factor auth). I am now waiting to see if there is any further attempts to log in.
Wonderful work on the videos!
Yo no way i Knew there was always something suspicious about google home. I was Troubleshooting my Grandmothers Google Home because it was acting weird. The google home device would occasionally not respond to her voice, not until given 4 or 5 tries. I initially was curious because google themselves didn't know why it was happening. I wonder if it has any connection to this. I was in the middle of trying to use wireshark to learn more about google home's traffic along with seeing if I saw something suspicious when it was not in use. Before I could get started though my grandmother got mad and said dont fix it and kicked me out. (she is in her 90s and gets overwhelmed quickly)
Surely the government could just go "hey Google add us to this device please"? as the auth was handled by google's servers. Why bother with a hack?
This is such a great video!
Thanks :)
My google home hacker would be pleased to hear me fart and scream at my comp when I forget the ; in my code
Thank you for this
8:12 small note, ssl certificates use symmetric encryption
Wow the first news is scary
Happy new year to everyone seeing this 🥳
Wow, this video truly blew me away! Not only was the information presented in a clear and concise manner, but it also opened my eyes to the potential security risks of IoT devices. The research and effort put into this video is evident and I appreciate the attention to detail. It's a must-watch for anyone who wants to stay informed about IoT security. Keep up the excellent work!🔥🔥🔥🔥
keep up it, up love your videoss
How would the forum administrators know that his list for sale was miscounted due to duplicates?
Seytonic, whats the background music in your video
Makes you wonder just how many simmilar zero days are out there. Why anyone would have something like this in their home is beyond me
It’s so depressing that an actor such as Google doesn’t get these rather simple tactics covered. 😔
LOL as a kid a reported to support a few years ago the issue with Google home switching into setup mode and potentially allowing reconfiguring it. Wow... no 100k for me I guess.
( The smart speaker story) I feel like some companies know these type of bugs are present and they actively either use them or allow governments to do it
"Bug" You're far more generous than I am.
I had a college professor who was in the FBI... He stated that he arrived on a scene where both people were dead... So to figure out what happened.. they listened to the TV.. This was at the beginning of Flat SmartTVs..
Nice info about hacking Google home! It's a pity, that sometimes owners of the devices have less control than hackers 😉
Good video brother
The fact that GH is suspect to a deauth is perhaps more troublesome to me...
how? anything that uses 2.4ghz is vulnerable
It’s largely dependant on the router
Imagine having Google home 🤡
I threw mine in the basement, thanks for the tip!
0:53 What tool is being used here?
Probably wireshark
@@Seytonic likely not
seems to be mitmproxy
@@takipsizadyeah that looks like mitmproxy
awesome video
WTF, Google
well done
What was that TUI program for analyzing network traffic at the start? I only know Wireshark like a pleb
I'm pretty sure that's mitmproxy
@@TechnoByte. Seems like it, thanks!
favorite time of the day🥰🤟
But the IBM Osprey has like 433 Qubits right? If there was cooperation between these researchers and IBM and the data was real, could they actually break encryption?
If i understand it correctly, i was unlikely that the algorithm would work, if you used it with much more than the 10 Qubits.
If you want to cruise on up to the house and listen to what my wife and I are going to buy at Costco go right ahead lol.
i did my computer science report on this lol
Everything is simple in hindsight, but this is a bug that i would also likely have been able to find, if only i tried looking for it!
I expect these "bugs", so that's why i'm not using those devices. Ergo i won't ever find any and will never receive a bug bounty.
Legend
I didn’t get a HiBP notification!!!!! I use Twitter though….
Haha love the fact the hacker gave a shout-out to you and @Mental Outlaw
Anything Google, is collecting data of every type.
nice video imagine having hacked google home lol
Sheet compact news video
And dang the bounty doesn't seem like much for what was found
And double dang a shout out from a leaker
I'm only 4:40 in
I have a lot of Google Homes, I almost panicked
Mine was hacked.
@@MoniqueChantel skill issue
I've seen the have I've been pawned notification 😢, that is way I moved my account to be only acssessebal with physical keys
Technically you should be able to read and send audio to the google device using lasers
Using two different exploits from 2018 and earlier
Is this normal? I was streaming a video game and I look over at my google home and the light is on, I get scared and I go to unplug it but it says “what did I do (my name)?”
LOL
My first thought about the google home hack was not CIA. This is just perfect for practical jokes. Imagine making the thing scream for no reason at random times. Some like once a day and someone would not realize where it's coming from. Just the REEEEE frog from out of nowhere.
Use the Wilhelm Scream.
I have 4 of them, now lets see the video
you should have 1 mil subs by now.. its criminal
3:16 literally 1984 (the best part is this is not a joke lmao)
Encryption problem is already resolved by one-time-pad encryption (mathematical impossible to beat) but means physical transfer of codes. Lasyness lead to using easy ones that are breakable if using quantum computing
One time pads are vulnerable to crib dragging attacks
It was only a matter of time
Is google home spying on users? What kind of question is that? That's the business principle of Google!
Well i don't have a Google home or Alexa or whatever thing there is
We got actual hackers hers holy
Hello
No low to LOW
It should be ille:gal for most companies to collect our address.
Jokes on them. I only have conversations with myself
1:50 - Uhhh... I'm pretty sure that hacking into WiFi is super easy.
newly discovered "bug" in Google software you say? You don't say.
China no joke is that one kid at the science fair who either
A: presents an amazing project that's mind boggling and stunning just for the nameplate to fall off to reveal it's just the smart kid in classes project
B: Brags about how awesome their project is just for it to be a baking soda volcano
C: they threatened everyone else not to come to get 1st place
Its literally twitter API data, anyone has access.
And that's why my bare minimum for a key is 4096, but optimal is 8192
@8:36 "Radically overhyped..."
See also: "CCP and AI"; "CCP & 5G"
thats the downside of using a cloud service, homeassistant opensource (without cloud) forever take back all control use rhasspy assistant instead of siri, alexa, google
Yes; because Twitter has a lot of info about a lot of people; no.
(hina can't even develop in house jet engine or CPUs so i wonder about this super computer thing.
It's not that they can't but I mean how can there be innovation in a suppressed environment.
100k for that is really cool! I mean, the disclosure saves google way more than that and as a single guy, that is a hugely enticing prospect! Wish I would've thought of this hahaha
Hi
Yeah I hope Twitter gets fined big time. Overall I like to see it becoming very unattractive to maintain user accounts and collecting data on people.
All this service subscription crap needs to stop.
Maybe it's a feature 😆
Hacking a WiFi router is child's play.
Bug????
Log4j was totally shameful.
1:39 -Not such a bit caveat in my eyes. Nowadays most of us happily bring the enemy right into our own networks resp. past our security perimeters, in form of Smart TVs and other devices like that. Or even better, with the upcoming mandatory installation of digital electricity meters in germany, there is an even greater enemy in your house. And I wouldnt even bet a penny against the idea, that a lot of people in the goverment are already drooling about the idea to use those digital electricity meters as trojan horses to e.g. exploit security vulnerabilities like this one. Even though you try your best with custom router hardware and OPNsense to protect your rights for privacy.
It's not difficult to add yourself to your neighbours Google home, Alexa, and the other various devices. The neighbours have found to their horror when I used deauther and then they looked for a new WiFi I've made it join my phone hotspot where I would make it play Highway to Hell at full volume. There are a lot of people iny area with these devices and they are all faulty according toy neighbours 😆😆
I'm not sure the issue I exploited to do this has been fixed, I wouldn't be surprised. How did I find this? I accidentally connected to a neighbours device when I was looking for mine.
Nothing from hibp
Nice
helo
Huh, interesting. So that's why my piece of crap nest mini keeps randomly disconnecting from wifi every week and I have to set it up all over again. CIA's been spying on me.
..or is it just google's absolute garbage firmware? 🤔
0:53 "After capturing haych TTP traffic..."
1:04 "... The app sends a Haych TTP request"
Is the Haych TTP protocol used anywhere but in the UK?
26th comment!
second