Lasers Can Talk →
Be careful out there.
“Smart speakers like the Echo and Google Home, however, have none of that voice authentication. And given the physical nature of the vulnerability, no software update may be able to fix it. But the researchers do suggest some less-than-ideal patches, such as requiring a spoken PIN number before voice assistants carry out the most sensitive commands. They also suggest future tweaks to the devices designs to protect them from their attack, such as building light shielding around the microphone, or listening for voice commands from two different microphones on opposite sides of the device, which might be tough to hit simultaneously with a laser.
Until those fixes or design changes arrive, Michigan’s Genkin suggests a simple if counterintuitive rule of thumb for anyone concerned by the attack’s implications: “Don’t put a voice-activated device in line of sight of your adversary,” he says. If they can so much as see your Echo or Google Home through a window, they can talk to it too.”