Amazon Echo Hacked - Leaves Microphone On

Thu, Apr 26, 2018

Researchers have used the officially available Alexa SDK from Amazon in order to hack the Amazon Echo and turn it into an eavesdropping device.

They created a calculator app and simply set a parameter called shouldEndSession to false, leading to the app expecting a second question from the user right after the reply to the first. The fun thing is that this does not require another command phrase like “Alexa, open calculator”. Effectively Alexa remained open and listening, converting the speech into words that were stored as text and visible to the app developers via the app’s logs.

Every day I am puzzled by the stupidity of people paying Amazon in order to place a bug in their appartments.