Google Home and Chromecast have a serious privacy issue

Product Management Google Chromecast speaks about the Google Home Max speaker during a launch event in San Francisco California

If the URL is clicked and the webpage is kept open for around a minute, the user's home Global Positioning System location is found - and subsequently exploited. This is because the information was processed over Google's own geolocation data, which taps into broadband networks and smartphones to link Wi-Fi routers to a physical spot. "The Wi-Fi based geolocation works by triangulating a position based on signal strengths to Wi-Fi access points with known locations based on reporting from people's phones". Your Smart Home devices, IP camera, Smart TV, Chromecast, and Google Home are connected to a second router.

Mr Young set up a website that ran malicious software created to remotely infect a victim's computer and extract the location data stored on nearby Google devices. [Side note: Anyone who'd like to see this in action need only to turn off location data and remove the SIM card from a smart phone and see how well navigation apps like Google's Waze can still figure out where you are].

In the researcher's proof of concept, a URL is opened on a computer connected to a Wi-Fi network that's also connected to a Google Home or Chromecast device.

"An advertiser could embed code in their mobile apps or websites to recognize when different sessions originate from the same house or workplace and use this to build more specific profiles for targeted ads", Young said in an email. Common scams like fake Federal Bureau of Investigation or IRS warnings or threats to release compromising photos or expose some secret to friends and family could abuse Google's location data to lend credibility to the fake warnings, Young notes. This compares to a location two miles away when he tried to geolocate his IP address.

"The implications of this are quite broad including the possibility for more effective blackmail or extortion campaigns", said Young in a Krebs on Security article. "Common scams like fake Federal Bureau of Investigation or IRS warnings or threats to release compromising photos or expose some secret to friends and family could use this to lend credibility to the warnings and increase their odds of success".

The good news is that Google is working on a fix for this - although they nearly weren't with Young saying that when he first reported the issue to Google in May, the bug report was marked as 'Won't Fix (Intended Behavior)'. But after being contacted by KrebsOnSecurity, Google changed its tune, saying it planned to ship an update to address the privacy leak in both devices.

Mice chew up cash worth over a million rupees in India ATM
The ATM (DFBK - 000196116) belongs to the State Bank of India (SBI) and is located in Laipuli area of the district. An unprecedented rodent invasion in an SBI ATM in Assam caused a loss of cash amounting to Rs 12.38 lakh.

Mohamed Salah: Arsenal ace Mohamed Elneny opens up on ‘best friend’
Mo Salah started the game for Egypt, but never looked fully fit, still struggling with a shoulder injury. He was an unused substitute in Egypt's first Group A game - a 1-0 loss to Uruguay last week.

AMD pokes fun at Intel's Core i7-8086K with new giveaway
Celebrating the past is neat, but here at AMD we are focused on the future and the next 40 years of high-performance computing. Why it matters: AMD is essentially trolling Intel here as it is only offering 40 contest winners the chance to participate.

Google is expected to release a fix for the bug in mid-July.

"The confluence of these properties means that web browsers and, therefore, websites can sometimes interact with network devices", Young explained in a blog post on Monday.

Young also recommended that all devices that run on the local network be configured as if they were exposed to the internet, especially if the data they transmit over the network is not authenticated.

The attack can be done remotely as long as the victim is connected to the same network as the device.

One way to isolate your Internet of Things devices is to use a multi-router solution, to isolate your home network, like this method used by security researcher Steve Gibson.

Related News:

  • Brooks Koepka continues the dominance of young Americans on golf's greatest stages

    Brooks Koepka continues the dominance of young Americans on golf's greatest stages

    When it was over, and unusual told him "hell of a job" on the air, Koepka called it "a pretty cool moment to have Curtis there". This shall pass, but it was a weird set of circumstances that saw Mickelson shoot his highest score, 81, in a U.S.
    5 dead as SUV chased by Border Patrol crashes in South Texas

    5 dead as SUV chased by Border Patrol crashes in South Texas

    The voices were captured by a client of Jennifer Harbury , a civil rights attorney who has worked by the Texas border for years. Around 2,000 children have reportedly been separated from their families over a six-week period as a result of the policy.
    Meghan Markle makes Ascot racing debut in royal procession

    Meghan Markle makes Ascot racing debut in royal procession

    Her Majesty, 92, opted for a vibrant yellow coat and matching hat, as she was pictured arriving with her daughter Princess Anne. And when she met Harry and she spoke about how much she loves him, there's gotta be a child in the making soon.
  • Asaduddin Owaisi faults BJP for mess in in Jammu and Kashmir

    Asaduddin Owaisi faults BJP for mess in in Jammu and Kashmir

    We had expected a good response from the Hurriyat. "I have told the governor we will not go into any other alliance", she said . He also cited rising instances of terrorism and radicalisation as one of the reasons to pull the plug on the state government.

    Meghan and Prince Harry likely to have children soon: Thomas Markle

    He also said the sixth in line to the throne appeared "open" to the idea of Brexit when they had a "loose" talk about it. But the relationship is fractured and it will be interesting to see where they go from here, ' the source told ET.
    Jay-Z Is the New President of Puma Basketball

    Jay-Z Is the New President of Puma Basketball

    They've also signed Walt Clyde Frazier to a lifetime contract during a special event at the PUMA Hoops HQ in Brooklyn, NY. The brand outfitted him in Puma sneakers and apparel during his 2017 tour to promote his "4:44" album.
  • Ted Cruz to Introduce Bill to End Family Separation

    Ted Cruz to Introduce Bill to End Family Separation

    The bill proposes that the number of immigration judges be doubled to 750, and requires asylum cases to be adjudicated in a two-week period.
    Brexit: No 10 will not accept 'meaningful vote' amendment

    Brexit: No 10 will not accept 'meaningful vote' amendment

    Under the new amendment tabled by Greive, ministers must update parliament by 21 January if no deal is reached with Brussels. Nevertheless, they insist parliament can not be allowed to overturn Brexit or tie the government's hand is negotiations.

    Cristiano Ronaldo is 'added value' for Portugal but tough Morocco test waits

    The Portugal coach, Fernando Santos, has urged his team to reach "Euro 2016 levels" as they prepare to take on Morocco in their second game of the World Cup .
  • Florida rapper XXXTentacion has died at 20

    Florida rapper XXXTentacion has died at 20

    In the last 18 months, Onfroy quickly became one of popular music's most controversial and, in some circles, reviled figures. In dispatch audio obtained by TMZ , the Broward County Sheriff's Office said the shooting was a "possible drive-by".
    Around 100,000 Chinese to attend 2018 World Cup in Russian Federation

    Around 100,000 Chinese to attend 2018 World Cup in Russian Federation

    Using allegations from that case, FIFA's ethics committee opened its own case and banned him for eight years. Blatter remains an instantly recognizable, if often polarizing, figure to generations of football fans.
    Xhaka signs ´long-term´ Arsenal extension

    Xhaka signs ´long-term´ Arsenal extension

    "He's an important member of the squad and is still young so will be able to develop even more", Emery told the club website . Emery is preparing to take Arsenal forward following the departure of long-serving manager Arsene Wenger.


Most liked

Donald Trump, nervous Republicans scramble for legislative fix to family separation crisis
Under the Obama administration, such families were usually referred for civil deportation proceedings, not requiring separation. Amnesty International branded the action "nothing short of torture" and Apple's chief executive Tim Cook called it "inhumane".

Willemse walk-out report expected at 3pm
Khobane said he would engage with Botha and Mallett on Wednesday to find out when they would be available to return to work. Khobane says the investigation concluded that there was no naked racism from both Mallet and Botha towards Willemse.

Michael Jackson Musical Coming to Broadway
Wheeldon, a resident choreographer of the New York City Ballet, was the director-choreographer of An American in Paris on Broadway.

Microsoft takes a stand against ICE separating parents from children
Family unification has been a fundamental tenet of American policy and law since the end of World War II. According to Bloomberg data , Microsoft now has active ICE contracts worth $19.14 million.

China fires back at US, raises own tariffs
American soybean farmers, who send about 60 percent of their exports China, are especially anxious about Beijing's retaliation. Although shares of some tariff-sensitive companies fell on Wall Street, the stock market overall fell only modestly.

Inquest told Dreamworld ride had history of malfunctions
It also heard a young ride operator on the Thunder River Rapids did not know there was an emergency stop button within reach. He told the coroners court issues "gravely emotional" to the families of those killed would be explored at the inquest.

Beyoncé & JAY-Z’s Album Is Now On Spotify & Apple Music
Everything Is Love was revealed following The Carters' final On The Run II UK tour performance at London Stadium, London. The album on Monday surfaced on various streaming services, under the artist name "The Carters".

Marijuana bill goes back to Senate after House rejects 13 amendments
Five different Senate committees minutely examined various aspects of the legalization bill, hearing from more than 200 witnesses. The objective of the Senate's amendment was to prevent legal challenges to their constitutional right to do so.

Melania Trump's Immigration Lawyer Compares Family Separation To Nazism
The Department of Health and Human Services said there are now 11,700 children under its care in 100 shelters across 17 states. Charlie Baker has also refused to send troops to the border , citing the "cruel and inhumane" separation of families.

High court sidesteps gerrymandering rulings
Now, at least, partisan gerrymandering challenges can live on for another day. "But of one thing we may unfortunately be sure". Kennedy, who had been viewed as the deciding vote on partisan redistricting, did not write separately Monday.

Billy Caldwell to be given access to cannabis oil
Ms Caldwell said she thinks no other family should have to travel "half-way round the world" in order to seek medication. Keen to get back to her son's bedside, she said: "I am full of hope - this is my little boy's anti-epilepsy medication".

Trump's latest swipe at Canada? Smuggling US shoes
Freeland told the committee the "absurd and insulting" USA metal tariffs will be met with a firm response on July 1. They make them sound old or look old so they can get them past border guards".

Ronda Rousey suspended from RAW after violent outburst
There are pieces of her game that are very clunky and she looks like a rookie, especially up against well-seasoned wrestlers. The great thing about Rousey's WWE career thus far, is that she isn't holding back.

Rapper XXXTentacion Dead at 20 After Being Shot in Miami
The rapper, who grew up the neighborhoods near where he was shot, rose to fame after uploading music to SoundCloud. However, it was reinstated after the streaming service backtracked on the policy , following an industry backlash.

Rising rapper Jimmy Wopo shot dead in drive-by shooting in Pittsburgh
The up-and-coming hip-hop musician, whose real name was Travon Smart, previously revealed that he had been shot twice in the past. Wopo had multiple videos that surpassed 1-million views on YouTube, including Elm Street and First Day Out .