Explore the security implications of voice-based assistants in this 42-minute conference talk from BSides Tampa 2018. Delve into David Vargas' expertise as he examines various voice assistants, including Samsung Bixby, Amazon Alexa, and Google Home Mini. Learn about potential security concerns such as always-on listening, data collection, and vulnerabilities like the Dolphin Attack. Discover how these devices interact with the Internet of Things and cloud services. Gain insights into defending against inaudible commands and other security issues. Discuss privacy regulations, legal mandates, and the broader implications of voice-controlled technology in our daily lives.
Overview
Syllabus
Introduction
Davids Background
Davids Introduction
Survey
What is a Voice Based Assistant
Samsung Bixby
Security Concerns
Internet of Things
Alexa Cloud
Echo Dot
Light Ring
Amazon
Troubleshooting
Alexa App
Alexa Data Collection
Alexa Always Listening
Alexa Wake Word
Security Issues
Dolphin Attack
Voice Control Devices
Inaudible commands
Bad press
How to defend
Alexa Root Access
Blue Bourne
Alexa Echo
Google Home Mini
Kids Toys
Privacy Regulations
Legal Mandates
Alexa CIA
References
