A browser bug was enough to hack an Amazon Echo

Two security researchers have been crowned the top hackers in this years Pwn2Own hacking contest after developing and testing several high profile exploits, including an attack against an Amazon Echo.

The researchers found that the device uses an older version of Chromium, Googles open-source browser projects, which had been forked some time during its development.

An integer overflow bug happens when a mathematical operation tries to create a number but has no space for it in its memory, causing the number to overflow outside of its allotted memory.

When reached, Amazon said it was investigating this research and will be taking appropriate steps to protect our devices based on our investigation, but did not say what measures it would take to fix the vulnerabilities or when.

Earlier this year the contest said hackers would have an opportunity to hack into a Facebook Portal, the social media giants video calling-enabled smart display.

Original article
Author: Zack Whittaker

Zack Whittaker writes about cybersecurity for TechCrunch. You can send tips securely via Signal and WhatsApp to +1 646-755-8849, and his PGP fingerprint for email is: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5. He can also be reached by email: zack.whittaker@techcrunch.com.

Zack Whittaker has recently written 2 articles on similar topics including :
  1. "The bugs made it easy for a phishing page to impersonate almost any legitimate website". (October 20, 2020)
  2. "Google and Mozilla have taken the rare step of blocking an untrusted certificate issued by the Kazakhstan government, which critics say it forced its citizens to install as part of an effort to monitor their internet traffic". (August 21, 2019)
Posted on  ,