Watching this video turned on my Alexa when he started talking to Alexa.
Feels like a kind of SQL Injection ("voice injection attack"?) .
Feels like a kind of SQL Injection ("voice injection attack"?) .
I remember when people started broadcasting to Siri for people who had their headphones plugged in.
I believe purchasing by voice does have to be enabled initially through the app as well. https://www.amazon.com/gp/help/customer/display.html?nodeId=...
Edit: I looked in my Alexa app and there is also a voice recognition option, so you can use it to only allow purchasing via recognized voice patterns and require a PIN for anything else.
We used to take advantage of this on conference calls, where one of the participants was on speaker-phone and had an Alexa.
"Alex, play 'Never going to give you up' by Rick Astley"
Hopefully, people start waking up to this attack surface, as it's taken adventage of more because it's a very dangerous "gotcha".
Consider, for example, saying, "OK, Google, show me my last messages," during a conference call, in which Google will also read the messages aloud.
Fun times...
I've been meaning to turn off voice detection on my phone because I'm tired of Google reacting to my conversations (and worried enough about Google as it is).