Slashdot Mirror
Google Fixes Glass Vulnerability To Malicious QR Codes
judgecorp writes "Google has fixed a vulnerability in its Glass device, which made it possible to fool the wearable gadget into joining malicious Wi-Fi networks, through the use of fake QR codes. Google fixed the flaw fast, following a tip-off from researchers — but there are two warnings to take from this. There are other weaknesses in Glass (such as the absence of a lockscreen), and this sort of weakness will increasingly hit as the Internet of Things takes hold and the number of communicating devices multiplies."
I said no good would come of this digital nonsense, we should forget it go back to analog.
They dont use fake QR but Real QR codes witch lead to a malicous network... fake qr codes Wont work...
Trolls walk past #GoogleGlass wearers, whisper Image Search Goatse into the glass's mike
--- @mollycrabapple, after trying on google glass
Any one else ever feel tempted to print up a bunch of QR code patches to direct people to hello.jpg and then slap them all over the place? Especially over the QR code on advertising and the like?
Automatic QR code scanning... bringing passive execution exploits to the world of paper and ink!
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
They weren't fake magical QR codes. To somehow blame a piece of paper or a billboard for your own terrible code is hilarious.
Reminds me of novel Aristoi where all people were conditioned from childhood to respond in certain ways to complicated hand symbols - allowing ruling elite to paralyze them with hand gesture for example. Yes, having your computer glasses compromised because of looking at malicious picture is still far from having you brain 'hacked', but I hope we will get there soon ;) Next step could be quick-hacking Google Glass v3 (with bone-transmitted headphones and retinal projector) to perform flashbang kind of attack (maximum sound and flash for short moment) when shown police badge upside down.
And the we would have police pacifying riots using virtual lightningbolts...
What's special about Google Glass? What about Google Goggles, or indeed any of the various QR scanning apps available? Unless it has an "are you sure you want to visit this site" option (which understands URL shorteners), you're always going to be at risk. Glass owners are always going to be a tiny, tiny, tiny subset of the total number of Android users.
Going thru a mall will generate so much scanning noise that you won't be able to look thru the glasses. And it would be a pain to have to confirm everything "Do you want to scan this? Do you want to view that?"
I have less and less reason to ever get Google Glasses. Sorry Google
I think a QR code that directs people to qr.png, which just shows another QR code, would be hilarious.
Reciprocal QR trolling.
This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
Not until you mentioned it. Though I think making them link to goatse would be more appropriate for the /. crowd.
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
Hello.jpg is the first image for goatse' .
Remember when we were all up in arms about Microsoft auto-rendering HTML embedded in e-mails with no cecking like 15 years back, and how it was a terrible idea?
Google apparently doesn't.
Seamless interaction with third parties vs. Safety from the malicious. Pick one.
I just accidentally stepped on your Google glasses.
That's what I will do when I see the first wearer of these shit things. You've got my promise.
The glasses do not fold, so they cannot just be put away in your pocket like sunglasses when you don't want to wear them. They come with a case that can keep them pretty safe, but the case won't fit in your pocket.
Battery life is abysmal. On the neighborhood of about 2 hours of use. The very concept of "wearable computing" does sort of lend itself to the notion of devices that can remain turned on at all times, and Glass falls short of this ideal by such a large factor that it is laughable. The battery life needs to be improved by at least a factor of 4.
File under 'M' for 'Manic ranting'
Sounds familiar.
Even more hilarious, qr.png would have text at the bottom saying "Scan this QR code to claim your prize."
And make sure that second QR code leads to yet another, ad infinitum, in case you have two people with phones traveling the endless path to nowhere.
Get free satoshi (Bitcoin) and Dogecoins
...there really seems to be an XKCD for everything:
http://www.xkcd.com/1237/
I am also looking for this Google Glass... How can get one easily ?
This sort of reminds me of Ghost in the Shell where one of the character's robotic eyes gets hacked.
It's been so long since goatse was new, and I don't exactly check it weekly... or even yearly... I was sure it was "receiver.jpg", but I guess "receiver" was just in the text. (Yes, goatse.cx had text along with that picture.)
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
I think Commander Data once suggested doing that to the Borg.
WTF?
Permission issues are mundane. To me, the shocker is that there's such thing as "executing" a QR code, whether there's permission or not. Wearable tech has potential to be very cool, but everything I'm hearing about Glass seems to point toward Google going out of their way to make it suck. The idea that they would ever have it "run" things it sees, whether the user says ok or not, is just staggeringly stupid. Fuck you, Google.
STOP TRYING TO RECREATE THE HELL KNOWN AS MICROSOFT WINDOWS.
Goggle Glass must be the only thing that is actually using QR codes.
Nothing to see here, please move along.
Excuse me, but please get off my Pennisetum Clandestinum, eh!
My Eyes! The goggles do something! If they did nothing, it would be an improvement!
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
Google is actually the main R+D arm of the NSA, and Google's hardware and software designs are used in the shadow-Google installations used by all intelligence agencies in the West to store and mine the data they gather from their mass surveillance of all electronic traffic.
Google Glass is the other side of the Xbox One. Both are designed to get the sheeple used to 100% video surveillance 100% percent of the time, especially in places the State was previously unable to place their cameras.
Having a private conversation with a group of friends about how much you hate the warmongering Obama? How's that gonna work out when one of you is wearing Google Glass. You are going to have to learn to keep your BIG MOUTHS shut. You are going to learn to keep your opinions to yourself, if those opinions run contrary to the propaganda found in your mainstream media outlets.
Google Glass is designed to close down anti-authoritarian sentiment. The current societal meme is that you won't have a job if you are caught in public with the 'wrong' opinion. But what does 'in public' mean. Microsoft and Google want the sheeple to be taught that EVERYWHERE is public. Your own homes especially.
The 1984 concept of 'Newspeak' was exactly the same idea from a different direction, although present day 'political correctness' is a direct, if limited form of Newspeak. Anyway, Newspeak or Google Glass, the idea is the same- sheeple will be conditioned never to express certain ideas. And the other side of this is that sheeple will desire to be observed giving support to other ideas - concepts they know their masters are pushing (like supporting the war on Eurasia, or cheering same-sex 'marriage').
Interestingly, many US States have laws against 'eavesdropping', but neatly these laws fade away when the bugging device is clearly visible. Google uses the journalist's 'exception' to pound Google Glass into the lives of the sheeple.
It's 2 years time. You are at a big party at some home. Some t**t is there wearing Google Glass. Now, just how free do you think the guests feel to speak or behave in 'party mode'? Yeah, camera phones and Youtube exist today, but a camera phone still requires a purposeful and deliberate act of video filming. Google Glass is an always on surveillance camera. Want an analogy? Google Glass has the same effect, by design, as a parent present at a party for late teens. Except Google turns you ALL into late teens, no matter what your age.
The intent of Google is pure evil. The intent of Microsoft is pure evil. Google Glass, the Xbox One, and Bill Gates' database that records every detail about every child all challenge Humanity to a degree never seen before in our History. We are in times that require a NEW 'Magna Carta' or a new 'US constitution', fundamental responses by meta society that recognise the abuses and attacks against Humanity, and lay down protocols specifically designed to combat the evil actions of entities like Google and Microsoft.
THINK! THINK! Does the age of the computer not change everything? Man has created written systems of laws and guidelines every-time Humanity's progression created new issues that Mankind had to address. Why are we not addressing the problems created by insanely powerful and cheap computers and the accompanying growth of electronic data-storage?
Free speech. Freedom of conscience (that one most of you sheeple don't even understand, but it is even more important than free speech). The right not to be a slave. The right to be given equal treatment. But where's our right to privacy? Where's our right to protect ourselves against the NSA monsters and their partners in Microsoft and Google?
If Obama could, he'd snap his fingers and make all you sheeple slaves, and his circle your masters. This is how people in power think- all of them. We have societal meta-rules to hold back the worst instincts of people like Obama, the Bush's or the Clinton's. Again, why have we NOT adjusted our rulebooks to include the unique issues that only aris
Did they fix the glass's vulnerability to malicious pointy sticks and stones too?
In places where they're just used a lot for a bit of text, like a URL, why don't we just agree on a specific shape into which we put plain text to be OCRed? The human can verify it's the information he wants and is expecting before scanning and following a link.
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
Good thing Glass isn't directly hooked into the brain yet... Is L. Bob Rife running Google now?
so basically the beta testers have found a bug and google fixed it, why is this even being reported as news?