Slashdot Mirror
Google Fixes Glass Vulnerability To Malicious QR Codes
judgecorp writes "Google has fixed a vulnerability in its Glass device, which made it possible to fool the wearable gadget into joining malicious Wi-Fi networks, through the use of fake QR codes. Google fixed the flaw fast, following a tip-off from researchers — but there are two warnings to take from this. There are other weaknesses in Glass (such as the absence of a lockscreen), and this sort of weakness will increasingly hit as the Internet of Things takes hold and the number of communicating devices multiplies."
I said no good would come of this digital nonsense, we should forget it go back to analog.
They dont use fake QR but Real QR codes witch lead to a malicous network... fake qr codes Wont work...
Trolls walk past #GoogleGlass wearers, whisper Image Search Goatse into the glass's mike
--- @mollycrabapple, after trying on google glass
Any one else ever feel tempted to print up a bunch of QR code patches to direct people to hello.jpg and then slap them all over the place? Especially over the QR code on advertising and the like?
Automatic QR code scanning... bringing passive execution exploits to the world of paper and ink!
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
They weren't fake magical QR codes. To somehow blame a piece of paper or a billboard for your own terrible code is hilarious.
Reminds me of novel Aristoi where all people were conditioned from childhood to respond in certain ways to complicated hand symbols - allowing ruling elite to paralyze them with hand gesture for example. Yes, having your computer glasses compromised because of looking at malicious picture is still far from having you brain 'hacked', but I hope we will get there soon ;) Next step could be quick-hacking Google Glass v3 (with bone-transmitted headphones and retinal projector) to perform flashbang kind of attack (maximum sound and flash for short moment) when shown police badge upside down.
And the we would have police pacifying riots using virtual lightningbolts...
What's special about Google Glass? What about Google Goggles, or indeed any of the various QR scanning apps available? Unless it has an "are you sure you want to visit this site" option (which understands URL shorteners), you're always going to be at risk. Glass owners are always going to be a tiny, tiny, tiny subset of the total number of Android users.
Going thru a mall will generate so much scanning noise that you won't be able to look thru the glasses. And it would be a pain to have to confirm everything "Do you want to scan this? Do you want to view that?"
I have less and less reason to ever get Google Glasses. Sorry Google
I think a QR code that directs people to qr.png, which just shows another QR code, would be hilarious.
Reciprocal QR trolling.
This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
Not until you mentioned it. Though I think making them link to goatse would be more appropriate for the /. crowd.
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
Hello.jpg is the first image for goatse' .
Remember when we were all up in arms about Microsoft auto-rendering HTML embedded in e-mails with no cecking like 15 years back, and how it was a terrible idea?
Google apparently doesn't.
Seamless interaction with third parties vs. Safety from the malicious. Pick one.
Even more hilarious, qr.png would have text at the bottom saying "Scan this QR code to claim your prize."
And make sure that second QR code leads to yet another, ad infinitum, in case you have two people with phones traveling the endless path to nowhere.
Get free satoshi (Bitcoin) and Dogecoins
...there really seems to be an XKCD for everything:
http://www.xkcd.com/1237/
You're forgetting the #1 problem. Everyone will hate the wearer, cover their faces, scream at them, and possibly attack the owner.
I am also looking for this Google Glass... How can get one easily ?
oh no's scary internet tough guy threatens violence and destruction of property as an AC oh nevermind.
---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
It's been so long since goatse was new, and I don't exactly check it weekly... or even yearly... I was sure it was "receiver.jpg", but I guess "receiver" was just in the text. (Yes, goatse.cx had text along with that picture.)
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
I think Commander Data once suggested doing that to the Borg.
Goggle Glass must be the only thing that is actually using QR codes.
Nothing to see here, please move along.
Excuse me, but please get off my Pennisetum Clandestinum, eh!
My Eyes! The goggles do something! If they did nothing, it would be an improvement!
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
If somebody wearing equipment that can record you is sufficient reason for you to attack them, then you have anger management issues, and need counselling. That's not a fault in the technology.
As for the other responses, well, again that's not a flaw in the design of glass... that's a societal issue that arises because of false expectations that people have about privacy in public. If somebody can see you with their eyes in a public place, they are essentially recording you already in their brain, which is conceptually no different from being recorded by a device, unless one has intent to be duplicitous about what it was that they were doing.
I'm not suggesting that if you're doing nothing wrong you have nothing to hide, because everyone has things that they consider private... but I am saying that by definition "public" and "private" are opposites, and I don't really feel that one should have any expectation of privacy in a place that is open to the public. If one wants privacy, they should go someplace private.
File under 'M' for 'Manic ranting'
Also, you look like a prick when wearing them.
-1 disagree is not a modifier for a reason. -1 troll, flaimbait, redundant, overrated are NOT acceptable substitutes.
The sword or the mine?
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
STOP TRYING TO RECREATE THE HELL KNOWN AS MICROSOFT WINDOWS.
Those who don't understand Windows are doomed to reinvent it, even worse.
In places where they're just used a lot for a bit of text, like a URL, why don't we just agree on a specific shape into which we put plain text to be OCRed? The human can verify it's the information he wants and is expecting before scanning and following a link.
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
Care to elaborate as to why that's so? You may find, in fact, that such a problem does not lie with a person who wears them at all.
File under 'M' for 'Manic ranting'
Good thing Glass isn't directly hooked into the brain yet... Is L. Bob Rife running Google now?
Okay, I'll follow you around every second of every day while you're in public with a camera in your face and post it on youtube. Then we'll see if you develop and "anger problem" too.