Slashdot Mirror


Researchers Turn Smartphone Vibration Motor Into Microphone To Spy On You (softpedia.com)

An anonymous reader writes from a report via Softpedia: Two researchers from the University of Illinois at Urbana-Champaign have come up with a method to turn smartphone vibration motors into makeshift microphones, capable of recording the sound around them. The attack relies on using the vibration motor's coil to record incoming sound waves, which are then transmitted to the attacker, who then uses a processing algorithm to enhance the signal by reconstructing high-frequency waves. This is needed because the vibra-motor can only pick up low-frequency sounds, up to 2 kHz. Their method doesn't yield perfect results (4 in 5 people can understand the sounds) and also needs physical access to the device, but it puts in place the theoretical details needed to carry out and refine such attacks in the future.

17 of 77 comments (clear)

  1. You know... by Fwipp · · Score: 5, Funny

    It turns out that in addition to having vibration motors, smartphones also have regular microphones.

    Who'da thunk?

    1. Re:You know... by xxxJonBoyxxx · · Score: 2

      The original story might have been "your PAGER can hear you!"

    2. Re:You know... by hcs_$reboot · · Score: 2

      Using the microphone that doesn't require "physical access to the device" sounds too easy for the hackers. They need new challenges.

      --
      Slashdot, fix the reply notifications... You won't get away with it...
    3. Re:You know... by Ungrounded+Lightning · · Score: 3, Interesting

      It turns out that in addition to having vibration motors, smartphones also have regular microphones.

      But if the security auditors are only looking for code that gets signals from the microphone, they might miss code that gets signals from the vibrator.

      Using the ringer for a room bug has been stock stuff since at least WWII. It has the advantage that it's connected to the line all the time and doesn't require any modification of the phone.

      The early electronic piezo-electric sounders, which replaced the electromechanical bell mechanisms, were even better microphones, too. (I recall the blurb on the box of the Unisonic model 7441, which was a two-line phone from about the mid '80s, which had one of each - a bell for line 1 and a piezo sounder for line two. The blurb was really funny: The C-suite character it was attributed to was bragging about being ex-FBI and how important it was to have a secure phone. B-) )

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  2. Whoop de do. by msauve · · Score: 4, Informative

    It requires much more than simple "physical access." They hardwired the vibration motor to an analog input.

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
  3. If you have physical access to the phone... by Jake73 · · Score: 4, Insightful

    ...why not just install a microphone connected to the LINE IN instead of wiring the vibration motor to it as they have done?

    1. Re:If you have physical access to the phone... by bloodhawk · · Score: 2

      because a story saying that a hacked phone microphone could be used to listen to you would elicit the response of "No SHIT Sherlock" and people would move on without clicking on it. Far better to create an overly complex scenario that produces inferior results and is far harder to do but gets the clicks for "WTF"!

  4. Re: Paranoid much? by Anonymous Coward · · Score: 4, Funny

    Nice try Obama!!!

  5. App permissions by Anonymous Coward · · Score: 2, Insightful

    Apps should have to request access to vibration functions anyway. I'm sick of link-hijacking popunders that can vibrate my phone from through my browser.

  6. Re:Paranoid much? by MasseKid · · Score: 5, Insightful

    "especially because there are far easier ways to spy on most people" You mean like the purpose built microphone on every smartphone?

  7. Sensationalized BS headline by jenningsthecat · · Score: 3, Insightful

    No one can "Spy On You" using this method on any stock production phone. The vibration motor is connected to an *output* of the chip that drives it, not an *input*. Additionally, that output is likely to be digital rather than analog, so even its direction could be magically reversed, the likelihood of the chip being able to process whatever signal the motor would produce in response to ambient sounds would be just about zero. And if someone was modifying your phone in order to hear your conversations, there are *much* easier, faster, more reliable, less convoluted ways of doing it - like piggybacking on the microphone that's already there.

    The ability to use a vibration motor as a microphone is a technical curiosity, but it's not at all surprising to anyone familiar with basic electrical and electronic concepts. The researchers' work is a nice proof-of-concept which may find useful application at some point. But really, the title of TFA, (and TFS), is solidly in the province of yellow journalism. There are more than enough *real* reasons to fear for our privacy - there's absolutely no need to further stoke that fire with false fears like those being promoted here.

    --
    'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
  8. This is nonsense by gweihir · · Score: 3, Informative

    If you can physically manipulate the device, plant a proper microphone. If not, this is irrelevant, as there is no A/D input connected to that motor. The whole thing is an utterly worthless stunt by "researchers" greedy for attention but lacking in actual scientific skill. Why does this get reported here?

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:This is nonsense by iggymanz · · Score: 2

      my phone has a microphone built in! OMG what were the engineers thinking?

  9. Re:What's worse? by gweihir · · Score: 4, Informative

    I would say that this gets reported is worse.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  10. Guess from several clues maybe by dbIII · · Score: 2

    This "enhancement" is not an enhancement. It consists of having a computer guess

    Obviously, but in what way with what degree of success?

    There is no technology in this universe than can reconstruct data that is missing from the signal

    Sometimes there doesn't have to be but a workaround can be useful. As an example a few years ago I attended a presentation on Transmission Electron Microscopy on some structures in teeth related to tooth growth right down to the atomic level. Calcium atoms could not be imaged - data was missing from the signal due to lack of resolution. However comparing computer models of defocused images of different structures could be matched with the real images with not enough resolution to be focused led to being able to derive the structure without actually being able to properly image it.
    That's an example of taking incomplete data and generating something that could have produced that incomplete data. If you can get a very large amount of the incomplete data, the missing signal is repetitive and you can model the degradation it's possible to model artificial data going through the same process and match it to the real data. I'd be interested to see what they are getting and how.

    The important thing is that the low frequency noise is not always going to be the only clue and there can be some expectation as to what the original source is going to look like - eg. model of human speech and matching from running that through a filter matching the expected degradation. How the clues are put together could be interesting.

  11. Re:Paranoid much? by Joce640k · · Score: 2

    Yep. There's no way an operating system could possibly lie about that permission. You're totally secure as long as that checkbox is set to "off".

    --
    No sig today...
  12. Re:Paranoid much? by avandesande · · Score: 2

    Another obvious 'easier way' is the speaker.... speakers can readily be used as microphones. I would like to hear the explanation as to why they would use the motor instead..... maybe because it sounds novel?

    --
    love is just extroverted narcissism