IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Google Glass security flaw flagged by researcher

However, research team praise search giant for fast fix of vulnerability.

Project Glass

Security researchers have uncovered a Google Glass vulnerability that could allow hackers to remotely control the device.

Hackers could gain access to a user's data simply by taking advantage of a feature in Google Glass that scans pictures the devices takes for QR codes.

Researchers from security firm Lookout created a QR code to demonstrate the flaw.

"We analysed how to make QR codes based on configuration instructions and produced our own 'malicious' QR codes," said Lookout Mobile Security principal security researcher Marc Rogers in a blog post.

"When photographed by an unsuspecting Glass user, the code forced Glass to connect silently to a 'hostile' WiFi access point that we controlled. That access point in turn allowed us to spy on the connections Glass made, from web requests to images uploaded to the cloud."

He said the flaw could also make Google Glass divert to a webpage on the Wi-Fi hotspot that contained a known Android 4.0.4 web vulnerability that hacked the device as it browsed the page.

Rogers said his firm disclosed the vulnerability to Google in May and the search giant fixed the vulnerability in version XE6 of the device's firmware in June. Glass will now only scan QR codes when a user asks it to.

The responsive turnaround by Google "indicates the depth of Google's commitment to privacy and security for this device and set a benchmark for how connected things should be secured going forward," he added.

In a statement by Google, the firm said that it wanted to put "Glass into the hands of all sorts of people, listen to their feedback, see the inspirational ways they use the technology, and discover vulnerabilities that we can research and work to address before we launch Glass more broadly."

Featured Resources

2022 State of the multi-cloud report

What are the biggest multi-cloud motivations for decision-makers, and what are the leading challenges

Free Download

The Total Economic Impact™ of IBM robotic process automation

Cost savings and business benefits enabled by robotic process automation

Free Download

Multi-cloud data integration for data leaders

A holistic data-fabric approach to multi-cloud integration

Free Download

MLOps and trustworthy AI for data leaders

A data fabric approach to MLOps and trustworthy AI

Free Download

Most Popular

Empowering employees to truly work anywhere
Sponsored

Empowering employees to truly work anywhere

22 Nov 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

15 Nov 2022
The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

14 Nov 2022