Using the word "OK Google" to unlock your phone is a very high-tech performance from your smartphone. But for the security wise users, I think this features will not be cool for them.
On Tuesday, a researcher discovered the downside of the Trusted Voice feature on Google’s Pixel that could put devices at danger. The problem is, this feature is enabled by default, which is a change from previous releases.
David Kennedy, the founder of TrustedSec and Binary Defense Systems, as well as the author of the Social Engineering Toolkit, discovered that he could play a recording of his own voice and use it to unlock his Google Pixel.
Actually, he is not the first person to talk about this matter. Steve Ragan wrote about the flaw at the Salted Hash security news blog, reminding users that the Trusted Voice flaw is not a new one.
Here's how it works: the Pixel, like all Android phones, offers a lock screen. You can use a password, a PIN, a pattern or your voice to unlock your mobile device. Voice unlocks are not as widely available as the other three, but the Pixel is hardly the first phone to make use of it, according to Tom's Guide.
One of the many concerns regarding the feature is that someone who is not familiar with the settings of the phone could use their new Pixel for work.Important documents or data saved on the device can be obtained with little to no effort on the part of the hacker of the Android phone.
Let us admit is, it is not hard to record and say "OK Google" or edit an existing recording just to unlock a device.
According to CSO, it’s worth noting that Trusted Voice has been around almost as long as “OK Google” has, as far as features on Android are concerned. However, not all devices support this function. In other versions, the option was disabled by default, but that isn’t the case on new Pixel devices. Google does offer a warning during setup, but many consumers will overlook this in favor of finishing the process so they can use their device.
Kennedy posted a video showing Trusted Voice in action.
Google's PIN screen with Google Assistant and Pixel XL - Voice Recognition from David Kennedy on Vimeo.
