Trending
Anambra Intensifies Hepatitis Fight Through Awareness Campaign is trending now WHO Warns HIV, Hepatitis Progress Under Threat is trending now Nigeria Seeks Stronger Domestic Funding to Sustain HIV Response is trending now Positive Action Community Grants for HIV Community Projects in Australia is trending now July full moon delights skywatchers worldwide. Here are our favorite photos of the majest… is trending now New SUV e-Bike features motor-gearbox unit, 800 Wh battery and many practical elements is trending now Northern Lights Forecast: 10 States May See Aurora Thursday Night is trending now The Netherlands will see a solar eclipse and meteorites in one night is trending now Eddie Howe leaves Newcastle United with Matthias Jaissle set to replace him is trending now Infantino insists FIFA’s World Cup plan is proposal and not ‘obligation’ is trending now ‘Thunder’ Balogun’s legacy must not die – Son is trending now Chelsea sign Crystal Palace defender Maxence Lacroix in £52m deal is trending now Anambra Intensifies Hepatitis Fight Through Awareness Campaign is trending now WHO Warns HIV, Hepatitis Progress Under Threat is trending now Nigeria Seeks Stronger Domestic Funding to Sustain HIV Response is trending now Positive Action Community Grants for HIV Community Projects in Australia is trending now July full moon delights skywatchers worldwide. Here are our favorite photos of the majest… is trending now New SUV e-Bike features motor-gearbox unit, 800 Wh battery and many practical elements is trending now Northern Lights Forecast: 10 States May See Aurora Thursday Night is trending now The Netherlands will see a solar eclipse and meteorites in one night is trending now Eddie Howe leaves Newcastle United with Matthias Jaissle set to replace him is trending now Infantino insists FIFA’s World Cup plan is proposal and not ‘obligation’ is trending now ‘Thunder’ Balogun’s legacy must not die – Son is trending now Chelsea sign Crystal Palace defender Maxence Lacroix in £52m deal is trending now
Technology

How a USB-connected speaker can infect a PC without ever being touched

Seller of the Sound Blaster Katana V2X doesn't consider the behavior a vulnerability.

Operating system makers take many steps to prevent their wares from accepting commands from remote devices. The safeguards, designed to thwart malicious attacks, typically require hackers to jump through all kinds of hoops to bypass the measures. But what if remote code execution were as simple as being within Bluetooth range of a speaker connected to the targeted device?

It turns out it can, at least when the speaker is a Sound Blaster Katana V2X sold by Singapore-based Creative Technologies. The speaker, which sells for $283, is widely acclaimed with numerous reviews showering praise on the sound and performance of it and its predecessor, the Sound Blaster V2.

A PC-pwning proxy

Researcher Rasmus Moorats stumbled on the hack by accident, after he purchased a Katana V2X, a soundbar that connects to PCs, Macs, and Linux devices over USB or Bluetooth. Moorats was curious if he could create a Linux tool that communicated with his speaker. He discovered he could do so through CTP, a proprietary mechanism he guesses is short for Creative Transport Protocol.

Read full article

Comments

View original source →

Related

More from Ars Technica