<story><title>Google Home (in)Security</title><url>https://jerrygamblin.com/2018/10/29/google-home-insecurity/</url></story><parent_chain></parent_chain><comment><author>pkulak</author><text>So what&amp;#x27;s the concern here; that when someone gets unfettered access to your local network they can reboot your Google Home? Ya know what else they can do? Play Rick Astley on your Sonos speakers while printing 1000 pages of porn from every printer, casting Rick Astley music videos to every TV, getting Comcast to forward you piracy warnings and deleting all your Redis tables and Elastic Search indexes.</text></comment>
<story><title>Google Home (in)Security</title><url>https://jerrygamblin.com/2018/10/29/google-home-insecurity/</url></story><parent_chain></parent_chain><comment><author>unsignedint</author><text>Google Chromecast, and Home are actually pretty horrible when it comes to security.&lt;p&gt;For example, if you lose internet connection, they will start broadcasting SSID. At this point, there&amp;#x27;s nothing in place to prevent someone launching Google Home app and hijack those devices.&lt;p&gt;Even Chromecast and Hub displays codes, they are only to identify the device. Instead of the Google Home app asking you &amp;quot;what are the letters shown on your device?&amp;quot; it just tell you &amp;quot;Press OK if your device is showing ABCD&amp;quot; -- that&amp;#x27;s very dumb implementation.&lt;p&gt;I don&amp;#x27;t know why they simply couldn&amp;#x27;t stand by to wait for the network connection to recover or require being present next to your device to press a reset button if their Network connection really needs to be updated -- or at &lt;i&gt;least&lt;/i&gt; used simple authentication process to provision the device</text></comment>