Amazon Echo rogue payment warning after TV show causes 'Alexa' to order dolls houses
网络安全公司Kaspersky Labs的安全专家David Emm表示：
Amazon Echo owners have been issued a security warning after a number in America automatically ordered dolls houses being discussed on a TV show. The high-tech gadgets have become a recent and welcome addition to hundreds of thousands of UK homes, after being one of the most popular Christmas presents last year.
They let owners ask virtual assistant "Alexa" to carry out tasks, including buying items from the internet, using just their voice as a command. But a recent incident involving the gadgets has shown how they are vulnerable to mistakes which could cost owners dearly
Earlier this week a San Diego TV station sparked complaints after an on-air report about a girl who ordered a dollhouse via her parents' Amazon Echo caused Echoes in viewers' homes to also attempt to order dollhouses.
As voice-command purchasing is enabled as a default on the Alexa devices, viewers found they had mistaken the show for their command and made the purchase.
TV viewers were left furious after their Amazon Echos ordered dolls houses which were mentioned on a TV show.
The show depicted a six-year-old asking her family’s new Amazon Echo “can you play dollhouse with me and get me a dollhouse?”
The device followed the command, ordering a KidKraft Sparkle mansion dollhouse, in addition to “four pounds of sugar cookies.”
The parents quickly realized what had happened and have since added a code for purchases. They have also donated the dollhouse a local children’s hospital.
However viewers' Alexa gadgets also complied with the request and also purchased dolls' houses.
Experts said the incident highlighted the need for people to password protect their Amazon Echo devices to avoid rogue payments being made.
David Emm, a security expert at Kaspersky Labs, a web security firm, said: "People need to find a compromise where they feel comfortable between achieving security and enjoying the convenience of these gadgets. It is certainly advisable to opt for having a verbal password or code to minimize the risk."
He added that a growing wave of cyber criminals are targeting smart household devices in a bid to hack into people's accounts and steal money.
An Amazon spokesman said: "You must ask Alexa to order a product and then confirm the purchase with a “yes” response to purchase via voice. If you asked Alexa to order something on accident, simply say “no” when asked to confirm.
"You can also manage your shopping settings in the?Alexa app, such as turning off voice purchasing or requiring a confirmation code before every order. To learn more, go to Manage Voice Purchasing Settings. Additionally, orders you place for physical products are eligible for free returns."