Hacking Meta’s Smart Glasses
A security researcher has successfully hacked Meta's Ray-Ban smart glasses by intercepting a software update and exposing a network listener, raising concerns about potential surveillance capabilities.
Meta's Ray-Ban smart glasses have attracted controversy since their release due to concerns about covert surveillance. Security researcher [p0pcycle] recently examined the device's defenses when she obtained a pair, focusing on software vulnerabilities rather than hardware probing.
Firmware Exploit
By intercepting a software update and decompiling the associated app, [p0pcycle] accessed the full firmware. She discovered a developer mode that allows applications to be written for the glasses in the form of an APK file that loads application code.
An early firmware version would trust self-signed apps, enabling arbitrary code execution on the device. After some trial and error, she successfully exposed a network listener, demonstrating the glasses' vulnerability to potential exploitation.
Patch and Future Concerns
The researcher reported the vulnerability through Meta's bug bounty program, resulting in a patch for newer firmware versions. However, the write-up details the exploit process, and experts believe this won't deter others from probing the device further for additional security flaws.
The discovery underscores ongoing privacy concerns surrounding smart glasses and similar wearable technologies that could potentially be used for unauthorized surveillance or data collection.
Related
