Meta glasses caught recording conversations without wake phrase


Meta says it has resolved an issue after some Ray-Ban Meta owners reported that their glasses recorded conversations without the “Hey Meta” wake phrase.

Users reported finding recordings and transcripts of conversations they did not knowingly save. Recording without anyone realizing raises privacy concerns for both the wearer and the people around them.

The complaints surfaced on Reddit, where one owner described unexpected recordings occurring with three pairs of glasses. The owner said the behavior started after a firmware update and occurred even with Respond without Hey Meta disabled. They also reported that the glasses’ internal notification light sometimes activated during normal conversation. Other commenters described similar unexplained activations.

Read more…
Source:  MalwareBytes Labs


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • British judge rules dissident can sue Saudi Arabia for Pegasus hacking

    August 19, 2022

    A British judge has ruled that a case against the kingdom of Saudi Arabia brought by a dissident satirist who was targeted with spyware can proceed, a decision that has been hailed as precedent-setting and one that could allow other hacking victims in Britain to sue foreign governments who order such attacks. The case against Saudi ...

  • Two years on, Apple iOS VPNs still leak IP addresses

    August 19, 2022

    Apple has left a VPN bypass vulnerability in iOS unfixed for at least two years, leaving identifying IP traffic data exposed, and there’s no sign of a fix. Back in early 2020, secure mail provider ProtonMail reported a flaw in Apple’s iOS version 13.3.1 that prevented VPNs from encrypting all traffic. The issue was that the ...

  • 1,900 Signal users exposed: Twilio attacker ‘explicitly’ looked for certain numbers

    August 16, 2022

    The security breach at Twilio earlier this month affected at least one high-value customer, Signal, and led to the exposure of the phone number and SMS registration codes for 1,900 users of the encrypted messaging service, it confirmed. However, Signal – considered one of the better secured of all the encrypted messaging apps – claims the ...

  • Twitter breach exposed anonymous account owners

    August 5, 2022

    A vulnerability in Twitter’s software that exposed an undetermined number of owners of anonymous accounts to potential identity compromise last year was apparently exploited by a malicious actor, the social media company said Friday. It did not confirm a report that data on 5.4 million users was offered for sale online as a result but said ...

  • Hacker selling Twitter account data of 5.4 million users for $30k

    July 22, 2022

    Twitter has suffered a data breach after threat actors used a vulnerability to build a database of phone numbers and email addresses belonging to 5.4 million accounts, with the data now up for sale on a hacker forum for $30,000. Yesterday, a threat actor known as ‘devil’ said on a stolen data market that the database ...

  • Chinese ride-sharing operator Didi slapped with $1.1B fine for breaching China data security laws

    July 21, 2022

    Didi Global has been fined 8 billion yuan ($1.18 billion) for breaching China’s cybersecurity and data security laws. The Chinese ride-sharing operator is accused of 16 illegal practices involving the collection of passenger data. Cyberspace Administration of China (CAC) said Thursday Didi had violated the country’s cybersecurity and data security laws. The industry regulator pointed to ...