AccessoriesVideo

Chromecast exploit could allow hackers to hijack your dongle and play whatever they like [VIDEO]

19

Chromecast Featured ready to cast

WARNING: Your Chromecast is no longer safe… from hackers with the time and knowledge to build a hacking device out of a Raspberry Pi. As far fetched as that may sound, it is possible. In fact, one man — a security consultant named Den Petro — actually went through the trouble of creating a little proof-of-concept device he calls the “Rickmote.”

The tiny device — built using an affordable Raspberry Pi — takes advantage of an exploit that allows it to easily hack into your Chromecast and play whatever video (or music or pictures) it liked, with no way for you to regain control. Because Rick Astley’s famous music video was the streaming media of choice, that’s how the device found its name.

Rickmote-1-e1405529623222

How it works is the Rickmote floods the Chromecast with de-authenticate packets, a normal function found in the WiFi standard. It’s only because of the unique way the Chromecast handles deauth commands that makes it susceptible to hijacking. When faced with too many deauth commands, Google’s dongle will simply boot into setup mode, making it easy for a very bad person to connect to the dongle and stream whatever they liked.

In fact, the Rickmote doesn’t even need to be connected to your secured WiFi network to hack into the Chromecast, making it all the more threatening (or annoying, rather). Since this is actually how the Chromecast was designed to work, it seems unlikely Google will make an attempt at addressing this newly discovered “exploit” unless they revised the hardware somewhere down the road.

So what are the odds you find your Chromecast hijacked and playing the most exotic adult movies the internet has to offer? Extremely unlikely. First, the prankster would need to be in range of your network — as well as one of their own — in order to stream their own media to your Chromecast. Once they got out of range, the Chromecast would be yours to setup again. For now, we’re sure your Chromecast is (probably) safe.

[Bishop Fox | via Raspberry Pi | TechCrunch]

Chris Chavez
I've been obsessed with consumer technology for about as long as I can remember, be it video games, photography, or mobile devices. If you can plug it in, I have to own it. Preparing for the day when Android finally becomes self-aware and I get to welcome our new robot overlords.

HTC smartwatch makes brief appearance in behind the scenes video

Previous article

Xiaomi officially announces the Mi 4

Next article

You may also like

19 Comments

  1. TL, Dr…i’m really shaking in my petticoats on this one. /s

  2. Pure sensationalism. Not only would they need to be in range they would have to be on my network. … but they can’t, so they can’t do it at all.

  3. Yeah you could be watching something interesting and all of a sudden out of nowhere you get Rickrolled.

  4. There’s nothing so terrible as having someone to hijack your dongle. Oh, wait…

  5. Hijack your dongle. Sounds good

  6. in other words it’s possible to hack into our chromecasts to play whatever we want?

  7. Don’t touch my dongle!

  8. “You have unlocked Rickroll level: Gandalf”
    In related news Rick Astleys song was removed from YouTube cause Google got Rickrolled.

  9. They can do a portable hotspot if they really wanted to troll someone heck they don’t even need internet if they use something like this http://www.amazon.com/dp/B00INMB23Q

  10. Hijack your dongle…heh.

  11. So you’re basically saying if they hijack my Chromecast I might get free porn?

  12. Sounds like to much of a pain to give someone free porn.

  13. LOL… he thinks like me. The first thing I did when I set up my Chromecast was to name it “Rickrolling Made Easy” and to troll my unsuspecting wife with the same video.

  14. Reminds me of what I did to annoy my grandpa, when I lived in his home during university years. Back home we had a wired radio signal in every old apartment, so you’d just plug a simple cheap receiver to listen to a few major networks. So whenever me and grandpa had an argument, I’d go to my room, where the second outlet of that wire was located, put a wire pair into that outlet and plug the other end to my vinyl player’s output. Volume up and I flood the wire with my own music. He’d get so pissed off not getting his news broadcasts on time ;) The side effect was that given the output signal was loud enough, I’d flood entire building’s radio network.

  15. Giggity.

  16. I have a feeling it would free gay porn.

    Not that there’s anything wrong with that.

  17. Only my wife is allowed to hijack my dongle. lol.

  18. So in other words 99% of us with Chromecasts have nothing to worry about ?

    1. Basically yes

Leave a reply

Your email address will not be published. Required fields are marked *

More in Accessories