New Chrome Extension Uses Sound To Share URLs Between Devices

itwbennett writes: Google Tone is an experimental feature that could be used to easily and instantly share browser pages, search results, videos and other pages among devices, according to Google Research. "The initial prototype used an efficient audio transmission scheme that sounded terrible, so we played it beyond the range of human hearing," researcher Alex Kauffmann and software engineer Boris Smus wrote in a post on the Google Research blog.

Sounds Hackable

[pubwvj]

Sounds like a way to hack a computer with audio. Even the isolated can be gotten.

Been Done

[Etherwalk]

Sounds like a way to hack a computer with audio. Even the isolated can be gotten.

I have a vague recollection of reading about an acoustic attack to get around airgapping, but don't remember if it was theoretical at the time.

In college a friend of mine implemented "TCP Over Voice" for a project in his operating systems course. Another friend who had perfect pitch sang a dollar sign to the computer...

Re:

[hitmark]

Best i recall was someone claimed their BIOS had been infected with something that would use speakers and mic to get around being airgapped from any net connection.

Not sure if it was ever verified by any security experts or not.

Re:

[Lennie]

If you read on WIkipedia it says it wouldn't be impossible:

"In December 2013 computer scientists Michael Hanspach and Michael Goetz released a paper to the Journal of Communication demonstrating the possibility of an acoustic mesh networking at a slow 20 bits per second using a set of speakers and microphones for ultrasonic communication in a fashion similar to BadBIOS's described abilities."

http://en.wikipedia.org/wiki/B... [wikipedia.org]

Re:

[Talderas]

I have a recollection of an article discussing hackers keylogging an airgapped PC by reading the EM signals generated by the keyboard impulses.

Re:

[GameboyRMH]

There's no way to initially cross an airgap with sound, you'd have to first infect the computer with the software needed to communicate with sound via some other means, and then you could use sound to establish a connection to a computer that's believed to be airgapped.

If technology like this is included with an OS by default, and it doesn't require user action to allow data to be received and approved before taking any action with it (I'm looking at you, phones with NFC), that could change.

Re:

[LordLimecat]

Users have to be logged into their Google account, and their profile names and photos are displayed alongside the URL in incoming Tone notifications.

Its right there in the article....

OMG...

[qtp]

They've invented the acoustic coupler!

Re:OMG...

[QuasiSteve]

I think the word 'invented' gives too much credit as is.

They merely released an app that does what others have done before;
http://rnd.azoft.com/mobile-ap... [azoft.com]
http://petapixel.com/2013/09/1... [petapixel.com]
http://dspace.ucalgary.ca/bits... [ucalgary.ca]
http://circlewithme.tumblr.com... [tumblr.com]

But it's Google, so it gets eyeballs anew.

Re:

[serviscope_minor]

I think the word 'invented' gives too much credit as is.

The fact that he used the term "acoustic coupler" should indicate that he was referring to them having "invented" something which was actually invented in the early 1960s.

http://en.wikipedia.org/wiki/A... [wikipedia.org]

Re:

[UnderCoverPenguin]

My Palm T3 does this with IR. But then, few phones/tablets have an IR receiver - even if they have an IR transmitter (which can be used for remote controlling TVs).

Re:

[QuasiSteve]

My ancient Windows Mobile one had IR - could receive/send, control TVs (learn remotes via some software aka 'app'), IR lighting, and even print to a printer with an IR port without any in-between server or AirPrint silliness.

In some ways, smart phones have really gone technologically backwards for the sake of user experience claims. On the other hand.. accurate capacitive displays, accelerometers, built-in GPS.. I wouldn't go back, exactly :)

Re:

[Krishnoid]

Ok, maybe repurposed [schlockmercenary.com] is a better way of saying it.

Re:OMG...

[cdxta]

Here is what it sounds like when the plugin establishes a connection: https://www.youtube.com/watch?... [youtube.com]

Re:

[shentino]

bullshit, that's a dialup modem.

Re:

[Cochonou]

You know, that was a joke.

But why???

[Sqr(twg)]

If I want to send you a link to a webpage, then it is safe to assume that we're both connected to the internet. So why not send the link that way?

Re:

[wonkey_monkey]

Let me send you this link on Skype. Oh wait, you don't have Skype. No, I don't have WhatsApp. Facebook? No. Okay, I'll email it to you. Wait, what's your address? Okay, I'll just type that in. Damn you, autocorrect! Okay, sent.

Not got it yet? Did you check your spam folder? Okay, there you go. Haha, what a funny kitty. Totally worth all that screwing around working out how to send the link to you when we could have just each pressed one or two buttons in Chrome*.

~~~

That's not to say that Google Chrome isn't

Re:

[Sqr(twg)]

Let me send you this link on Skype. Oh wait, you don't have Skype. No, I don't have WhatsApp. Facebook? No. Okay, I'll email it to you.

So, you're saying the problem is that there are currently too many messaging apps, and no agreed upon standard? And the solution to that problem is to create yet another messaging app?

As for communicating with someone who is nearby without having to type an email address or user name: Apps like Bump have been around for years. Oh wait, you don't have bump? No I don't have Google Tone. How about OkCupid?

Re:

[wonkey_monkey]

So, you're saying the problem is that there are currently too many messaging apps, and no agreed upon standard?

I'm saying it's a problem, sometimes, but nothing that keeps me awake at night.

And the solution to that problem is to create yet another messaging app?

It's not a messaging app. There's no login, no authentication, no friend requests. It's for sharing generic data, not authenticated messages, with someone in your physical vicinity. It fulfils a pretty different purpose which, when attempted over the various messaging channels out there, leads to issues such as I outlined.

As a Chrome extension, or even integrated into Chrome, I'm not sure it'll make many waves, and possibly more

Standards

[DrYak]

So, you're saying the problem is that there are currently too many messaging apps, and no agreed upon standard? And the solution to that problem is to create yet another messaging app?

Well technically there is one agreed upon standard: XMPP/Jabber.

But beside Google (who - although helped pushing it forward back then - would rather like that you forgot they support it) and Facebook (who was more or less forced to slap a gateway as an after though to their proprietary system and would like to discontinue it and force you to install their app) no other big major player use it.

Still, it's very popular among lots of small-scale services (which are usually federated among them), and also popul

Re:

[DrYak]

And WhatsApp is very active at trying to shut un authorized users out

Sorry, I meant:
un-authorized implementations

Re:

[h4ck7h3p14n37]

I'm picturing someone using this in a lecture hall where they can have the room's sound system broadcast the tones.

"we played it beyond the range of human hearing"

[Nutria]

And dogs? Heck, cats hear even higher pitches.

Re:

[aardvarkjoe]

So it not only transmits URLs, it also annoys the nearby dogs and cats. I'm not seeing a downside here.

Re:

[Nutria]

Annoying your wife/GF's pet annoys her. Annoying her puts you in the -- no pun intended -- doghouse.

Thus, don't annoy your wife/GF's pet.

Goatse, now in tone

[goombah99]

I'm going to create a goatse tone-code emitter and leave it running on the library computer.

it used to be on the internet no one could tell if you are a dog. now they will know.

What about the dogs?

[Bruce66423]

Given they've got hearing at a higher frequency, the operating frequency will have to be VERY high to avoid upsetting our best friends...

Re:

[Nidi62]

Which just doesn't matter in this case, because I've never seen a smart person with one of those things. No technical person would have one. They don't make logical sense. Of course normal people don't own things that can just hurt them any time at random. So many children are killed or maimed by dogs per year. That is why smart people stay the hell away from those things.

Are you that much of a psychopath that you even treat animals so cruelly they can turn on you in an instant? Or just so introverted that you can't handle any interaction with another social creature? And I guess smart people don't drive cars, go swimming, or hell, even make their kids take a bath because so many children are killed by them every year. Why even have kids, since so many die in childbirth every year. Remember, dogs evolved and were bred to live alongside humans. To most people, the compan

three words

[MrKaos]

air gap exploit

ham radio digi modes

[Anonymous Coward]

Just use MT63 or maybe PSKR. There's tons of "open" modes and modems that have forward error correction. I routinely use MT63-2000 to send text too big to fit in a QR code.

Took a cue from BadBIOS?

[adndgamer]

Remember when there were rumors of BadBIOS circulation which used this exact technique to span airgaps?

Great! There goes the air gap.

[140Mandak262Jamuna]

So we could spread viruses worms and browser helper objects from internet connected network to the safe air gapped internal networks. And, since these internal networks assume they are safe, they are much less lax in security. Good! Great help you are Google for the malware developers.

Android/ChromeCast already uses ultrasonic

[BoogieChile]

To send data to a nearby chromecast without needing to connect to the network that the ChromeCast is on, an Android device will link to the ChromeCast with an ultrasonic signal.

Re:

[Anonymous Coward]

Running a simple google search before replying sometimes makes sense:
http://www.pcmag.com/article2/0,2817,2473520,00.asp

So...

[EmeraldBot]

How does this deal with loud interrupting noises? Classrooms or offices tend to have bursts of loud noises (dropped items, phones ringing, etc.), is there any way it can figure out lost information?

Re:

[u38cg]

Presumably if it works on a narrow frequency band it only has to listen on that frequency, so extraneous noise won't be an issue. And I imagine they will have remembered to include error correction.

Re:

[dave420]

It works really well with Chromecasts so far, so I guess they have thought this through quite a bit.

great way for more malware and trojan!

[Mishotaki]

great! now the best way to have even more computer on a botnet! just make an ad with sound that will send people on a compromised website to send malware to anyone with the app!

Google, pissing off more than just homo sapiens

[b1ng0]

"beyond the range of human hearing"
Great, now you're going to piss off my dog, too? Thanks Google!

Re:

[AgentElrond]

... minutes pass ...
R Tape loading error

Remember the clicker tv?

[deviated_prevert]

We had to get up and change the channel when I was a teenager. But my best friend didn't they could afford a new-fangled clicker tv. I swear this is true, one day I smoked up, got creative and learned to imitate the clicker sound perfectly and change the channel. I got so good at it when we did the keep up with the Jones' routine that I drove my parents nuts to the point of distraction by throwing the sound and changing the channel on the Electrohome or turning it on or off but that one was really tricky to

Re:

[BennyX]

I have actually read about this.. it was way before my time,though. One of the first remote-based devices for TV's was entirely mechanical and based on higher-than-human hearing sound. You'd press a button on the remote, a knocker would hit one of several 'bells' (probably tuning forks?) and the TV would 'hear' this sound and change the channel. Apparently it wasn't quite silent, and it did annoy pets.

Advertisers are going to love this

[naranek]

Just wait until advertisers start adding these to their radio and streaming ads. Also - I'm changing my phone's notification sound right now :D

chirp.io

[hughbar]

http://chirp.io/ [chirp.io] and, as previous poster remarked, acoustic coupler. This is a pretty bad idea, generally.

::Cue::Cat STRIKES BACK!

[Thud457]

Digital Convergence, the company that brought us our beloved ::Cue::Cats, also had a technology that could capture an audio-encoded link from your computer's microphone port.

Man I miss the oughts... I lived in a house back then...

Re:

[Red_Chaos1]

I was going to essentially say this earlier but /. was having problems and wouldn't let me log in. Cue Cat redux.