(Above link with skipped Paywall)

Summary by Andi:

A teenage hacker named Reynaldo Vasquez-Garcia discovered that the Halo 3C vape detector, which looks like a standard smoke detector in school bathrooms, contained hidden microphones and security flaws that allowed it to be turned into a secret listening device[1].

Working with another hacker known as “Nyx,” Vasquez-Garcia found the device could be hacked by exploiting weak password controls and firmware update vulnerabilities. Once compromised, attackers could use it to eavesdrop on conversations in real-time, disable its detection capabilities, create fake alerts, or play audio through its speaker[1:1].

The researchers revealed these findings at the 2025 Defcon hacker conference, demonstrating how any hacker on the same network could hijack a Halo 3C by brute-forcing passwords at 3,000 attempts per minute. The device’s firmware could also be modified since its encryption key was publicly available in updates on the manufacturer’s website[1:2].

Motorola, which owns the Halo 3C’s manufacturer IPVideo Corporation, said it developed a firmware update to address the security flaws. However, the researchers argue this doesn’t solve the fundamental privacy concern of having microphone-equipped devices installed in sensitive locations like school bathrooms and public housing[1:3].


  1. Wired - It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug ↩︎ ↩︎ ↩︎ ↩︎

  • Pearl@lemmy.ml
    link
    fedilink
    arrow-up
    48
    ·
    3 days ago

    So, why are microphones included in smoke detectors? Is this a dumb failsafe where it activates if it hears other smoke detectors?

    • Glitterbomb@lemmy.world
      link
      fedilink
      arrow-up
      42
      ·
      3 days ago

      It also has a microphone for listening out for “aggression,” gunshots, and keywords such as someone calling for help, a feature that to Vasquez-Garcia immediately raised concerns of more intrusive surveillance.

      It’s in the article. I’d cause so many false positives for ‘aggression’ when taking a shit. My God this is terrible

      • JamesBoeing737MAX@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        7
        ·
        3 days ago

        Does it report you talking shit about the local government to the authorities? At this point, it doesn’t seem that far-fetched.

        • SanctimoniousApe@lemmings.world
          link
          fedilink
          arrow-up
          6
          ·
          3 days ago

          I doubt they built it with the processing power for that when the audio picked up from a large number of these placed throughout the building can all be routed to a central server with the power to follow people around and maintain audio contact wherever they go.

    • Zerush@lemmy.mlOP
      link
      fedilink
      arrow-up
      14
      ·
      3 days ago

      I don’t know, maybe to be activated when someone screams “Fire”. I don’t even know why smart smoke detectors, the traditional ones are working pretty good. Stupid, not “smart”, the hype to include AI everywhere.

      • Serinus@lemmy.world
        link
        fedilink
        arrow-up
        5
        arrow-down
        1
        ·
        edit-2
        3 days ago

        It is nice to have the smoke detector communicate out its status. I sure like to know when my house is on fire, even if I’m not home. And a notification about a battery being low is much nicer than incessant beeping.

        None of this replaces the primary local, physical functionality. You don’t depend on technology for the thing to work; it’s just an addition.

    • facow [he/him, any]@hexbear.net
      link
      fedilink
      English
      arrow-up
      9
      ·
      edit-2
      3 days ago

      It’s apparently a vape and bullying detector. So ostensibly the mics are used for the bullying part. But it does make you wonder the vape detection actually works by just listening for “can I get a hit”

  • ☂️-@lemmy.ml
    link
    fedilink
    arrow-up
    28
    ·
    2 days ago

    watch this garbage fail to prevent anything bad, but excel at surveilling children.