Google Glass vulnerability discovered by Lookout could have captured user data

Google Glass was silently patched by the internet giant last month after a flaw was discovered that could have allowed hackers to capture user data sent from the device, mobile security firm Lookout has revealed.

Having worked with Google to find and repair the vulnerability, Lookout said in a blog post today that it reported the bug on 16 May before it was quickly fixed by Google on 4 June, with the update pushed out to all devices.

Google took advantage of Glass’ ability to read printed text and QR codes to create an easy way for a user to configure their Glass device without needing a keyboard.

Discovered by Lookout Mobile Security principal security researcher Marc Rogers, the vulnerability that Google patched last month exploited QR codes configured to tell Glass to connect to WiFi Networks or Bluetooth devices.

SOURCE: theinquirer.net