WORLDTECHResearcher Gains Code Execution on Meta Ray-Ban Smart Glasses via Intercepted Update
A researcher identified as p0pcycle has reported gaining arbitrary code execution on Meta's Ray-Ban smart glasses by exploiting weaknesses in an early firmware version. The findings, reported by Hackaday, highlight security concerns around a device that has already drawn criticism over its potential for covert surveillance.
How the researcher reached the firmware
Because physical hardware probing was not an option, the researcher instead targeted the software update process by intercepting a firmware update. Decompiling a companion application provided access to the complete firmware, which the researcher then examined for weaknesses.
Trusted self-signed apps and exposed listener
According to the report, an early firmware version would trust self-signed applications, which allowed the researcher to run arbitrary code on the device. The glasses include a developer mode that lets applications be written for the hardware in the form of an APK that loads the application code. After some trial and error, the researcher was able to expose a network listener.
Context of the device's controversy
The report notes that Meta's Ray-Ban smart glasses have attracted considerable controversy in the relatively short time they have been on sale, given their potential for covert and unwanted surveillance. The access described in the report makes the device's defences a point of direct scrutiny.
Open questions
- Do later firmware versions still trust self-signed applications?
- Has Meta responded to the reported findings?