Pivot to AI – Hack a smart home with a calendar invite! And Google Gemini David Gerard 10 August 2025 (video version) Unfortunately, Google is heavily pushing Actively Idiotic Homes. And they’re full of security holes, because Google forced in their chatbot, Gemini. There’s a new paper called “Invitation Is All You Need”. It was presented at Black Hat this week. (Drive, PDF) The researchers found 14 different ways to prompt-inject Gemini assistants controlling Google Home. You only need a Google calendar invite (…) The researchers told Google what they’d found in February and Google has tried to patch around it. Google says it’s put in “mitigations”. Google has not fixed the root cause, because the root cause is prompt injection, and fixing that would mean not using Gemini.
It’s very frustrating because you have to work hard to avoid having it pushed on you.