An Alexa Bug Could Have Exposed Your Voice History to Hackers

Found on Wired on Saturday, 22 August 2020
Browse Technology

Findings published on Thursday by the security firm Check Point reveal that Alexa's web services had bugs that a hacker could have exploited to grab a target's entire voice history, meaning their recorded audio interactions with Alexa.

Check Point's Vanunu says that the attack he and his colleagues discovered was nuanced, and that it's not surprising Amazon didn't catch it on its own given the scale of the company's platforms. But the findings offer a valuable reminder for users to think about the data they store in their various web accounts and to minimize it as much as possible.

Just don't let a bug into your house.

You can now play an ultra-rare Quake arcade cabinet at home

Found on Ars Technica on Friday, 21 August 2020
Browse Software

Even many serious fans of the series don't know about Quake Arcade Tournament Edition (Quake ATE), an officially licensed version of the game that ran on custom arcade cabinets.

The main difference is that enemies occasionally drop backpacks that earn players in-game "coins," (and an announced crying "Instaprize!" when you pick them up). Those coins can cause the game to spout out prize-redemption tickets through an optional printer.

That sounds like some modern form of archaeology.

India says 'Zoom is a not a safe platform' and bans government users

Found on The Register on Thursday, 20 August 2020
Browse Software

It comes as India has decided to become self-sufficient by crowdsourcing a Zoom-like service in a competition that will award the winner fat government contracts.

Zoom, meanwhile, has announced it will "re-architect" its bug bounty program as part of an effort to "help get Zoom's overall security house in order".

More countries should take IT seriously and not rely on products developed somewhere else for critical and/or official communications.

Google says Australian law would put search and YouTube at risk

Found on BBC News on Wednesday, 19 August 2020
Browse Internet

In an open letter, the firm warned that its YouTube and Search features could be "dramatically worse" if new rules were brought in.

Over the past few months, the Australian government has been preparing legislation which will make Google and Facebook pay local publishers for their content.

Not much of a problem there. Nobody forces them to list the content, so they can just drop it.

Oracle enters race to buy TikTok’s US operations

Found on Ars Technica on Tuesday, 18 August 2020
Browse Internet

The tech company co-founded by Larry Ellison had held preliminary talks with TikTok's Chinese owner, ByteDance, and was seriously considering purchasing the app's operations in the US, Canada, Australia and New Zealand, the people said.

The entry of Oracle into the race provided ByteDance with a credible alternative to Microsoft's offer, said one person with direct knowledge of the matter.

Oracle, really? The same company that drops everything left and right what a user does not pay for?

Facebook begins merging Instagram and Messenger chats in new update

Found on The Verge on Monday, 17 August 2020
Browse Internet

Facebook has started flipping the switch on integrating the chat systems for Instagram and Messenger.

Facebook has made clear its plans to unify the messaging platforms of its hugely popular apps to allow cross-messaging among Messenger, Instagram, and WhatsApp. Facebook was said to be rebuilding the underlying infrastructure so users who were on only one of its apps could connect to others using different Facebook apps.

Once they promised that would never happen. Well, another FB promise got broken.

TikTok collected Android user data using tactic banned by Google

Found on Marketwatch on Sunday, 16 August 2020
Browse Internet

The tactic, which experts in mobile-phone security said was concealed through an unusual added layer of encryption, appears to have violated Google policies limiting how apps track people and wasn’t disclosed to TikTok users. TikTok ended the practice in November, the Journal’s testing showed.

The identifiers collected by TikTok, called MAC addresses, are most commonly used for advertising purposes. The White House has said it is worried that users’ data could be obtained by the Chinese government and used to build detailed dossiers on individuals for blackmail or espionage.

TikTok was caught red handed (no pun intended).

Fortnite: Epic Games sues Google and Apple over app store bans

Found on BBC News on Saturday, 15 August 2020
Browse Legal-Issues

Apple and Google both removed the hit game from their app stores after Epic Games bypassed their payment systems, to avoid giving them a cut of sales.

Both platforms take a standard 30% of purchases on their app stores.

Epic Games had clearly expected that to happen, quickly publishing a video mocking Apple's famous 1984-themed television advert about fighting a police state. It published court documents almost immediately.

It's always been baffling how Apple and Google can demand 30% from sales just because they allow apps into their walled gardens. Imagine Microsoft would get a 30% cut from all sales done via Windows computers.

Firefox maker Mozilla axes a quarter of its workforce

Browse Software

Firefox maker Mozilla has axed 250 employees, or a quarter of its workforce, claiming the COVID-19 coronavirus pandemic is to blame after hitting it in the wallet. The organization will also "ship new products faster and develop new revenue streams."

According to Baker, "our pre-COVID plan for 2020 included a great deal of change already: building a better internet by creating new kinds of value in Firefox; investing in innovation and creating new products; and adjusting our finances to ensure stability over the long term." These efforts have not done, or are unlikely to do, the trick, apparently.

Maybe if Mozilla should not have alienated its userbase by constant UI-changes, removed features, redesigns and overally dumbing down the browser. Firefox has been a browser for the more technical people who like control over various settings; hiding and removing these controls are just nails for the coffin.

Boeing 747s receive critical software updates over 3.5" floppy disks

Found on The Register on Thursday, 13 August 2020
Browse Technology

Boeing 747-400s still use floppy disks for loading critical navigation databases, Pen Test Partners has revealed to the infosec community after poking about one of the recently abandoned aircraft.

"This database has to be updated every 28 days, so you can see how much of a chore this has to be for an engineer to visit," Lomas said, pointing out the floppy drive – which in normal operations is tucked away behind a locked panel.

So what? It seems to work and it is much more secure than having the plane join some wireless network, or rely on someone plugging a USB stick in that comes with preinstalled malware, or even causes physical damage.