An Alexa Bug Could Have Exposed Your Voice History to Hackers
Findings published on Thursday by the security firm Check Point reveal that Alexa's web services had bugs that a hacker could have exploited to grab a target's entire voice history, meaning their recorded audio interactions with Alexa.
Check Point's Vanunu says that the attack he and his colleagues discovered was nuanced, and that it's not surprising Amazon didn't catch it on its own given the scale of the company's platforms. But the findings offer a valuable reminder for users to think about the data they store in their various web accounts and to minimize it as much as possible.
You can now play an ultra-rare Quake arcade cabinet at home
Even many serious fans of the series don't know about Quake Arcade Tournament Edition (Quake ATE), an officially licensed version of the game that ran on custom arcade cabinets.
The main difference is that enemies occasionally drop backpacks that earn players in-game "coins," (and an announced crying "Instaprize!" when you pick them up). Those coins can cause the game to spout out prize-redemption tickets through an optional printer.
India says 'Zoom is a not a safe platform' and bans government users
It comes as India has decided to become self-sufficient by crowdsourcing a Zoom-like service in a competition that will award the winner fat government contracts.
Zoom, meanwhile, has announced it will "re-architect" its bug bounty program as part of an effort to "help get Zoom's overall security house in order".
Google says Australian law would put search and YouTube at risk
In an open letter, the firm warned that its YouTube and Search features could be "dramatically worse" if new rules were brought in.
Over the past few months, the Australian government has been preparing legislation which will make Google and Facebook pay local publishers for their content.
Oracle enters race to buy TikTok’s US operations
The tech company co-founded by Larry Ellison had held preliminary talks with TikTok's Chinese owner, ByteDance, and was seriously considering purchasing the app's operations in the US, Canada, Australia and New Zealand, the people said.
The entry of Oracle into the race provided ByteDance with a credible alternative to Microsoft's offer, said one person with direct knowledge of the matter.
Facebook begins merging Instagram and Messenger chats in new update
Facebook has started flipping the switch on integrating the chat systems for Instagram and Messenger.
Facebook has made clear its plans to unify the messaging platforms of its hugely popular apps to allow cross-messaging among Messenger, Instagram, and WhatsApp. Facebook was said to be rebuilding the underlying infrastructure so users who were on only one of its apps could connect to others using different Facebook apps.
TikTok collected Android user data using tactic banned by Google
The tactic, which experts in mobile-phone security said was concealed through an unusual added layer of encryption, appears to have violated Google policies limiting how apps track people and wasn’t disclosed to TikTok users. TikTok ended the practice in November, the Journal’s testing showed.
The identifiers collected by TikTok, called MAC addresses, are most commonly used for advertising purposes. The White House has said it is worried that users’ data could be obtained by the Chinese government and used to build detailed dossiers on individuals for blackmail or espionage.
Fortnite: Epic Games sues Google and Apple over app store bans
Apple and Google both removed the hit game from their app stores after Epic Games bypassed their payment systems, to avoid giving them a cut of sales.
Both platforms take a standard 30% of purchases on their app stores.
Epic Games had clearly expected that to happen, quickly publishing a video mocking Apple's famous 1984-themed television advert about fighting a police state. It published court documents almost immediately.
Firefox maker Mozilla axes a quarter of its workforce
Firefox maker Mozilla has axed 250 employees, or a quarter of its workforce, claiming the COVID-19 coronavirus pandemic is to blame after hitting it in the wallet. The organization will also "ship new products faster and develop new revenue streams."
According to Baker, "our pre-COVID plan for 2020 included a great deal of change already: building a better internet by creating new kinds of value in Firefox; investing in innovation and creating new products; and adjusting our finances to ensure stability over the long term." These efforts have not done, or are unlikely to do, the trick, apparently.
Boeing 747s receive critical software updates over 3.5" floppy disks
Boeing 747-400s still use floppy disks for loading critical navigation databases, Pen Test Partners has revealed to the infosec community after poking about one of the recently abandoned aircraft.
"This database has to be updated every 28 days, so you can see how much of a chore this has to be for an engineer to visit," Lomas said, pointing out the floppy drive – which in normal operations is tucked away behind a locked panel.