Recent comments in /f/gadgets

asdaaaaaaaa t1_j24n3h0 wrote

Check out Rossman for his issues dealing with New York. Basically got audited, proved he didn't have any problems when they "mistakingly" said he did. Then he got audited again, directly after, at least from my understanding. It's incredibly corrupt, and sucks because it allows businesses easy access to stopping laws/policies and such like this one (or just completely ruining/editing it, as in this case).

I wonder how much companies "lobbied" to keep this law from happening.

192

chrisdh79 OP t1_j249zs8 wrote

From the article: A bug in Google Home smart speaker allowed installing a backdoor account that could be used to control it remotely and to turn it into a snooping device by accessing the microphone feed.

A researcher discovered the issue and received $107,500 for responsibly reporting it to Google last year. Earlier this week, the researcher published technical details about the finding and an attack scenario to show how the flaw could be leveraged.

While experimenting with his own Google Home mini speaker, the researcher discovered that new accounts added using the Google Home app could send commands to it remotely via the cloud API.

Using a Nmap scan, the researcher found the port for the local HTTP API of Google Home, so he set up a proxy to capture the encrypted HTTPS traffic, hoping to snatch the user authorization token.

227