Musings tagged as amazon

After tor users found out that google quietly disabled domain fronting on their servers, Amazon apparently wants to make more of a fuss. They sent a letter to the Signal foundation threatening to take them off their servers if they do not stop using domain fronting. The linked blog post by Signal founder Moxie has some explanation as to what domain fronting is and how it helps to circumvent censorship in countries like Iran, Iraq, UAE and the like.

Good reason to cancel your Amazon Prime account and focus more on using alternative online warehouses if you ask me. Helping questionable regimes with their censorship efforts by threatening the only properly secure messaging service out there is pretty fucked up.

Researchers have used the officially available Alexa SDK from Amazon in order to hack the Amazon Echo and turn it into an eavesdropping device.

They created a calculator app and simply set a parameter called shouldEndSession to false, leading to the app expecting a second question from the user right after the reply to the first. The fun thing is that this does not require another command phrase like “Alexa, open calculator”. Effectively Alexa remained open and listening, converting the speech into words that were stored as text and visible to the app developers via the app’s logs.

Every day I am puzzled by the stupidity of people paying Amazon in order to place a bug in their appartments.