From the article: A bug in Google Home smart speaker allowed installing a backdoor account that could be used to control it remotely and to turn it into a snooping device by accessing the microphone feed.
A researcher discovered the issue and received $107,500 for responsibly reporting it to Google last year. Earlier this week, the researcher published technical details about the finding and an attack scenario to show how the flaw could be leveraged.
While experimenting with his own Google Home mini speaker, the researcher discovered that new accounts added using the Google Home app could send commands to it remotely via the cloud API.
Using a Nmap scan, the researcher found the port for the local HTTP API of Google Home, so he set up a proxy to capture the encrypted HTTPS traffic, hoping to snatch the user authorization token.
From the article: A bug in Google Home smart speaker allowed installing a backdoor account that could be used to control it remotely and to turn it into a snooping device by accessing the microphone feed.
A researcher discovered the issue and received $107,500 for responsibly reporting it to Google last year. Earlier this week, the researcher published technical details about the finding and an attack scenario to show how the flaw could be leveraged.
While experimenting with his own Google Home mini speaker, the researcher discovered that new accounts added using the Google Home app could send commands to it remotely via the cloud API.
Using a Nmap scan, the researcher found the port for the local HTTP API of Google Home, so he set up a proxy to capture the encrypted HTTPS traffic, hoping to snatch the user authorization token.
From the article: Amazon has begun delivering orders by drone. Amazon Prime Air is now operating in Lockeford, Calif. and College Station, Texas, delivering a small number of packages just in time for Christmas.
In August of this year, the retail giant received approval from the Federal Aviation Administration to use drones for package deliveries. The maximum payload for Prime Air is 5 lb, and Amazon says that 85 percent of its shipments fall under that weight.
Residents of both towns can sign up for the service, and Amazon will then confirm that the company can deliver safely to the customer's address. Once an order is placed, the customer gets an estimated delivery time and tracking info.
"The drone will fly to the designated delivery location, descend to the customer's backyard, and hover at a safe height," Amazon said. "It will then safely release the package and rise back up to altitude."
Lockeford is a small, rural town of about 3,500 residents located about 50 miles southeast of Sacramento and just northwest of Stockton, making it an ideal location to pilot drone delivery. College Station is roughly 100 miles northwest of Houston and is the home of Texas A&M University.
From the article: Most of us rely on counter-top air poppers or microwaves to whip up a tasty popcorn snack. But infrared cooking offers another viable alternative, according to a September paper published in the journal ACS Food Science and Technology.
Popcorn is the only grain in the corn family that pops in response to the application of heat—specifically, temperatures above 180° C. It has a lot to do with the structure of the kernels. Each has a tough outer shell, called the pericarp, within which lies the germ (seed embryo) and the endosperm. The latter holds trapped water (popcorn kernels need about 14 percent water to pop) and starch granules.
Last year, Mahdi Shavandi and his coauthors at the Iran Research Organization for Science and Technology in Tehran successfully demonstrated the proof of principle for their approach to making popcorn with infrared heat. With this method, a heat source like fire, gas or energy waves is in direct contact with the food, rather than a heating element like a pan or grill grate. It's often likened to broiling or cooking food over a campfire. Fans argue that this method is fast, highly energy efficient, and environmentally friendly when compared to more conventional means of heating.
It's already used for such purposes as heating, drying, roasting, cooking, baking, and even microbial decontamination, per the authors. And infrared grills are increasingly popular. But could you use infrared cooking to produce popcorn with all the desirable characteristics we know and love, and convince us to switch from our beloved microwaveable brands? Shavandi et al. thought it might be possible.
From the article: New research provides evidence that narcissism moderates the relationship between testosterone and generosity in men. The study, published in Hormones and Behavior, found that the most generous men tended to be low in endogenous testosterone and simultaneously low in narcissism. Unexpectedly, however, the researchers also found that heightened testosterone levels in combination with heightened narcissism was a significant positive predictor of generosity.
“Physiological changes constantly occurring in living organisms are interconnected with behavioral outcomes in many intricate and fascinating ways,” said co-author Magdalena Ziemiańska, a PhD student at the Polish Academy of Sciences. “We were curious to examine how a normal (i.e. baseline) level of testosterone is linked to social behavior.”
“A simple economic game was applied, in which the participants’ task was to divide points between themselves and a stranger,” Ziemiańska explained. “We wanted to check if a popular belief, derived from animal studies, that high testosterone level is connected with competitive, antisocial behaviors is true in humans.”
chrisdh79 OP t1_j249zs8 wrote
Reply to Google Home speakers allowed hackers to snoop on conversations by chrisdh79
From the article: A bug in Google Home smart speaker allowed installing a backdoor account that could be used to control it remotely and to turn it into a snooping device by accessing the microphone feed.
A researcher discovered the issue and received $107,500 for responsibly reporting it to Google last year. Earlier this week, the researcher published technical details about the finding and an attack scenario to show how the flaw could be leveraged.
While experimenting with his own Google Home mini speaker, the researcher discovered that new accounts added using the Google Home app could send commands to it remotely via the cloud API.
Using a Nmap scan, the researcher found the port for the local HTTP API of Google Home, so he set up a proxy to capture the encrypted HTTPS traffic, hoping to snatch the user authorization token.