Alexa and Google Home abused to eavesdrop and phish passwords

Amazon- and Google-approved apps turned both voice-controlled devices into “smart spies.”

Altered image shows human ears sprouting from Amazon device.

Enlarge (credit: Aurich Lawson / Amazon)

By now, the privacy threats posed by Amazon Alexa and Google Home are common knowledge. Workers for both companies routinely listen to audio of users—recordings of which can be kept forever—and the sounds the devices capture can be used in criminal trials.

Now, there's a new concern: malicious apps developed by third parties and hosted by Amazon or Google. The threat isn't just theoretical. Whitehat hackers at Germany's Security Research Labs developed eight apps—four Alexa "skills" and four Google Home "actions"—that all passed Amazon or Google security-vetting processes. The skills or actions posed as simple apps for checking horoscopes, with the exception of one, which masqueraded as a random-number generator. Behind the scenes, these "smart spies," as the researchers call them, surreptitiously eavesdropped on users and phished for their passwords.

"It was always clear that those voice assistants have privacy implications—with Google and Amazon receiving your speech, and this possibly being triggered on accident sometimes," Fabian Bräunlein, senior security consultant at SRLabs, told me. "We now show that, not only the manufacturers, but... also hackers can abuse those voice assistants to intrude on someone's privacy."

Read 13 remaining paragraphs | Comments

Mailchimp Kicks Out TorrentFreak Because We’re ‘Too Risky’

After years of news reporting on copyright issues, we have learned that piracy is not without risk. However, writing about it also has its challenges. A few days ago, our newsletter provider MailChimp kicked us out because our content is too risky for its business. Apparently, overactive spam filters don’t really like the topics we cover.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

At TorrentFreak, we have covered the latest news surrounding piracy, file-sharing, and copyright, for almost fourteen years.

As a news site, we strive to write as any other professional journalists would. We highlight the latest copyright enforcement efforts and press releases, but also the counteractions that pirates take, as balanced reporting prescribes.

While we understand that some of the topics we cover are controversial, as is often the case with news, we never expected it to be risky. Apparently, however, some companies believe otherwise.

A few months ago we moved our newsletter to Mailchimp, which is widely regarded as one of the best services of its kind. And indeed, setting up the account and configuring our daily mailing was a breeze. As such, we were more than happy to pay the monthly fee.

Although we were pleased with Mailchimp, Mailchimp wasn’t too happy with us. Out of the blue, the company decided to stop sending out the daily email campaign a few days ago. As it turned out, our account had been suspended as the result of an “acceptable use” violation.

Apparently, one of our recent articles triggered MailChimp’s abuse prevention system, Omnivore. Since we’re a legitimate news site we asked for clarification, but we were swiftly informed that it wasn’t a false positive.

“Our automated abuse-prevention system, Omnivore, detected account content that violates our Acceptable Use Policy,” a MailChimp employee replied.

“We have nothing personal against you or your business, but in order to protect all of our users and ensure the deliverability of everyone’s campaigns, we have to ask that you seek a new vendor for your email marketing needs.”

This explanation still didn’t say much about the reason for the suspension, so we asked for further clarification and the possibility of a human review. Specifically, we wanted to know what part of the acceptable use policy was violated and why.

Although MailChimp replied, our questions remained unanswered. What we did learn, however, is that our articles are too risky for a company like MailChimp.

“Unfortunately, the risk associated with your account is too great for us to continue to support,” MailChimp replied.

“To give you some background, internet service providers (ISPs) and spam filters strictly monitor the content and keywords used in bulk email, and can block all mail sent through our servers if they detect a problem,” the email added.

Unsatisfied with this answer, we decided to try again and asked whether the topics we write about are a problem, but that request remained unanswered.

While we are baffled by the entire experience and MailChimp’s lack of specificity, we have some sympathy for their actions. They obviously don’t want to kick out a paying subscriber, unless it indeed poses some kind of threat.

What’s really to blame here are the automated filters from ISPs and anti-spam outfits that wrongly tag certain content as problematic. Too many piracy-related keywords, which is what you would find on a piracy-related news site like ours, can apparently get entire servers blocked.

This is the same reason why many automated filters have our site blocked under the ‘piracy’ category, or even hacking and criminal skills.

Unfortunately, this means that we’re now looking for a good newsletter service, ideally, one that works with RSS feeds. If anybody has a suggestion, feel free to drop us a line. Meanwhile, MailChimp subscribers can use our Feedburner newsletter for now, which is still operational.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Accessibility, the future, and why Domino’s matters

Is the Web subject to the ADA? “Of course,” says congressman who wrote the ADA.

A pizza-delivering robot with a Domino's logo.

Technology is changing the way we interact with companies like Domino's, for sure. (credit: Domino's)

The US Supreme Court last week formally declined to weigh in on an argument that the Americans with Disabilities Act should not apply to websites and digital storefronts, leaving intact a lower ruling finding that the ADA does, indeed, apply to digital space. Internet and Web users with disabilities, as well as advocates for accessible design, are breathing a sigh of relief.

Accessibility in the digital space has come a great distance in a relatively short time, in many ways opening up the entire digital economy of the 21st century to millions of users. But the fact that one company—Domino's Pizza—could try taking a case for not making its services accessible to the highest court in 2019 makes clear how much work there is left to do to make the online world equitable, both today and in the future.

So although the Domino's case has run out of road, the questions it raises still remain: where does the connected world stand today in terms of accessibility? What does the future look like? Why is the law still unclear on all of this? And what's at stake for any future Domino's followers?

Read 81 remaining paragraphs | Comments

Streaming: Apple und Netflix aus Auktion um South Park ausgestiegen

Insidern zufolge könnte der Bieterwettstreit um die Streaming-Rechte der Zeichentrickserie South Park bis zu 500 Millionen US-Dollar erreichen. Netflix soll sein Angebot bereits zurückgezogen haben. Auch Apple will wohl nicht mitbieten – was am jüngste…

Insidern zufolge könnte der Bieterwettstreit um die Streaming-Rechte der Zeichentrickserie South Park bis zu 500 Millionen US-Dollar erreichen. Netflix soll sein Angebot bereits zurückgezogen haben. Auch Apple will wohl nicht mitbieten - was am jüngsten Verbot der Sendung in China liegen soll. (South Park, Apple)

Neurons hide their memories in their imaginary fluctuations

Noisy brain hides memory-like structures in the noise.

This is your brain. Well, not <em>your</em> brain. Presumably your brain isn't being photographed at this moment.

Enlarge / This is your brain. Well, not your brain. Presumably your brain isn't being photographed at this moment. (credit: Adeel Anwar / Flickr)

The brain is, at least to me, an enigma wrapped in a mystery. People who are smarter than me—a list that encompasses most humans, dogs, and possibly some species of yeast—have worked out many aspects of the brain. But some seemingly basic things, like how we remember, are still understood only at a very vague level. Now, by investigating a mathematical model of neural activity, researchers have found another possible mechanism to store and recall memories.

We know in detail how neurons function. Neurotransmitters, synapses firing, excitation, and suppression are all textbook knowledge. Indeed, we've abstracted these ideas to create blackbox algorithms to help us ruin people's lives by performing real-world tasks.

We also understand the brain at a higher, more structural, level: we know which bits of the brain are involved in processing different tasks. The vision system, for instance is mapped out in exquisite detail. Yet the intermediate level in between these two areas remains frustratingly vague. We know that a set of neurons might be involved in identifying vertical lines in our visual field, but we don't really understand how that recognition occurs.

Read 15 remaining paragraphs | Comments

Google: Vorabwiderspruch bei Street View wird überprüft

Googles Street View ist in Deutschland bisher kaum verfügbar, das Bildmaterial ist veraltet und Häuser sind oft verpixelt. Grund ist der Vorabwiderspruch gegen die Anzeige von Häusern, den viele Besitzer in Anspruch nahmen. Google lässt nun prüfen, ob …

Googles Street View ist in Deutschland bisher kaum verfügbar, das Bildmaterial ist veraltet und Häuser sind oft verpixelt. Grund ist der Vorabwiderspruch gegen die Anzeige von Häusern, den viele Besitzer in Anspruch nahmen. Google lässt nun prüfen, ob neue Aufnahmen ohne Vorabwiderspruch möglich sind. (Google Street View, Google)

Datenschutz: Zahl der Behördenzugriffe auf Konten steigt

Behörden in Deutschland haben im bisherigen Jahresverlauf häufiger auf Konten von Bürgern zugegriffen als im Vorjahreszeitraum. Dem Bundesdatenschutzbeauftragten gefällt das nicht – er fordert eine Überprüfung der rechtlichen Grundlage. (Datenschutz, I…

Behörden in Deutschland haben im bisherigen Jahresverlauf häufiger auf Konten von Bürgern zugegriffen als im Vorjahreszeitraum. Dem Bundesdatenschutzbeauftragten gefällt das nicht - er fordert eine Überprüfung der rechtlichen Grundlage. (Datenschutz, Internet)

E-Scooter: Leih-Tretroller sollen auch im Winter in Berlin fahren

Seit Juni 2019 sind E-Scooter auf deutschen Straßen erlaubt, seitdem sind in einer Reihe von Städten Leihangebote gestartet. Nun geht es für die Anbieter in die erste Wintersaison: In Berlin wollen sie das Angebot fortsetzen – doch Einschränkungen beha…

Seit Juni 2019 sind E-Scooter auf deutschen Straßen erlaubt, seitdem sind in einer Reihe von Städten Leihangebote gestartet. Nun geht es für die Anbieter in die erste Wintersaison: In Berlin wollen sie das Angebot fortsetzen - doch Einschränkungen behalten sie sich vor. (E-Scooter, Deutsche Bahn)

How meme culture changed the PSAT

Stopping the proliferation of test-related memes with… more memes?

How meme culture changed the PSAT

Enlarge (credit: Caiaimage/Paul Bradbury/Getty)

Thank you for coming and welcome to the College Board’s Preliminary SAT and National Merit Scholarship Qualifying Test, the internet age edition. You must bring two No. 2 pencils, a photo ID, and an approved calculator. You must not smuggle in a protractor, or scarf down a sandwich, or post memes on Twitter that reveal test content. No, really: The penalty for such illicit memes could be the cancellation of your test score. And now, an inspiring message from Youth Icon, former boy band member, and British person Harry Styles:

All over the US, high school juniors and sophomores are now taking the PSAT, which has been the norm for the past half-century. The contemporary trouble for test administrator the College Board is that the test’s ubiquity, the age of participants, and the high emotional stakes these days make the details of the exam guaranteed meme fodder—and, well, standardized tests are standardized. Posting memes about them could lead to teens getting hints about their contents. So the organization has taken to Twitter to try to salvage some semblance of their normal testing conditions. Teens are, as always, unimpressed.

The College Board has been on meme watch for years. The earliest signs of PSAT meme movements likely date back to 2014, when users on subreddit r/teenagers decided to “illegally discuss the PSAT,” and others took to Twitter and Tumblr to post their own reactions to test questions. The College Board has made it clear that it disapproves, sometimes posting stern messages warning test takers about the potential consequences and making frequent requests for students to delete tweets pertaining to the test.

Read 5 remaining paragraphs | Comments