Hot answers tagged

5

As you noticed, Alexa could record all the time and send it only after you say the wake word. You could notice it by larger upload size. But at the same time Alexa could analyse the recordings and only send interesting parts like when you mention the word "bomb" which reduces the upload size so you would only notice it if you look at the traffic in a very ...


5

An AWS Account ID can be shared, when required. Like the documentation says, the main thing anyone can use your AWS Account Number for is to construct ARN's. For example, if I had an AWS Account which held an AWS Lambda function, and someone on another account, who I had explicitly granted permission to, wanted to manipulate it, they would use by account ...


3

If you have a device in your room which can record data and which from time to time sends data to some server on the internet there don't need to be any kind of relationship when the device records data and when it communicates with the internet. It is perfectly possible that the device records data and only transmits these data later, maybe even only when ...


3

https://support.mozilla.org's certificate is signed by the Amazon Certificate Authority, Amazon Trust Services. This is widely considered a trustworthy third party for signing certificates, and your browser is apparently configured to trust certificates signed by Amazon Trust Services without prompting you. There are many Certificate Authorities in the ...


2

The confusion you are facing is that Amazon & RedHat back port fixes into their known stable branch, this is to say that gnupg2-2.0.28-2.32 Really indicates gnupg2 core version 2.0.28 with revisions 2.32; If I am understanding your question correctly, you should run: rpm -q gnupg2-2.0.28-2.32 --changelog and inspect the changelog to ensure the ...


1

This allowed other people in the house to watch prime videos ... My main concern is that this is a security issue on shared computers. Let me rephrase this a bit differently: You like the behavior that the authentication is kept over browser close, since it allows you to share your computer with others so that they can watch video with your account. You ...


1

TL;DR - There was a Network Load Balancer (NLB) in the private subnet in front of the host in the private network. That NLB had a public IP. When there is a Public IP associated to the network interface, traffic from the client public IP (source) will reach the ENI provided the security group and ACL allows the traffic to come in, regardless of whether ...


1

Two options come immediately to mind - Exfiltration You can learn more by Googling 'sql injection exfiltration', but generally, this involves using SQL primitives that make DNS lookups or HTTP connections. You can build a query that selects data from a table and injects it into a host lookup to a domain that you control; then your DNS server will see the ...


Only top voted, non community-wiki answers of a minimum length are eligible