In this week's roundup:
- Amazon plans on opening 3,000 cashless stores by 2021
- WD My Cloud security flaws
- Spotify will now let indie artists upload their own music
Amazon plans on opening 3,000 cashless stores by 2021
In the last few years, Amazon has been opening their own cashless stores. There are currently only a few in existence but the internet giant hopes to open 3,000 more of them before 2021.
When you walk into the shop all you need to do is scan a code on your phone and you can walk around and purchase whatever you want. When you're finished the shop, the purchases come off your Amazon account.
WD My Cloud security flaws
A major security flaw in the software of WD's My Cloud range could lead to the entire NAS being taken over by an attacker.
<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">I recorded a poc showing how a user’s browser can be abused to attack the <a href="https://twitter.com/hashtag/MyCloud?src=hash&ref_src=twsrc%5Etfw">#MyCloud</a> that is only accessible on the local network. It chains the privilege escalation with a post auth command injection to create a reverse shell. <a href="https://t.co/eTRtlIlVRN">pic.twitter.com/eTRtlIlVRN</a></p>— Remco Vermeulen (@RemcoVermeulen) <a href="https://twitter.com/RemcoVermeulen/status/1042187015712845825?ref_src=twsrc%5Etfw">September 18, 2018</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Security researcher Remco Vermeulen has also found other flaws on My Cloud devices. He notified WD of the issue a year ago but the company have still not been bothered to fix it.
Spotify will now let indie artists upload their own music
Spotify has now made it possible for indie artists to upload their own music to the platform.
A beta of Spotify for Artists will let indie artists upload their tracks. Artists will also be able to download a mobile app to keep on track of payments and statistics.