Google Smart Speaker Wiretap Vulnerability, Researcher Earns $107,500 Reward

Interesting blog post about a guy researching the Google Home smart speaker and ending up with $100,000 from Google.

Now, in my natural habitat, I don't use this type of devices (surprise?), but wanted to share this because of interesting techniques, which may be used in the future in other contexts. Most interesting to me is the bypassing of the certificate, as the problems he had even with a rooted phone and added mitmproxy CA fails with pinned certificates.