This week the NSA and 17 allied agencies repeated a blunt instruction: turn off Cisco's Smart Install feature on all network devices, because a nation-state is using it to take over the routers and switches the internet runs on. Here's the part nobody says out loud — when you use a cloud AI, your private words travel across exactly that gear.
severity of the network-device flaw the NSA wants disabled (CVE-2018-0171)
network devices the advisory says to disable the feature on
of your words that cross the network when Aura thinks on-device
The NSA, with 17 allied agencies, reissued a blunt piece of guidance this week: disable Cisco's Smart Install feature on all network devices. The flaw behind it, CVE-2018-0171, is rated 9.8 out of 10 — an unauthenticated attacker reaching TCP port 4786 can reload the device, rewrite its configuration, or run code on it. The advisory ties the campaign to Russia's FSB 'Center 16,' which has been quietly targeting the routers and switches that carry the internet's traffic. The fixes — kill Smart Install, block TFTP and SNMP at the firewall, move to SNMPv3 — are all about the plumbing your data passes through, not the apps you actually use.
Here's the connection nobody draws for you: that plumbing is the path every cloud request takes. When a voice assistant ships your words to a datacenter to understand them, they cross gear exactly like this on the way out and back. The reason your data is on the wire at all is that the intelligence lives somewhere else. Harden every router you own and you've still handed your sentence to a dozen devices you'll never see, on a journey you can't audit. The vulnerability isn't only in a specific switch — it's in the decision to send private things across the network to be processed.
The NSA and 17 allied agencies told organizations to disable Cisco Smart Install on all network devices — a 9.8-rated flaw (CVE-2018-0171) that nation-state actors use to take over routers and switches.
That's the same infrastructure your data crosses to reach a cloud AI. Remote intelligence is the reason your private words ride the wire — and the wire is what the NSA is warning about.
Run the intelligence on the device in the room. If your words are never sent across the network to be understood, a 9.8 in a router somewhere isn't a 9.8 in your living room.
Privacy and resilience are the same decision one more time. The less of your private thought that has to travel across the network to be useful, the less of it is exposed when that network is — as the NSA keeps reminding everyone — a standing target.
On-device.
Aura runs the intelligence on the device in the room. Your voice and your words are understood locally — they aren't packaged up and sent across routers and switches to a datacenter and back. There's no round trip to intercept, and nothing on the wire to protect, because nothing of yours is on it.
Know someone who should see this? Send it to them.