This is 100% the scenario I was just imagining.<p>Obviously this device has been designed to be a multi-time use device.<p>Amazon definitely do NOT have physical control over this box. They would need to do a complete low level reflash of every single bit of firmware on there, every time it came back. That&#x27;s not actually that inconceivable in a enterprise grade server, and I hope to see some interesting details about that.<p>But still... just imagine some of the fun HDD firmware hacks making their way onto this. Or NIC firmware. Or even just the embedded Kindle being rooted, and used to sniff out Wifi networks, report its location via 3G, etc.<p>Not to mention the obvious data recovery attacks if the disks have not been wiped to the highest levels.<p>I agree with parent comments, and assume Amazon would put this on its own untrusted VLAN when it comes back. But would they weight it first to see if any pwnies have been inserted into the box? Visually inspect inside to see if physical components have been removed to ensure the weight is actually the same, despite a pwnie inside?<p>I really hope Amazon put out advice to their customers on how to connect this - ideally it should just be on a point to point link to a sacrificial server containing the data.