Live data from Hacker News

The Amazon Alexa Eavesdropping Nightmare Came True

gizmodo.com

1–10 of 11 posts

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#2
This is one of the real dangers of GDPR. If you make it really easy to download the entirety of someone's online life mistakes and fraud will occur where the wrong person receives it. This was probably some human error and not malicious but I will bet the malicious cases are coming (or are already occurring).

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#3
An important detail not directly addressed in the article (or I missed it) is do the audio recordings include conversations between Alexa commands? Or where the audio recordings specifically related to the human issuing commands to the device? Either way, it's a huge issue the data was leaked to the wrong customer.

I find it hard to believe this was a one-time mistake.

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#6
post #2

This is one of the real dangers of GDPR. If you make it really easy to download the entirety of someone's online life mistakes and fraud will occur where the wrong person receives it. This was probably some human error and not malicious but I will bet the malicious cases are coming (or are already occurring).

Really? I read this as the exact opposite. This is a huge benefit of GDPR because now companies' horrible internal privacy practices are being exposed.

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#7
post #2

This is one of the real dangers of GDPR. If you make it really easy to download the entirety of someone's online life mistakes and fraud will occur where the wrong person receives it. This was probably some human error and not malicious but I will bet the malicious cases are coming (or are already occurring).

GDPR is the only reason we now know how much data Amazon is keeping at the minimum, which apparently is quite a lot.

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#8
post #2

This is one of the real dangers of GDPR. If you make it really easy to download the entirety of someone's online life mistakes and fraud will occur where the wrong person receives it. This was probably some human error and not malicious but I will bet the malicious cases are coming (or are already occurring).

That's quite a spin on the story.

This is not one of the dangers of the GDPR, it's a danger of companies keeping sensitive user data with them forever when they clearly are incapable of being good stewards of it (and no, you don't deserve to be called good stewards if you have even one leak).

Perhaps, just perhaps, this will incentivize companies to have strict data expiry policies (at the very least), but I am not holding my breath.

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#9
post #4

Dupe: https://threatpost.com/amazon-1700-alexa-voice-recordings/14... Also, the original has a better title & discussion. This title is clickbaity.

Conversation: https://news.ycombinator.com/item?id=18727020

Ah right, that's the dupe link I meant to post for mods. Thanks!

Re: The Amazon Alexa Eavesdropping Nightmare Came True

#10
post #3

An important detail not directly addressed in the article (or I missed it) is do the audio recordings include conversations between Alexa commands? Or where the audio recordings specifically related to the human issuing commands to the device? Either way, it's a huge issue the data was leaked to the wrong customer. I find it hard to believe this was a one-time mistake.

Audio recordings are of the wake word and following command. The device has lights to indicate when it's listening/recording.
Post reply on HN