Live data from Hacker News

Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

threatpost.com

181–190 of 424 posts

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#181

This is just facebook all over again. Why can't people see trouble-tech? I never used facebook and won't ever use an alexa, nor whatever google's thing is.

The thing is that for most people avoiding this kind of tech and platforms is unlikely to have any kind of payoff for them. Life is too short. Most peoples lives are as simple as going to school and work, raising a family, taking vacations, paying bills, and then passing away. There will never be a moment where they can say “ Yes! My avoidance of Facebook and Alexa for all my life has finally paid off! Hahaha! ” The…

[deleted]

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#182
post #138
post #17

I am baffled by how many people have no problems adding always listening and recording Google and Facebook devices to their living rooms. Some are considered tech people who should know stuff like this could happen, but they just don't care or don't think it will happen to them. Somewhere there is an ex-Stasi officer who is thinking "I wish we were that good and had people fooled to voluntarily install listening devi…

I've made a fairly well-considered decision to use most of these new services. I keep virtually all of my content on services run by five major corporations because I'd rather have my entire phone's photos published on the front page of the Washington Post than lose all the photos of my kids. I'd rather have Jeff Bezos listening to everything happening in my house than have the more frequent trips to the grocery stor…

And you're not the only one. Outside of HN, in the real world, the average person doesn't set up a FreeNAS server or homelab for data storage, doesn't know how to do backups, and doesn't have nearly as much concern over privacy as the fear mongers here at HN, Reddit, and tech publications.

Fear mongering is nothing new, folks. The media is incentivized to cater to people in that way; this is why they use scare tactics and write BS articles like this one which boil down to "someone fucked up, sent the data for one customer to another customer". Furthermore, the article implies this mixup would NEVER have happened if the user's had not requested their data be released per GPDR.

The only valid question worth asking is this: are you willing to risk ANY chance of your data being compromised? Google/Apple/et.al. are not the enemy. For most users, convenience trumps security, and they will accept the minimal risk that comes with using services like Alexa and Google Photos.

FWIW, I've lost years of photos and data before on my first run-a-round with FreeNAS. It's not something that's just easy for the average user or even average developer to use and deploy reliably. I'm trying FreeNAS again now 4 years later, but it's taken way more work than I expected to understand my options and ZFS, and I'm still not sure I'll ever store anything critical on it.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#183

Earlier quoted context omitted.

Steve was not thinking this through. I can batch compress chunks of audio and lazy upload them when I think nobody is around. A listening device could probably even guess when you are not going to be using your internet connection.

You can filter the captured traffic for anything coming from Alexa's IP or mac, or transmitting to any amazon-owned server.

Sure, but you wont know what it is or why it is.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#184

Earlier quoted context omitted.

Steve Gibson did a wireshark investigation of an Alexa, it is NOT always transmitting. Your assertion that "nobody can prove that" is rather absurd.

there's nothing stopping from Alexa recording content locally and transmitting it with a traditional request once activated. Also, there's no reason for Amazon to want a constant stream of Alexa data hitting their cloud services. The goal is to mine and extract valuable data about users to build profiles, ideally you'd want to do that on-device and send up the most valuable bits. These are also capabilities they can…

They can not silently introduce new hardware to these devices. You should look into what kind of hardware these devices actually contain. Try to set up an intelligent, personalized data miner with those constraints.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#185

Earlier quoted context omitted.

Audits of controls are about ensuring the longevity of the business. They are entirely orthogonal to ethics or business models. And yes, I am proudly paranoid. History and experience have confirmed the need for my paranoia for many decades.

> Audits of controls are about ensuring the longevity of the business. You must not have suffered a SOX audit before. Part of the audit is technical. Also, the SEC greatly frowns upon lying about your business.

I have suffered every kind of audit, many times. I know of many technical facets of every business I worked for that would never have been a part of any of those audits.

Do you know of any published Amazon audits that describe in detail what specifically around Alexa is audited, if anything?

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#186
post #104

I've never seen a demographic breakdown of HN, but I'm 37 years old. I'm definitely not the oldest guy here, but I see history repeat itself regularly. I remember when people used location tracking as a reason to not own a cell phone. I'm talking about flip phones, mind you, not even iPhones with GPS receivers. I recall the bulk of complaints in that vein died down around the time Google Maps for phones came out. If…

I am in my 30s too, and I remember reading articles saying that DHS had hundreds of thousands of hours of wiretapped conversations they would never get to because they all needed to be manually reviewed.

When the company selling a suspiciously cheap home speaker ('stocking stuffer') is the same company that boasts of having infinitely scalable computing ability and is the only cloud vendor that meets the Pentagon's procurement requirements, people are justified in thinking that Amazon's ambitions go beyond 'making it easier to order online'.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#187

Is there a good non-internet connected device for turning on lights with your voice?

I asked this the last time one of these posts came up and everyone suggested I check out https://www.home-assistant.io/ I haven't started building anything yet but I will in the new year (fingers crossed).

If you do use Home Assistant, you may be interested in Rhasspy: https://github.com/synesthesiam/rhasspy-hassio-addon

This is an external service I wrote that does offline speech/intent recognition with pocketsphinx, and forwards structured JSON events into Home Assistant for use in automation scripts.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#188

Earlier quoted context omitted.

there's nothing stopping from Alexa recording content locally and transmitting it with a traditional request once activated. Also, there's no reason for Amazon to want a constant stream of Alexa data hitting their cloud services. The goal is to mine and extract valuable data about users to build profiles, ideally you'd want to do that on-device and send up the most valuable bits. These are also capabilities they can…

Except, you know, memory - of which these devices don't have a ton.

You can store around 1000 hours of recorded speech in a gigabyte of flash memory that costs $0.25. For most people, that could hold their entire conversational activity for a year. Storage and off-line upload (perhaps during a software update when packets are flying around anyway) isn't difficult.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#189
post #104

I've never seen a demographic breakdown of HN, but I'm 37 years old. I'm definitely not the oldest guy here, but I see history repeat itself regularly. I remember when people used location tracking as a reason to not own a cell phone. I'm talking about flip phones, mind you, not even iPhones with GPS receivers. I recall the bulk of complaints in that vein died down around the time Google Maps for phones came out. If…

New technology is scary, old is not. With the third party doctrine the only way to really protect yourself is to not participate in modern society in any way.

Re: Amazon Sends 1,700 Alexa Voice Recordings to a Random Person

#190
post #24

Earlier quoted context omitted.

The only company I've seen take demonstrable action to protect their customer's privacy is Apple. Google, Facebook, Microsoft, Amazon have never given me a single reason to trust that they have my privacy concerns on their mind.

>The only company I've seen take demonstrable action to protect their customer's privacy is Apple. The same Apple that gave the Chinese government access to all their Chinese user's iCloud data? https://techcrunch.com/2018/07/17/apples-icloud-user-data-in...

This is false. iCloud data doesn't contain phone call contents or iMessage data contents. Yes they gave access to metadata, but this is China where privacy basically doesn't exist, not a western country.
Post reply on HN