Live data from Hacker News

Amazon Sidewalk

amazon.com

681–687 of 687 posts

Re: Amazon Sidewalk

#681

So, if I buy a so called Smart-TV (not because I like it but because traditional ones are getting harder to find) but don't set up it on my home network so it can't phone home, it could scan around anyway and find other open devices more than willing to participate in my personal data exfiltration? If the Amazon project succeeds, I would expect in a few months most home devices manufacturers, to partner to implement…

Have a look at big "business monitors" like NEC E657Q [1]. I was able to find some 55, 65, 75" 4K monitors without smart functions. It is probably not THAT bad after all...

[1] https://www.nec-display.com/ap/en_display/e657q/index.html

Re: Amazon Sidewalk

#682

Earlier quoted context omitted.

I recently changed from 1 gbps fiber to mobile hotspot due to a remote work setup, and … blew through 30GB on the iOS 14.5 and MacOS patch day.* After that, the flagship Unlimited 5G Verizon hotspot is limited to 600 kbps up or down. (Granted, 600 kbps would have been amazing in 1997 so it’s a good reminder of the mess we web devs have made of bandwidth.) Presumably they’re figuring people with limited bandwidth don’…

I have heard these stories. Worst one, buying 4 hotspots and setting them all to the same ssid and pw, and each week, you only use one of the 4, power off the other 3. 4x transfer increase!

Parent comment is not kidding: it may be both the worst and best option.

Based on extended discussions with Verizon and T-Mobile management (office execs, not store reps or call reps), this appears to be the only reliable option available to a non-enterprise customer.

Well known flat rate unlimited rural internet resellers of "red", "pink", and "blue" categorically stop working after "abuse" with a threshold set below normal usage that would keep a family online despite software updates (even w/o streaming!).

As a large enough enterprise, I could buy a "data pool" for the firm to get zero rated no throttle for our device fleet. When you hear raves from colleagues about Verizon hotspots, they may be enjoying this -- I sure do for legit work use. But this isn't technically ethical for individuals, and the companies won't offer it to an LLC or S-Corp with just a few lines.

So, with VZ, for example, by getting 4 hotspots configured the same and putting them on rotation, you end up spending about the same per month ($240/mo) as an enterprise hotspot, to get sufficient capacity for normal household software and game updates.

Re: Amazon Sidewalk

#683

Earlier quoted context omitted.

Yes. But ONLY if the user VOLUNTARILY shares the footage on a per-incident basis. As the article says explicitly. Guess what? If the police come to my house and ask me for physical photos and I show them photos out of the kindness of my heart, that's without a warrant too. I'm under no obligation though, and neither is a Ring user. You're making it sound like police have access to footage without a user's consent, or…

From their privacy policy: We also may disclose personal information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) to establish, exercise or defend our legal rights; (3) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (4) in connection with an investigation of suspected or actual illegal activity;…

I'm not a lawyer so I'm not qualified to interpret what (4) means -- its legal purpose or ramifications.

But Amazon has explicitly and publicly stated they don't share Ring videos with law enforcement without user consent (at least not without a court order), and there have been zero news articles about them doing so.

So your insinuation that Amazon is handing police user videos without consent or warrants continues to be utterly unsubstantiated.

Re: Amazon Sidewalk

#684

Earlier quoted context omitted.

From their privacy policy: We also may disclose personal information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) to establish, exercise or defend our legal rights; (3) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (4) in connection with an investigation of suspected or actual illegal activity;…

I'm not a lawyer so I'm not qualified to interpret what (4) means -- its legal purpose or ramifications. But Amazon has explicitly and publicly stated they don't share Ring videos with law enforcement without user consent (at least not without a court order), and there have been zero news articles about them doing so. So your insinuation that Amazon is handing police user videos without consent or warrants continues…

It’s a privacy policy. They could get sued but no one is going to prison for “violating” it.

And I never said they’re actively doing it all over the place.

I said they could and be within the permissions they’ve given themselves.

Re: Amazon Sidewalk

#685
post #324

Earlier quoted context omitted.

Nope. Much more like this: You are legally obliged to install a smart meter, smart smoke detector and smart heating control in your home. If you rent, your landlord will install these things. If you own the authorities will inspect the presence and operation of these devices and fine you if you don't comply. All these devices will be offered by companies like amazon. Coincidentally, amazon lobbyists shape the laws th…

> You are legally obliged to install a smart meter, smart smoke detector and smart heating control in your home If that's all they do, what's the problem here? All three have big and direct positives for everyone ( you, your home, your community) - a smart heating control saves energy ( climate catastrophe incoming, so could be useful), a smart smoke detector can alert the fire department if smoke is ongoing for more…

What you are missing is the motivation of the seller. The company is not interested in making your house a safer place and helping you living your life. Instead they want your data. And they want your data to essentially extract more money from you. This setup sees you as an obstacle that needs to be overcome and it is just a short step to sell that data to a third party. And no one, repeat: absolutely fucking no one, that collects your data clandestinely is doing this because they think you would agree with their motives. In the end, they always want to get an advantage over you.

Re: Amazon Sidewalk

#686

Earlier quoted context omitted.

>And aren't more networks a good thing? No, the internet and mesh networks like these are both surveilance networks. Increasing the number of options availiable doesn't really do much if the end result is the same. So tell that to your folks. >Also, I'm not sure where people are getting that Amazon is bad at privacy I think you should forward all your emails, internet traffic, and transaction history to me. Also inst…

The internet isn't a "surveillance network". It's just a network. It's deceptive to just make up terms like that. Also, what on earth does email or internet traffic have to do with any of this? They use secure protocols in the first place, and they all already rely on large companies like Google and ISP's. And Amazon sure already knows everything I've bought on Amazon. So I have absolutely no idea what point you're t…

>The internet isn't a "surveillance network". It's just a network.

I posit that the internet is a surveillance network. Not only because its surveillance is a now primary function, but because it was always designed to be susceptible to various forms of surveillance.

It should be clear to programmers that the flaws in the internet and related protocols are numerous and tied to it's fundamental structure. This webpage discusses a number of them: https://secushare.org/broken-internet .

Additionally, the economic incentives adjacent to the internet and related protocols encourage the use of fingerprinting, as they don't otherwise have a means of dis-incentivising unwanted messages (this manifests itself in spam, denial-of-service attacks, botting, etc.)

>Also, what on earth does email or internet traffic have to do with any of this?

That paragraph was to make fun of the parent comment (crazygringo's) statement: "Also, I'm not sure where people are getting that Amazon is bad at privacy". the parent commenter seemed to suggest that it would be a good idea to share a dangerous amount of information with an organization like amazon simply because they are trustworthy (or rather, simply because they have not been proven to be untrustworthy) despite the fact that they have no incentive or regulation to prevent them from abusing that information in the future.

I joked that if crazygringo was so eager to share his personal information with third parties, then he should share his information with a stranger like me, as I've not yet been exposed for abusing my (non-existent) client's information.

>They use secure protocols in the first place, and they all already rely on large companies like Google and ISP's. And Amazon sure already knows everything I've bought on Amazon.

The fact that you would make a comment like this is unsettling. Think about what you are stating. Email is secure? Secure for whom? How does TLS prevent your email provider from reading your emails? How does it prevent the government from reading your emails? How does TLS help if connections can be downgraded to insecure and broken protocols? How does end-to-end encryption prevent attackers to see what you're doing when they need only know what domains you access? How does public key infrastructure prevent MITM attacks (Hint: it doesn't, it just outsources the problem to certificate authorities)?

The exploitation of the internet and related protocols is not some theoretical tsunami. It is a global flood that is occuring right now a million times a second under authoritatian regimes around the world.

I agree that many of these protocols already rely on large companies such as service providers; The fact that a transaction of information between two parties on the internet requres such a great number of arbitrarily powerful third parties is why we must dismantle the existing infrastructure (and replace it) in order to free ourselves (and future generations).

The age of blind trust will end one way or another.

Re: Amazon Sidewalk

#687
post #324

Earlier quoted context omitted.

> You are legally obliged to install a smart meter, smart smoke detector and smart heating control in your home If that's all they do, what's the problem here? All three have big and direct positives for everyone ( you, your home, your community) - a smart heating control saves energy ( climate catastrophe incoming, so could be useful), a smart smoke detector can alert the fire department if smoke is ongoing for more…

What you are missing is the motivation of the seller. The company is not interested in making your house a safer place and helping you living your life. Instead they want your data. And they want your data to essentially extract more money from you. This setup sees you as an obstacle that needs to be overcome and it is just a short step to sell that data to a third party. And no one, repeat: absolutely fucking no one…

And nobody is talking about a company, the whole premise was that there's a mandate to have a smart meter/smoke detector/etc.; if that were to happen, it isn't a company selling you something for their interest, it's a government telling you to get something for everyone's interest.

E.g. in France the smart electric meters are mandatory ( they don't belong to you but the utility in the first place), and are of a specific type that does nothing but collect electric consumption. I'm sure that if it were left to a private company there'd be a microphone or two just in case, but that really isn't the scenario we're talking about.

Post reply on HN