Live data from Hacker News

Ask HN: Is anyone monitoring popular apps to check if they're listening?

news.ycombinator.com

1–10 of 101 posts

Ask HN: Is anyone monitoring popular apps to check if they're listening?

#1
Everyone's heard the conspiracy that Facebook and Instagram record audio from your phone's microphone and use it to recommend you advertising...

Is there any evidence of this? or are there any groups monitoring the appstore binaries to tell if they actually sending voice data over the wire?

Re: Ask HN: Is anyone monitoring popular apps to check if they're listening?

#4
Good question. iPhones tell you when applications access the mic or camera using an indicator light along the top, and I haven’t noticed unusual hardware access patterns from any of the popular apps that I use. But like most other users, I’m not always paying attention, and I don’t keep track of every access.

Re: Ask HN: Is anyone monitoring popular apps to check if they're listening?

#6
No, Facebook and Instagram are not monitoring conversations. Yes, many security researchers routinely examine traffic from these apps to see what’s being communicated with the servers.

Recording and interpreting speech would require a lot of CPU (if done on device) or network bandwidth (if uploaded to the cloud). Enough that it would be immediately obvious if apps were trying to do this.

That is, if they even could. iOS limits what apps can even do in the background and shows an icon when the microphone is in use in the background. Again, it would be obvious if apps were listening.

But let’s assume that somehow they managed to avoid all of these pitfalls and they were listening to conversations, performing speech to text, and uploading your conversations. This would require communication with their servers, which isn’t difficult to extract through basic reverse engineering. Many security researchers reverse engineer these communications on a regular basis to look for bugs, some of which can be worth six figures in these companies’ bounty programs. If there was an API for uploading your secret conversations, it would be the holy grail discovery for a security researcher. Someone would have found it.

The myth persists because coincidences will happen in high numbers at scale. If hundreds of millions of people are spending hours on social media each week, some number of them will see ads related to some conversation they had recently by pure random chance. Add in a general distrust for big tech companies right now and some subset of people will become convinced that their coincidences are evidence of a conspiracy.

Re: Ask HN: Is anyone monitoring popular apps to check if they're listening?

#9
If they are not actually listening, has someone mapped out how I get an ad related to a verbal conversation? What did they do to put the pieces together? I would imagine several different scenarios to get an actual match - but Ive wondered this at least a couple of times (too close a coincidence that is).
Post reply on HN