Comment by craig1f | Hacker News Reader

Comment by craig1f | Hacker News Reader

Parent Full thread

I think like, with most things, it's all about the tradeoff.

I have one in my house in the living room. It basically exists to have an easy way of turning on Spotify. We don't have sensitive conversations in the living room. If someone were listening, they'd mostly get me scolding my children and asking what's for dinner. The might also steal a token to connect to Spotify. My AWS account isn't linked to the same account as my Alexa, and requires TFA, so that's safe.

I wouldn't put this device in my bedroom. I also was less interested when my kids were young enough that I might actually have a sensitive conversation anywhere. I'd considered putting one in my tv room to control the tv, but that's about it.

I don't regard the Alexa as a greater vulnerability to my house than my phone, and I already accept owning a smart phone. I am concerned about the same things you are, but I view it as more of a trade-off than a simple "just don't do it!" attitude.

> We don't have sensitive conversations in the living room

Wow. That seems like an amazing commitment. Do you have a SCIF where you discuss your bank statement with your SO?

Given the Equifax leaks, you might reconsider if your bank statements aren't reasonably public information.

Depending on who's listening (post-processing recordings in bulk) and your tone, scolding your children might get you a visit from the authorities if over-eager busibodies are listening.

Do we really need more of that?

Do you really think that's even in the realm of possibility? There is so much paranoia-driven FUD in these comments.

But let's say that yes, this absurd hypothetical is possible and happens.

Someone is capturing full audio from your device even though it allegedly only transmits when certain phrases are used (e.g., "Alexa..."). They've tunneled through your modem, router and AP and are capturing directly from your device.

That same someone is somehow able to process hours of ambient sounds, conversations and everything else to pick out someone using an inappropriate tone with their children.

They then take these recordings to a local child protection agency (e.g., CPS) and present the audio along with your information to develop an actionable case against you.

That child protection agency then decides your tone was strong enough that they need to pursue legal action.

How does this hold up in court? How does illegally-obtained audio stand as evidence? How are they able to prove it was you and not a relative or visitor?

It won't hold up; this is insane. Your point about the wrong tone being used against you is insane. I get being paranoid and not trusting these devices but get real!

> Someone is capturing full audio from your device even though it allegedly only transmits when certain phrases are used (e.g., "Alexa..."). They've tunneled through your modem, router and AP and are capturing directly from your device.

That's a ridiculous scenario.

How about, "Alexa itself transmits to the cloud. 10 years from now, a scanning service post-processes recordings using sentiment analysis and emotional state tracking now required by the new administration. State regulators have determined that parents should not talk to children in tones that fall into $this_band$. Regulations make Amazon responsible to report this to the authorities or face financial penalties."

Today, folks are being deported from this country after living here for a decade under the Dream Act. So, no, I don't put much stock in your assertion that things won't be applied retroactively or used to "forecast outcomes".

> Someone is capturing full audio from your device even though it allegedly only transmits when certain phrases are used (e.g., "Alexa..."). They've tunneled through your modem, router and AP and are capturing directly from your device.

It's not remotely out of line to discuss the implications of hijacking an Alexa in a discussion thread on an article that describes exactly how to hijack an Alexa. You don't have to sound incredulous about that part...

You're picking a piece out of my full response and adding context I didn't provide. I said the overall statement was absurd, not that capturing audio was.

And you've advanced an over-engineered scenario as a counter-argument to my observation. I think you can cut this guy some slack.

His point was, if you're hijacking an Alexa, those recordings are now illicit and not submissible in court.

Look at what prosecutors do today with internet history. They search through whatever they can find in the browser history of a supposedly guilty suspect, cherry pick anything remotely incriminating, and use it completely out of context to support whatever case they are trying to build. I don’t think it’s one bit far fetched or paranoid to see something similar happening if they could ever get access to a suspects indexed conversations.

You'd be surprised how crazy CPS is if you aren't wealthy and white. They don't actually seem to even need any "evidence" really.

I agree it seems unlikely, though, especially if you are relatively wealthy and white. (Also who is hacking into your system with this as their goal and how likely is that? On the other hand, in the age of swatting, anything seems possible.)

As we continue to advance universal surveillance though (self- and other-), I think we will start to see stuff like this happening more. It'll take a little while.

> You'd be surprised how crazy CPS is if you aren't wealthy and white. They don't actually seem to even need any "evidence" really.

For example (white, but not wealthy): https://www.usatoday.com/story/news/nation/2015/04/13/parent...

> Montgomery County police and county Children's Protective Services are jointly investigating the Meitivs of Silver Spring for allowing their children to walk repeatedly around the neighborhood alone. The parents say they know where their children are but are allowing them independence.

> Officers picked up the children about two blocks from home, Rafi said, telling them they would drop them off at home. Instead, the two sat in a patrol car for 2½ hours then were taken about 10 miles away to Children's Protective Services offices in Rockville, Md.

> You'd be surprised how crazy CPS is if you aren't wealthy and white.

When people say they have nothing to hide, they're also saying they have no abuse of power to confront, and nobody who is persecuted to stand with in solidarity. And for some reason, they think they're the standard, or that any of this is new. Look into history, with any totalitarian government, any oppressive king, you'll always find people going "doesn't affect me". It's as old, and as valuable, as dirt.

>You'd be surprised how crazy CPS is if you aren't wealthy and white.

Even then, I have some relatives (white and middle-class) that lived in an apartment. The people on the other side of the wall reported them for yelling at their kids. Fortunately for them they had a friend at the CPS who called them and told them that CPS was coming the next morning to take away their kids. So they packed up and moved out of state that night.

Yeah, good point, it's not limited to the white and not wealthy, but like everything else in society, the more resources you got, the more you can avoid them (and being white is indeed a resource in our society). But yeah, CPS is scary shit.

You have no experience with CPS, do you? There is no court involved at the beginning. They can just take your children away on their say so. Afterwards you will have to go though the courts to get them back.

I consider that a feature, not a bug - if mining data from always-on devices protected kids who were actually being abused, that would be a win. False positives can be tuned out.

> False positives can be tuned out.

oh-you.jpg

https://en.wikipedia.org/wiki/McMartin_preschool_trial

I fail to see the connection. If Amazon began to analyze recordings to try and find real or even misconstrued abuse (presumably only after legislation required them to - I can't see a business case), they'd reasonably need to adjust what their algo flagged as a match. I'd be curious if Echo (or gHome, or Siri) do any sentiment analysis right now, they don't seem to (or cursing when they botch your command would at least produce more contrition).

Nobody knew what Google was doing for two years.

https://www.wired.com/2012/05/google-wifi-fcc-investigation/

So, yeah, these appliances could be doing anything at any future point due to remote updates.

Reply on news.ycombinator.com