Is the intelligent sound box a eavesdropper? What did Amazon, Google, and apple do!

category:Internet
 Is the intelligent sound box a eavesdropper? What did Amazon, Google, and apple do!


[NetEase news April 22nd] Facebook has quietly shelved home audio products, like Amazons Echo, to be released in May to contain privacy scandals. The company believes it may not be the right time to release the product. It goes without saying that it is one thing to give your data to a technology company, and it is another thing to let one of its devices keep listening to your information. At present, there are three families of household smart speakers occupy the dominant position of the market. The three companies have a privacy trap - when you take a networked microphone connected to a computer and a speaker to take home, there must be a privacy trap - but none of the three companies will stand up to the two aspects of privacy and security. Are you sure you want to put the smart box at home? Last August, according to the journal, a security researcher found a vulnerability that could keep the Amazon Echo intelligent sound box that was produced before 2017. It could send all the information you heard to the remote server chosen by the hacker. Hackers have to handle this device personally for attack and cant be done by remote operations. Although new devices are not affected by hacker attacks, the old devices are still easily attacked. Last October, AndroidPolice, the author of the AndroidPolice website, received an old version of a defective Google family mini version, which activated thousands of times a day to record what it heard and send it to Google for processing. Google said its equipment sold to the public did not have the same defect. Although these problems have been solved, they remind us that equipment manufacturers will also make mistakes. Anything connected to the Internet can - or possibly - be hacked to some extent. If its just an ingenious smart coffee machine, the worst case is that the hacker will burn your morning coffee. But for hackers, a family speaker with a connected microphone is more attractive. If its manufacturer makes even the smallest security mistake, some people will find and make use of this kind of security mistake. Google Home and Amazon Echo intelligent sound box Of the three major companies that provide family speakers, Google probably knows their users best. If you use the default privacy settings for Google services, such as Google search, Gmail, Google maps, and Google calendars, Google will know your life and place of work; who you send, talk to, meet with, and what you like to search, and something else. This deep knowledge makes the Google assistant very useful, allowing it to make use of its information in the file to complete your request (Amazons Alexa can also be connected to Google services, such as calendars for similar functions), but this convenience is obtained by exchanging privacy. Google and Amazon label each instruction you send to smart speakers. When you communicate with a smart speaker, you will say its wake-up word Google or Alexa - and then ask it a question that records your voice to the server for processing. The three companies encrypt recordings, including encryption in the transmission process (when it moves on the Internet), and other processes (on a server rack). Google and Amazon link your recordings with your personal account, but Apple doesnt have a detailed introduction later. This means that all data about Amazon and Google is related to your user account. You can take a look at yourself: Googles my activity page allows you to replay all the recordings you have said to the Google assistant; the process of visiting the Amazon smart sound box is almost the same. You can delete these recordings, or the companies will keep these recordings forever, but they warn that it may make their devices fail to understand you better. These data enable Google and Amazons smart speakers to become useful tools. But it also means that if someone wants to know a lot about a persons information, such as government agencies, he can find all the information in one place. Last year, a prosecutor in Arkansas asked Amazon to get voice records from a Amazon Echo speaker owned by a murder suspect. Only after the wake-up word Alexa of the Echo intelligent sound box is called, the instructions sent to the smart box will be sent to the Amazons server, but these devices are famous for being accidentally activated when hearing a sound like a wake-up word (such as Tesla!). The company initially rejected the prosecutors request, but the defendant finally allowed Amazon to hand over the voice records. Echo seems to have found no record of guilt: these allegations were eventually rescinded. But when you ask them something, its not just the speaker manufacturer who collects information. To get the greatest gains from Echo or GoogleHome smart speakers, you might want to connect it to other companies services, using the Amazon s skills and Googles action services. This is what you do outside the ecosystem of every company, such as booking Uber or ordering pizza. Nevertheless, the cost of obtaining such convenience is your data. But a Wall Street Journal survey found that although technology makes it very convenient for you to meet friends, book pizza, and watch movies at home, it also costs you to pay privacy: in this case, the friend gave 53 personal information to different companies that night, of which 38 information was It is collected by the company in the background. Connecting family speakers with third party expansion applications may also be a potential solution. It is a third party test application that gets personal data from Facebook users and their friends and shares the data to a researcher at the Cambridge analysis company. For no reason, an unscrupulous developer cant provide a similar intrusion to a home speaker, Google and Amazon allow developers to create extensions for their home users, but the Echo smart speakers have been on the market for a long time, and the number of available plug-ins is much more. How does apple HomePod do it? Apple is the strangest company among the three companies: its HomePod provides the most private household speaker, but the cost is convenient. In addition to using HomePod to control Apple software or as the center of an automated home, you can also ask news, weather, or traffic - but there is nothing else. You cant install extensions like Echo or Google, so Apple completely controls where data flows. But the biggest privacy difference between HomePod and its competitors is not what it can or cant do - but how the HomePod connects directly with the apple server. Like other smart speakers, when HomePod hears a request, it sends it to the apple server to parse and implement it. However, unlike Google and Amazons smart speakers, the request is associated with the users account, HomePods request is anonymous, only bound to a random ID, like a Siri request on the iPhone, that the HomePod request will run on the apple server for 6 months, associated with a random ID, and then a year and a half away from random. Relationu3002 In contrast, Google and Amazon will only delete requests on the server when users delete requests. In the past few months, people have been complaining about a privacy issue of HomePod. That is, HomePod can meet personal needs, such as reading and sending text messages, or reading and creating notes. For those who live alone, or no secrets, this may be useful, but it may reveal the privacy of family members. But in addition, as long as the original user is at home, anyone can walk to the device and send an embarrassing message to his mother. Unlike Echo or GoogleHome, HomePod is unable to distinguish the voice of different users, so any persons request can be passed. But this is a relatively small privacy issue. Generally speaking, if you value privacy (and sound quality) rather than omniscient help, Apples HomePod should be your first choice. Siri is an alliance of its competitors, but at least it cant gossip. Whats the ad in your smart box? If the smart speaker is like a toaster, you just buy it once, and make it repeat the same thing until its damaged, this article is nothing to discuss. But people hope that as time goes on, their smart speakers can develop new functions, and companies that produce smart speakers also have the ability to change the way the smart speakers work at any time. In fact, thats why security researcher BruceSchneier has a very simple conclusion to the smart speakers: because their terms and conditions dont tell you what they want to do, they can change at will without your consent, and I wont believe any of them. However, if you are not a world-famous computer expert, you think the convenience of smart speakers is more important than privacy risks. It is worth considering the motives of these companies and speculate on how they will develop in the future. Although no one is willing to talk about how they plan to deal with your data in the future, we can make some guesses based on our current understanding of these companies. Googles parent company Alphabet, 84% of its revenue comes from advertising. So last year, users of some Google smart speakers received no surprises when they advertised the new version of beauty and beast movies. Google denied that the video played by Google assistant after summarizing the users one-day schedule was an advertisement. (the company said at the time that it was a timely content). A spokesman for Google said that although Google assistant has no advertising business at present, it may broadcast advertisements in the future. A Google spokesman said Google might use these interactive transcripts (non original audio) to put more useful advertisements on other platforms. Amazons business model is less dependent on advertising, but in January of this year, CNBC reported that Amazon was considering advertising on Alexa. At the time, Amazon denied the report, and a spokesman told me that the company did not launch an advertising plan to Alexa, nor did it use voice records for product recommendations. For apple, it is not as interested in the data of its users as its competitors. On the contrary, its main business is selling equipment and cloud services. These three smart speakers are not completely private disasters, but none of them is perfect. If privacy and safety are most important to you, and you are willing to spend $349 to buy smart speakers, you should choose Homepod. If you are willing to share more of your own information to the business, although the enterprise may already know a lot of your information for a smarter aide, Echo or Google Home is the best choice, and the choice depends on which business you use more. Or for safety reasons, you can choose not to use these smart speakers. When they are attacked by hackers, you will rejoice in your decision. (selected from: NYMag compilation: NetEase intelligence participation: Rosie) concerned with the NetEase intelligent public number (smartman163) for you to interpret the big events in the AI field, new ideas and new applications. Source: NetEase intelligent editor: Ding Guang Sheng _NT1941 If you are willing to share more of your own information to the business, although the enterprise may already know a lot of your information for a smarter aide, Echo or Google Home is the best choice, and the choice depends on which business you use more. Or for safety reasons, you can choose not to use these smart speakers. When they are attacked by hackers, you will rejoice in your decision. (selected from: NYMag compilation: NetEase intelligent participation: Rosie) Pay attention to NetEase intelligent public address (smartman163), to interpret the big events, new ideas and new applications of large companies in AI field.