this post was submitted on 14 Sep 2023
60 points (96.9% liked)

Privacy

31876 readers
567 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

My girlfriend gave me an Alexa assistant as a gift with all good will, since she knows I like technology. I know in terms of privacy it is garbage, however I wonder if there is a safe way to use some functions of this device, perhaps without internet. Some way to hack it or something, do you guys know something about this?

all 18 comments
sorted by: hot top controversial new old
[–] [email protected] 23 points 1 year ago* (last edited 1 year ago) (1 children)
[–] [email protected] 19 points 1 year ago (2 children)

Mycroft the company went bust. Not sure if you'd still want to do this with unmaintained software.

[–] [email protected] 13 points 1 year ago

You don’t. I did a project involving Mycroft and, while functional, it was awful. Not worth any of the hassle.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (1 children)

Sad. I did not know that.

Although, to be honest, I was sort of expecting it would happen sooner or later. It did not look like the product was ready for mainstream users yet, and the devices at that price must have been tough to sell.

For anyone curious, this message from the CEO has more details: https://web.archive.org/web/20230822232437/https://mycroft.ai/blog/update-from-the-ceo-part-1/

[–] [email protected] 1 points 1 year ago

Yeah, the yrice was a lot higher than anyone was expecting, and they changed the design to make them a lot uglier.

Plus they wasted their cash with legal costs fighting patent trolls.

[–] [email protected] 15 points 1 year ago* (last edited 1 year ago) (1 children)

I had a google thing which I used as a speaker for a bit. If it has Bluetooth, you could just not let it connect to the internet? As an assistant I found it useless, even without privacy concerns, but as a speaker it was alright.

It's nice that you are trying to find a use for it though! Hopefully it works out long term and you could talk about it the privacy stuff before you get a Facebook Portal next

[–] [email protected] -1 points 1 year ago (1 children)

usually the alexa things do not have Bluetooth and can't play audio from another device

[–] [email protected] 3 points 1 year ago (1 children)

What are you talking about? All Alexa Speakers I own or have encountered support bluetooth playback from other devices just fine, and at least the older ones also have a 3.5mm jack.

[–] [email protected] -1 points 1 year ago (1 children)

sorry maybe i confused echo dot devices with alexa speakers?

i only ever encountered echo dots and they can't play over Bluetooth

[–] [email protected] 4 points 1 year ago

Echo dots can also play over Bluetooth.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

EDIT: I misread. I don't know what an Amazon assistant is. I'm talking about an Amazon echo below

I have one at a cabin in the mountains that has no internet or cell service. It required internet access to sync/auth with my phone so I did it at home then moved it to the cabin. I think it needed to be auth'd to an Amazon account, despite never planning or wanting to use it with an account. It was a "prize" from work.

It is literally impossible for it to connect to the internet at its location but it is a pretty good speaker. Perhaps the loneliest IoT device ever, but I'd never use it in a connected state.

If you only want it for a speaker, you could wall it off to prevent Internet access even at home

[–] [email protected] 4 points 1 year ago (2 children)

Alexa devices aren't great for privacy, but they're not nearly as bad as people like to think. They're surely not as bad as your phone, especially if you're not installing a bunch of skills.

They don't send any data out unless they're activated with the wake word. Alternatively, that means everything you say after that wake word is being recorded and sent to Amazon and who knows who else after that. By far the biggest privacy concern with them is when they mistakenly hear the wake word, and start sending data out without you realizing it. If this is a concern to you, I'd suggest leaving it unplugged when you don't plan on using it, or plugging it into a "smart outlet". Get a reputable one because that brings its own set of security and privacy concerns, or get one of the RF ones that turn on/off with a remote.

[–] [email protected] 3 points 1 year ago (1 children)

@Morse depends on your threat model. nation states surely have alexa zero days to easily hot mic a house.

[–] [email protected] 5 points 1 year ago (1 children)

@Morse (and under FISA a 702 they don’t even need a zero day, the NSA can just compel Amazon’s covert facilitation).

[–] [email protected] 2 points 1 year ago

Neither of those concerns are exclusive to an Alexa device though. They'd apply to any communication device (phone, tablet, computer, laptop, or any other smart/connected device).

[–] [email protected] 3 points 1 year ago (1 children)

And how can we be sure that it isnt sending data when it isn't called by the wake word?

[–] [email protected] 5 points 1 year ago

You can use Wireshark to sniff the packets leaving your network. I use a PiHole to see all of my network traffic.