South Park's Season Premier Sets Off Everyone's Amazon Echo (maxim.com)
SonicSpike writes: It's hard to believe that Trey Parker and Matt Stone didn't know exactly what they were doing with Wednesday night's season premiere of South Park. This episode marked the beginning of the show's 21st season and as usual, South Park took on current issues like tiki torch-wielding white supremacists and... home digital assistants. The latter meant lots of gags in which Cartman and other characters addressed Amazon Echo's Alexa and Google Home as well. And that ended up being a problem for viewers who own those devices. (Editor's note: example 1, 2) South Park writers absolutely knew their lines would do this and probably had a hilarious time coming up with funny commands for the home assistants.
Who actually uses these invasive pieces of technological garbage?
For the first time ever I want one of these.
Also WooHoo, new SouthPark.
First law of people: People are generally stupid.
They should introduce a new character named Alexa, a young girl who fights for small businesses. Then Cartman can ask her for fishsticks and NAMBLA paraphernalia.
I have my Echo right next to my TV and it didn't activate a singe time during South Park. However, every damn Amazon commercial seems to activate my Echo.
"A plan fiendishly clever in its intricacies"- Homer Simpson
Alexa, say "mark has no sense of humor".
Have you read my blog lately?
Largest-scale practical joke?
In debates about Christianity, there are two groups: those looking for answers, and those looking to just ask questions.
if i had the means, i'd set off your alexa intentionally after reading that.
Sorry if you are stupid enough to allow some company to basically put a hot-mic in your home, well I don't feel sorry about any problems you encounter as a result of that.
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
What about the final season of Two and a Half Men?!
Mark, you are a pure trifecta! 100% idiot, asshole, and faggot, all in one. For the benefit of humanity, please kill yourself now and any offspring you may have inadvertently produced during your time polluting the gene pool.
Read the law again. It contains phrases like 'Intentionally access..' and 'knowingly access...' So, prove that they intentionally accessed YOUR computer (which would of course require you to demonstrate that they a) knew you had such a device, b) would have the device in position to respond, and c) knew that you would be watching the show. Ain't gonna fly.
On the other hand, there is this thing called 'free speech'. I don't think 'some idiotic device may hear you and do something stupid' will ever be seen as a valid excuse to restrict speech.
I recall a dude who set up his house with all kinds of automation. His friend showed up and he's like "I'll let you in" "Oh don't worry. SIRI, OPEN THE DOOR!" and the front door unlocks. Doesn't even do voice print recognition; just stand outside, shout loudly, and the front door unlocks.
Things become less a crime and more your own fault when they don't cause any substantial harm and are inflicted with little to no effort or reasonable consideration. A reasonable person doesn't walk up to your house and open your door, or reach into your pocket and fish out your phone to pull up a YouTube video; but he might yell "Siri, what is a billion times a billion" and run from the cacophony of phones trying to answer.
Support my political activism on Patreon.
Alexa: "How did South Park prank you?"
I don't recall Burger King getting in any trouble for that ad. Please describe this 'whole mess'. In fact, the only result of that ad that I could find was that it won grand prize a some advertising convention.
Is if it did all processing locally, and was isolated from everything else.
Connect to my thermostat? Fine. Turn on a light? OK. Connect to my bank account? Not so much.
Send everything I say that it thinks includes a 'trigger word' to an off-site server for voice recognition processing and data mining? FUCK NO.
What the hell is wrong with people?
Unlike in the cases of Cortana and Siri, you can change Alexa's Name to a number of pre-defined alternative names (currently 4, pettition amazon for more).
While I concur with people saying that this technology has security implications and is best avoided, I sugest changing the wake voice command (name) of your smart speaker as a way to lower this type of pranks.
https://www.amazon.com/gp/help...
*** Suerte a todos y Feliz dia!
Read the law again. It contains phrases like 'Intentionally access..' and 'knowingly access...' So, prove that they intentionally accessed YOUR computer (which would of course require you to demonstrate that they a) knew you had such a device, b) would have the device in position to respond, and c) knew that you would be watching the show. Ain't gonna fly.
Under that legal theory, if I were to scan a range of IP addresses using a script that will brick certain common home routers, I would not have committed a crime. You would have to prove that I intentionally accessed YOUR computer (don't know who you are), that you had such a device (didn't know it until the hack worked), and that you had that device connected to the net (again, didn't know in advance).
And YOU are the one who "put it in a place where it would respond", so I'm even less guilty.
He thinks it's cool, I don't personally see the need for one as I just use my phone for most of those things.
I think this is the source of my bafflement about the appeal of these devices: they don't seem to do anything that isn't already a function that comes with smartphones, so I wasn't (and still don't, really) see the point.
Your son's use case is the first one in this list of responses that addresses something that can't be replicated with a smartphone (unless you give a smartphone to your son).
1. I didn't know that.... is Amazon alleging that the consumer does not own the device, so they are free to control it on their own as they see fit?
2. Intent is largely irrelevant when the actions are still illegal... you can't go into a bank with a water gun in your hand either and expect that the teller is going to have a sense of humor about it.
3. That's a fair point... but the action is still criminal, and in some jurisdictions could be prosecutable by the state, or the communications commission.
4. What makes BK's stunt "in poor faith" and this one not? Nobody got harmed, but how can people know in advance that they aren't going to be being harmed by the act? That's ultimate why BK's stunt was not well received, after all.
File under 'M' for 'Manic ranting'
This is, perhaps, what was meant by "getting in a whole lot of trouble." I would have thought that Amazon accepting orders for a dollhouse based on audio in news reports of a girl accidentally buying a dollhouse through Alexa might have resulted in more trouble, but no, getting someone's Google Home device to say "two all beef patties, special sauce, lettuce cheese on a sesame seed bun" is too egregious to ignore.
Perhaps you are unaware that there are different laws for different offenses? Phishing is not illegal under the laws that prohibit unauthorized use of a computer, because phishing is not per se unauthorized use of a computer. There are, of course, laws against phishing. These laws prohibit actions that would cause a person to reveal private information fraudulently. South Park did no such thing, so those laws don't apply either.
including a reprimand from Google.
Free advertising. As long as Google spelled Burger King's name right, it was all just free advertising. And what an odd definition of "trouble" you have. If Google doesn't like what you do, you're in trouble young man! A ten minute time-out for you and your teddy bear.
What's really funny is the reaction of some idiot quoted in the NYT article about it. He's unhappy that advertisers are listening to every word in your living room. He ignores the fact that it is Google that was listening, not Burger King, and they don't listen to every word.
I know its episode 1, but i asked my wife after, was any of that funny to you?
Is to prompt the end-user to choose a name for it. It's your device, I shouldn't have to call it "Google" or "Alexa" or whatever. To truly make a device personal, I should be required to name it.
“Common sense is not so common.” — Voltaire
Oh, a reprimand from Google! Well I'll bet that just had them shaking in their boots.
As for the 'heck of a lot of negative backlash' - hah. According to their 2nd quarter report (ended June 30, the quarter in which the ad ran), comparable sales were up 3.9% over last year. Some backlash.
I'll bet a whole lot more people found that ad, and especially all the whining about it, funny than had a problem with it.
I want to be able to speak into one, that's why I carry a Smartphone everywhere. It also serves as my VR device. It is trivial to make it do AR.
Completely wrong. As soon as you connect to my device you are knowingly accessing it. I don't know why you think the fact that you don't know it is my device matters in the slightest.
Also, I didn't quote the whole law because I thought people would be smart enough to look it up themselves it they cared. In addition to knowingly access, you also have to either knowingly cause damage or extract information. None of that happened.
you can't go into a bank with a water gun in your hand either and expect that the teller is going to have a sense of humor about it.
True, but doing so isn't illegal (unless you're using it to threaten people or as part of the commission of a crime). The bank will just tell you to leave (and if you don't, then you're committing an actual crime of trespassing).
but the action is still criminal, and in some jurisdictions could be prosecutable by the state, or the communications commission.
Maybe. I am very far from convinced that this is an illegal action, but stranger things have happened.
What makes BK's stunt "in poor faith" and this one not?
BK's stunt was not illegal, either.
How do I use this? I'm familiar with torrrents.
3. That's a fair point... but the action is still criminal,
Citation required.
4. What makes BK's stunt "in poor faith" and this one not?
What makes either one "bad faith"? (There is no such thing as "poor faith".)
Let's see. I have a device that responds when anyone within hearing says "Ok Google". I made the choice to turn that device on, and I know it does this because it does it in my presence. Can I know that nothing anyone ever says while in the presence of my device will cause harm? Of course not. But I know that it can. My choice to have it or not.
That's ultimate why BK's stunt was not well received, after all.
I think you are projecting. You didn't receive it well, and everyone else must feel the same way. Sorry, I don't. If I had such a device and the only thing it did was read one sentence from a Wikipedia page in response to a TV ad, I would think "what an interesting advertising concept".
What I would NOT have found to be acceptable was Google's decision to tack an ad for a Disney movie onto the end of weather information. Google has no high moral ground to object to Burger King when Google plays such games with their devices.
It is much better for someone to play a joke on the public, and make them realize the dangers inherent in the devices they own, than to wait until a hacker does it and steals their identity or uses their home network to serve kiddie porn.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
Completely wrong. As soon as you connect to my device you are knowingly accessing it.
As I pointed out, I knew none of the things you listed as a requirement. I don't know who you are, so I cannot know I was connecting to YOUR computer (I wasn't), and I don't know that you have that device. I was pointing out the failure of your description, not necessarily of what the law actually says.
I don't know why you think the fact that you don't know it is my device matters in the slightest.
I don't know why YOU think I know it is your device matters, but that's what you said.
Also, I didn't quote the whole law because I thought people would be smart enough to look it up themselves it they cared.
I didn't see you quote any of "the law", and there are so many of them that being specific in a citation is required for that citation to have any value at all.
On IRC we used to tell noobs that typing "/sign" followed by your sun sign would get you your horoscope. Amazing how many people fell for it.
When you configure siri on your iDoohickey, you actually have to go through a training process. After that, it (usually) only responds to your voice. That being said, I've occasionally had Siri activate by some odd ambient sound, but it's generally been pretty reliable.
I sure as hell wouldn't rely on that for any kind of genuine security though.
How easy it is to use a computer without authorization has no bearing on whether authorization is required to be following the law unless the circumstances are such that the person who was so trespassing had no reasonable way of realizing that they were not authorized to use that system (eg, a computer console in a library that does not have any signage indicating that it is for staff use only)) In both BK's similar stunt, as well as with this one, they knew full well what they were doing, so any claim that they did not realize they were not authorized would not hold up.
File under 'M' for 'Manic ranting'
There have been some suggestions that Southpark is making fun of anyone who bought an echo. And maybe they are, Southpark will make fun of anything. But I think the real weak link here is Amazon, or anyone who puts out a such a device with such an easy exploit path. XKCD already had a comic about messing with these ( https://xkcd.com/1807/ ). Clearly these need to have an option to rename the personality anything you choose, like your wireless network. Not that people wouldn't leave it at the default, but then you could at least call the user out for being lazy.
Oh, wait.
https://www.cnet.com/how-to/am...
Sorry. Carry on.
-- "Oh. This guy again."
Siri, open the pod bay doors.
If you cannot manage to approximate 3.5 times 1/3 well enough to do for a recipe, then I suggest you would probably not be allowed to cook unsupervised.
I mean, at worse you could add 1/3 of a table spoon three and a half times..
O perhaps with out that 3 times 1/3 must be, you know, 1, and then another half of 1/3, so is a sixth (or put another way, irrelevant in cooking).
But no, instead you need to use a cloud based voice recognition and interpretation system located somewhere else in the world to work that out?
We really are in the shit..
Okay Slashdot,
Now cue the morons who will no doubt claim this is somehow hacking the gullible people's devices, like that Burger King commercial that started with "Ok, Google".
One day, maybe, the unwashed masses will figure out that if you can talk to your phone, so can anyone else.
"Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
It would be criminal under the category of unauthorized computer trespass.
Citation required.
I can't stress enough how much the parent poster's point matters: you're choosing to install a spy in your home/office.
People make the same choice when they take a tracker (aka "cell phone", "mobile phone") with them when they use the toilet or leave it next to their bed. Would it be okay if someone trailed you with a mic on a boom and hung it over the stall as you used the toilet or had sex in your bed? Ask people that and they'd probably object on the grounds of a loss of privacy. Yet if that mic (which is connected to the Internet, operated with proprietary software, and doesn't have an indicator light) also let you browse the web, check your email, and play games this becomes okay? Then the concept of privacy was never the issue.
We've learned most people apparently don't need voice control to order stuff from Internet-based distributors including amazon.com. You should not trade away your privacy, ever, and the low price some place on their privacy indicates they need more education.
Digital Citizen
Technician Aub would be right at home.
Apoc -- How dare you criticize an uber-man who not only still works on his own automobile, but also bakes. Shit man -- I wanna turn transgender just to date such a chap.
Besides that -- maybe he likes the idea of Alexa listening to him boning a chick or fapping off a wank.
Fringe benefits, Apoc, for the exhibitionists. Fringe benefits indeed.
Marcus
In the USA, it's called the Computer Fraud and Abuse Act.
What are now called computer viruses were once just pranks too.
File under 'M' for 'Manic ranting'
Obviously.... that is why the applicability of the CFAA is largely centered around having an *intent* to access a computer without authorization. If you happened to do so simply by speaking, without any intent to cause such access, and especially if no harm was actually done, then you obviously wouldn't be considered guilty. However, that's not the case here. The writers of the script knew exactly what they were doing, and anticipated its effects quite precisely. No harm was done, but the access was still deliberate, and unauthorized.
File under 'M' for 'Manic ranting'
Setting up Siri:
Enable Siri on your iPhone before you begin.
Navigate to Settings > General > Siri – slide the little button to ‘On’ if it isn’t already.
Check the settings below are correct. Choose your language, your voice feedback preferences and your contact book profile (so that Siri knows who you are and can begin creating ‘relationships’ such as ‘wife’ or ‘brother’ with other contacts in your address book).
Allow ‘Hey Siri’ if you wish to activate Siri without pressing the Home button.
I don't have a significant other, you insensitive clod! And speaking of lonely, it brings me joy knowing that at least Amazon is listening to me fart loudly in bed.
Human Rights, Article 12: Freedom from Interference with Privacy, Family, Home and Correspondence
I think you are projecting. You didn't receive it well, and everyone else must feel the same way. Sorry, I don't. If I had such a device and the only thing it did was read one sentence from a Wikipedia page in response to a TV ad, I would think "what an interesting advertising concept".
Yes, I'm going to have to see some polling numbers on that one myself. The danger of self-selection is made obvious by remembering the discussion about it here on Slashdot, where at least as many people thought it served people right for having that crap in their homes as were upset at the king of burgers for triggering their spy machines. But you can tell from my language how I feel about it, so my recollections are unreliable at best.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
The CFAA requires that you knowingly and intentionally access a computer without authorization AND obtain information from, commit fraud with, or intentionally damage said computer. So what information was obtained? What fraud was committed? What damage was done?
What harm is done by any kind of hacking attempt where no *real* malice is intended, and no actual harm is ever actually done? The point of making it illegal is to so that people do not, even inadvertently, cause any harm to anyone by doing so. Allowing people to get away with it when no harm is done makes it only that much more likely that someone will get away with it when they *HAVE* caused harm.
There was a time when, as I mentioned above, what are now called computer viruses were not considered harmful either... originating as pranks, they evolved over time from being funny to being a minor nuisance to being harmful to being against the law.
This is no different.
File under 'M' for 'Manic ranting'
It is obvious that you want the law to say something other than what it does, but it doesn't. Your "what harm" question is silly. The harm is defined by the law, and it is the things I listed.
Have even heard of the first amendment? There is no exception carved out for 'unless some poorly thought out electronic device may hear it.'
This isn't any exception to the first ammendment.. this amounts to just one simple thing: a deliberate attempt to control another person's computing resources without the owner's express permission to do so.
The fact that people weren't harmed in this particular is irrelevant... the point is that people *COULD* have been harmed (and in fact, some may have been, but incidents of sufficent obscurity are unlikely to get reported). This is why, in particular, it is illegal to joke about carrying a bomb while in an airport, or yelling "fire" in a crowded theatre, no matter how innocuous one's intent may be. Even if people immediately around you realize that you are joking, there can be some who may not realize it is a joke, and take the remark quite seriously. That doesn't impact freedom of speech. Neither does this.
In South Park's case, to the best of my understanding, the Amazon assistants that were affected by this prank evidently added humorous items to the user's own shopping list, which it did not evidently actually follow through and purchase, but what if there had been someone else in the same room who was not watching the episode, but was utilizing the same amazon account that Alexa is tied to while Alexa was doing this. and perhaps not realizing what alexa had done, clicked "Purchase", and ordered a bunch of items they did not want?Of course, they could later go and cancel the order, or remove the unwanted items, but what if they do not realize what has happened until they get a confirmation that the items are being sent? The order, having already been mailed out, they no option to cancel, but at best only to return the unwanted items for a refund.
So what's the problem, you might ask. The problem is that then Amazon would be footing the bill for that stunt because they'll have to pay for the return postage on the items that never would have been sent in the first place if the prank had not been pulled. If this stunt did cause any problems, we will probably hear about it within a few days, Even if it didn't however, the point remains that it could have, and that's why such practices are discouraged by laws which outlaw unauthorized computer access.
You can argue that Amazon should make their devices more secure, and I'd agree with you, but just as certainly as not locking your car door doesn't give a thief any legal permission to take it (although you may have trouble filing a theft insurance claim if it is known that your door was not locked), the failure in these devices to be properly secured to not respond to commands that happen to be emerging from a pre-recorded broadcast should not give those broadcasters any license to freely take control of other people's computing resources without those people's authorization.
File under 'M' for 'Manic ranting'
Would work better if you could record your own, like "*DEMON*, I COMMAND YOU!" with my own choice from the Greater Seal of Solomon or the Cthulhu Mythos.
As long as the real one didn't show up, instead, of course. Azathoth shows up, and it looks like a small nuke went off, killing me and a few thousand neighbors.
The fact that people weren't harmed in this particular is irrelevant...
Except that the law requires some kind of harm. That makes it relevant. Can you cite the actual law that is being broken? A link is good ... to a law that is relevant.
In South Park's case, to the best of my understanding, the Amazon assistants that were affected by this prank evidently added humorous items to the user's own shopping list, which it did not evidently actually follow through and purchase,
So no harm. And the owners did allow the assistants to listen.
but what if there had been someone else in the same room who was not watching the episode,
What if there had been someone else in the same room with a knife who was stabbing the Echo's owner? We can play all kinds of "what if" games, can't we?
Your "what if" scenario is not really relevant, as any harm caused in your example would not be directly attributable to the content of the broadcast. While I do not dispute that my scenario is no less hypothetical, the negative consequences that might arise from it would entirely be the consequence of what the creators of South Park chose to put in that episode. Your example could happen regardless of the episode content, or even what program they happened to be watching. My example could only arise by the choice of a program creator deciding to control other people's devices, thinking that it's all okay because they don't really *MEAN* any harm. I'm sure you've heard the old proverb about good intentions and negative consequences at least once.
And for what it's worth, it did apparently bother quite a few people. There reportedly were people who had unplugged their devices after a few minutes because they were getting annoyed with how they were responding to the television during the episode. I would suggest that this is about on par with the state of affairs in the early 1980's for what would eventually be called computer viruses on home computers. Google "Elk cloner" sometime. Extraordinarily primitive by today's standards, but it definitely met all the requirements of what we call a computer virus today. No "real" harm was done then either, but things escalated quickly from there from being funny once to being annoying to hampering productivity to eventually being quite harmful. Fundamentally, it's the reason why laws outlawing unauthorized computer access even exist at all. To suggest it should somehow be immune from penalization only because the creators only meant it as a practical joke is not an excuse. The first home computer virus was just a practical joke too, after all.
File under 'M' for 'Manic ranting'
the negative consequences that might arise from it would entirely be the consequence of what the creators of South Park chose to put in that episode.
No, it would be the result of someone who didn't care what was on the shopping list telling Alexa to order everything on the list. And not paying attention as Alexa kept saying it was adding things that the person who is actively paying attention to Alexa hadn't requested.
And for what it's worth, it did apparently bother quite a few people.
Ok, so you want me to go look for the "Annoying Other People With Computers Act".
There reportedly were people who had unplugged their devices after a few minutes because they were getting annoyed with how they were responding to the television during the episode.
You mean people making the choice not to allow their personal assistant to be in a position to hear commands from other people? That sounds like taking responsibility for a device that they know will respond to any command from any person within hearing.
The first home computer virus was just a practical joke too, after all.
Uhhh, no. Claiming that any program that does anything you don't want is a "virus" is silly. And if you don't want your voice controlled device to respond to TV sounds, don't put it where it can hear the TV. If you don't want your three year old child to play with a gun, don't leave a gun where he can pick it up. If you don't want your Alexa to respond to voice commands from whatever it can hear, don't let it hear things from sources that aren't authorized. Common sense.
Now, I take it that all this rambling means you don't actually have a link to an actual law that was violated.
Definitely, but that would require that Amazon actually provide facilities to their users to allow them to secure them in that way.
But the fact that Amazon hasn't done so yet doesn't mean it should be open season on abusing it in this manner.
18 U.S.C. SS 1030(a)(5)(C). Unauthorized computer access and damage or loss due to negligence.
The loss in this case would be to any people who were unable to use their devices as they may have intended during this broadcast, as well as to anyone who may have inadvertently purchased the joke items (effectively, a denial of service attack). Really, in someplace like a living room, especially in a small living space such as an apartment, it's not at all hard to imagine that there might be people in easy earshot that do not have their eyes glued to a television, even while someone else is watching it. A human being can tune out such noise quite easily and still function, computers not so much.
File under 'M' for 'Manic ranting'
You configured the range of IP'S to scan. That's intent and knowledge. Why are you intentionally being stupid?