Project Alias Hacks Amazon Echo and Google Home To Protect Your Privacy (fastcompany.com)
fahrbot-bot writes: The gadget, called Alias, is an always-listening speaker, designed to fit on top of an Amazon Echo or Google Home, where it looks like a mass of melted candle wax. It's composed of a 3D-printed top layer, a mic array, a Raspberry Pi, and two speakers. It only connects to the internet during the initial setup process. Alias stays "off the grid" while you're using it, preventing your conversations from leaving the device. When the Alias hears its own (customizable) wake word, it'll stop broadcasting white noise and wake up Alexa or Google Assistant so you can use them as normal.
It goes beyond that, the companies involved on the back-end making claims of "oh, it's not listening to you much," or "oh, we encrypt everything in the cloud" and then you find the insecure AWS folder full of videos...
This is before black-hats figure out how to trivially botnet them into a superweapon, this is just how the companies that sold you the damn spying devices "for your convenience" value your privacy and security. Lip service.
Amazon's RING security cameras with the backend "god" mode that they literally gave out unsecured unlimited access to a Ukranian software contractor... It just goes on and on and on forever.
It's not about hackers, they'll always be the outsider threat. It's about lazy fucking morons. This is the threat to us all. Morons.
Anyone valuing his privacy enough to use such a device probably already would not allow an eavesdropping device to exist in his living room. So who exactly is the target audience?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Unplug your spy devices, permanently