Slashdot Mirror


Nest Secure Has an Unlisted, Disabled Microphone (androidauthority.com)

An anonymous reader quotes a report from Android Authority: Owners of the Nest Secure alarm system have been able to use voice commands to control their home security through Google Assistant for a while now. However, to issue those commands, they needed a separate Google Assistant-powered device, like a smartphone or a Google Home smart speaker. The reason for this limitation has always seemed straightforward: according to the official tech specs, there's no onboard microphone in the Nest Secure system. However, Google just informed us that it is right now rolling out Assistant functionality to all Nest Secure devices via a software update. That's right: if you currently own a Nest Secure, you will be able to use it as a Google Home very soon. That means somewhere in the Nest Guard -- the keypad base station of the Nest Secure -- there might be a microphone we didn't know existed. Either that or your voice commands are going to be heard by another product (like your phone, maybe) but Assistant's output will now come from the Nest Guard, if you happen to be in the range of that device. UPDATE: Google has issued a statement to Android Authority confirming the built-in microphone in the Nest Guard base system that's not listed on the official spec sheet at Nest's site. The microphone has been in an inactive state since the release of the Nest Secure, Google says. This unlisted mic is how the Nest Guard will be able to operate as a pseudo-Google Home with just a software update.

207 comments

  1. unlisted microphone? by Anonymous Coward · · Score: 5, Insightful

    look, i just want a warm living room when i come home from work

    can we fuck off with this creeping and creepy featuritis?

    1. Re: unlisted microphone? by Anonymous Coward · · Score: 0

      It is literally a rather creepy story

    2. Re:unlisted microphone? by Anonymous Coward · · Score: 5, Insightful

      a 'smart' thermostat needs no camera, needs no microphone. needs no 'cloud' backing it up.. just a little locally run code, a source for local weather conditions, forecasts and date/time.. the national weather service and nist (and other countries' equivalents) provide those. for free.. with no creepy factor.

      anything that CAN run locally.. SHOULD be run locally. this cloud dependency simply for the sake of 'the cloud' (and data gathering) is total bullshit.

    3. Re:unlisted microphone? by Anonymous Coward · · Score: 1, Interesting

      Why would it even need weather? It controls the temperature inside the home. All it needs is a schedule and an easy way to override for when you're not going to be there.

    4. Re:unlisted microphone? by Anonymous Coward · · Score: 1

      Why would it even need weather? It controls the temperature inside the home. All it needs is a schedule and an easy way to override for when you're not going to be there.

      To anticipate load and/or pricing spikes. For example, Nest will overshoot (undershoot?) cooling if it sees that the temperature will increase in the next few hours, because overall it's cheaper and more energy efficient to cool in advance and let the temperature gradually rise, rather than play catch up all day.

    5. Re: unlisted microphone? by Anonymous Coward · · Score: 1

      And a smart microphone needs no internet connection. In terms of how cheap storage is, it could just store keywords/phrases/signatures and when a second device was in proximity it could establish a proprietary connection and upload. Unlikely to be useful to most folks except maybe those with a bone to pick.

    6. Re:unlisted microphone? by Lab+Rat+Jason · · Score: 4, Funny

      What are the odds that a government, or other state sponsored entity already knew about this... and already updated your software?

      Asking for a friend...

      --
      Which has more power: the hammer, or the anvil?
    7. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      The cloud dependency is because the average consumer these are aimed at are two dumb to run code and services locally. For those who are smart enough to run the code and services locally they are probably building their own IoT devices out of ESP8266 devices running code they have written, talking to services they have running on their home network.

    8. Re:unlisted microphone? by ljw1004 · · Score: 1

      a 'smart' thermostat needs no camera, needs no microphone. needs no 'cloud' backing it up..

      I've frequently controlled my Nest via smartphone from under the warmth+safety of my own duvet covers when it was too cold to get out.

      I'm not sure how this would best be done. It can't be via bluetooth (out of range). Doing it via cloud, as Nest does, seemed to work fine. Another option would be if the nest app on my phone is able to seek out local devices on the local area network, I guess like AirPlay and other streaming protocols.

      Also, on most vacations, I've realized I forgot to turn down the heating and I've done it remotely from the airport. I think "cloud" is the only viable option here. (I used to have a home server running OpenSuse, and could have figured out something there, but stopped it once I realized that (1) I'm don't have the admin skills+knowledge to keep it secure, and (2) with three toddlers I don't have the time to acquire those skills nor the time to keep it secure.)

    9. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      First off, it doesn't do that. Secondly it wouldn't work if it tried. Third you're putting complexity into a simple system. Fourth, pre-cooling or pre-heating beyond 1 hour does nothing at all in most homes.

    10. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      You've had a programmable thermostat since the early 1990's. I know, because I installed one for my landlady back then.

    11. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      Why would it even need weather? It controls the temperature inside the home. All it needs is a schedule and an easy way to override for when you're not going to be there.

      Knowing outside temperature is useful for moderating indoor humidity levels to prevent moisture damage. Otherwise total bullshit.

    12. Re:unlisted microphone? by SuseLover · · Score: 2

      Yes, and the masses will still purchase and gobble this stuff up so it will become even more pervasive. They just don't care or see the problem with it.

      I'm having a hell of a time finding IP cameras that do NOT use the cloud. You can't even tell if you read the specs sometimes.

      If I were smart I'd startup a similar company that "features" no cloud connections for the informed market.

    13. Re:unlisted microphone? by arglebargle_xiv · · Score: 1

      Honeywell doesn't think so.

    14. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      "...too cold to get out [of bed]"

      Just how coddled can one be?

    15. Re: unlisted microphone? by Anonymous Coward · · Score: 0

      Wifi over the LAN, perhaps?

      The app could connect on the local LAN IP.

    16. Re: unlisted microphone? by BeanHD++(555) · · Score: 0

      Yep, and it got Ajit Pai's rubber stamp of approval. Coincidence?

      ^v^v^v^v^v^\\\|||///_:BeauHD:_\\\|||///^v^v^v^v^v^
      /s e n i o r \v/ e d i t o r\

    17. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      The thermostat could be on local wifi, but no internet connection, so when you are home, you can control it from the bed.

      I thought the whole point of the "smart" thermostat was to "sense" when people were in the house, using local motion detection and eventually learn patterns for when there was no motion detection. So shouldn't the device automatically adjusted the temperature after the (potential 5 member household) people had left?

      Finally, having secure remote access might be nice. Example is a second residence or a primary residence with unexpected return times and you want to warm/cool beforehand. Thus, the device does not need external internet access, but a gateway for you to access it remotely.

      I have an irrigation device that I love to control both from within wifi range (to tune sprinklers or blow them out) and while away (simpler than building an algorithm to measure the weather and soil moisture to adapt). But it does not connect to the internet outbound. I can connect through a proxy via HTTPS behind a login.

      You don't have to give up privacy for convenience!

    18. Re:unlisted microphone? by toddestan · · Score: 1

      You don't need the internet for that either, a temperature sensor outside will do. Or for that matter, a humidity sensor indoors.

    19. Re:unlisted microphone? by Khyber · · Score: 1

      " Fourth, pre-cooling or pre-heating beyond 1 hour does nothing at all in most homes."

      Guess you've never lived in a nearly non-insulated California home.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    20. Re:unlisted microphone? by KingMotley · · Score: 1

      Because a lot of furnaces and almost all air conditioners and heat pump's efficiency changes based on the outside temperature. Because your home isn't 100% insulated, it also affects how much extra heating/cooling is going to be required to raise/drop the house temperature. Not rocket science.

      If you wanted a stupid scheduling thermostat, then I suggest buying one of those. I didn't buy a nest thermostat so it could be just a stupid scheduling thermostat.

      BTW, this article is on the Nest Secure, not the Nest Thermostat, so... Not sure why this was even brought up.

    21. Re:unlisted microphone? by havana9 · · Score: 1

      If you need a smart thermostat or whatewer there are a lot of smart solutions without microphone or cloud systems. Like BTicino MyHome or Vimar or CSISPA they can work disconnected and without using TCP/IP. These cloud systems look easier to setup of course and you have to buy them in a professional warehouse and follow the elecrical code guidelines to install them. It's the laziness factor that wins.

    22. Re:unlisted microphone? by Carewolf · · Score: 1

      Why would it even need weather? It controls the temperature inside the home. All it needs is a schedule and an easy way to override for when you're not going to be there.

      To anticipate load and/or pricing spikes. For example, Nest will overshoot (undershoot?) cooling if it sees that the temperature will increase in the next few hours, because overall it's cheaper and more energy efficient to cool in advance and let the temperature gradually rise, rather than play catch up all day.

      No, it is not cheaper. It is more expensive. The bigger the temperature difference the bigger the energy leak, so preemptively lowering temperatures will only cause more cold to be leaked, and thus cause a higher energy usage.

    23. Re:unlisted microphone? by ceoyoyo · · Score: 1

      Wifi works fine. There are smart thermostats that use it, just not ad supported ones.

      For outside access the company could offer a dynamic DNS service instead of a bunch of cloud stuff.

    24. Re:unlisted microphone? by thegarbz · · Score: 1

      Then just buy a Nest and be done with it. I don't know why you are complaining about something as irrelevant as a thermostat while we're talking about a completely different product.

    25. Re:unlisted microphone? by thegarbz · · Score: 1

      a 'smart' thermostat needs no camera

      Depends on how "smart" you expect the "smart" thermostat to be. You use the word "smart" and then describe something incredibly dumb that has existed for years.

      Conversely with a camera you can apply image detection to determine if someone is home / away while ignoring disturbances like pets, you know, like someone "smart" would.

    26. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      But knowing the weather doesn't help any of that. At absolute best, if you have a hybrid heat pump / furnace system the controller just needs to know the outside temperature to know which of those to run.

      As far as 'extra' heating or cooling, few residential HVAC systems have variable output. Most just blow the same temp air at the same volume until the setpoint is reached. The few that have some variability need know only the actual inside temp relative to the setpoint to vary their output via a PID equation.

    27. Re: unlisted microphone? by guruevi · · Score: 1

      Plenty companies do use the DDNS feature but thatâ(TM)s LESS secure than a device dialing into a cloud app. At least you can make efforts to keep a central app secure and updated and there is nothing dangling (directly) on the Internet. With DDNS, your device gets anyone direct port/IP access.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    28. Re:unlisted microphone? by TheCastro1689 · · Score: 1

      "The bigger the temperature difference the bigger the energy leak" so the preemptive part means the temps are more in line and are closer together. Instead of trying to maintain 73 in a 80 world, while the temp is 76 the house would lower it to 70. Only a 6 degree difference vs the 7 later. So the house could work less to keep the house temp slowly creeping to 73, especially in anticipation of your home arrival.

    29. Re:unlisted microphone? by TheCastro1689 · · Score: 1

      It would be nice if it knew how much oil you had/used, the cost vs electricity and could use whichever system cost less, including overheating the house in anticipation of a cold snap at night, or high freezing winds, etc.

    30. Re: unlisted microphone? by ceoyoyo · · Score: 1

      The cloud solution is more secure when you trust the provider. When their business model is spying on you, not so much.

      You could use a third party access server too. Emphasis on third party. Someone who gets audited regularly, and whose job is purely to create a secure connection between you and your home, over the internet.

    31. Re: unlisted microphone? by Anonymous Coward · · Score: 0

      LOL

      ^v^v^v^v^v^\\\|||///_:Anonymous Coward:_\\\|||///^v^v^v^v^v^ /s e n i o r \v/ c i t y - z e n\

    32. Re:unlisted microphone? by Anonymous Coward · · Score: 0

      >this cloud dependency simply for the sake of 'the cloud' (and data gathering) is total bullshit.

      It makes them money so it's more than just bullshit. But, I agree, it's bullshit.

      It's the second bit. The tech industry is high on data that a product liek this cannot exist in the current corporate environment without gathering data. That's what it's purpose is. The thermo-whatever part is just the hook for users.

      Real privacy laws and open standards requirements would fix this.

  2. Good thing we can trust them with our data by Anonymous Coward · · Score: 2, Funny

    id hate to think some company would install a secret microphone in peoples home and then also secretly work with the chinese government or something like that

    1. Re:Good thing we can trust them with our data by Anonymous Coward · · Score: 0

      id hate to think some company would install a secret microphone in peoples home and then also secretly work with the chinese government or something like that

      Yeah, the Chinese govt really wants to know about your bedroom habits. It's not like you're part of their social credit rating system.

    2. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 1

      You donâ(TM)t seem to have an understanding of the value of large data sets.

    3. Re:Good thing we can trust them with our data by Anonymous Coward · · Score: 0

      It's not like you're part of their social credit rating system.

      You will be when they conquer the world!

    4. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 2, Insightful

      There's always some idiot who thinks "B...b...b...but I don't have anything to hide!"

    5. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 0

      I think YOU are missing the point. It isn't the Chinese government you should be afraid of...

    6. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 0

      The future can be very hard to predict but sure as hell the Chinese are not taking over the world.

      They will be fucking dumb lucky to not have a bloody revolution in the next 20 years wiping out hundreds of millions in the starvation that follows.

      Their entire system is a fraudulent house of cards constantly teetering on the edge of collapse.

    7. Re: Good thing we can trust them with our data by JaredOfEuropa · · Score: 1

      As they say: data is the new oil. I prefer to think of data as the new ivory: you can do a lot of nice thinks with it, but obtaining it causes serious harm, and perhaps trafficking in it ought to be outlawed. Some entities will stop at nothing to obtain it.

      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    8. Re: Good thing we can trust them with our data by HiThere · · Score: 1

      I'm not arguing with the rest of your post, but I wouldn't be certain about them not taking over the world. Considering it likely is probably wrong, but it's not implausible.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    9. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 0

      *If you think America's bad off now
      Just wait 'til Trump gets through with it*

  3. LOL by strikethree · · Score: 3, Funny

    Permit me to say: LOL

    I am shocked, shocked I say. ;)

    --
    "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
    1. Re:LOL by gweihir · · Score: 2

      I find this exceptionally funny. People are _dumb_ to trust these companies.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    2. Re:LOL by AmiMoJo · · Score: 1

      What choice do you have though? Unless you want to drive a pretty old car you will find that all modern ones have a microphone for Bluetooth support. And in this case the buyers would have had to disassemble the device to even find out that it had a mic.

      It's like how it's hard to buy a dumb TV these days. If you want something with a tuner you either buy a used one or it's going to have smart features and quite possible a microphone.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    3. Re:LOL by AmiMoJo · · Score: 1

      Could they at least return the Nest thermostat now? In the UK you could return it under consumer laws for being "not as described" and "not fit for purpose", get a refund and probably ask the retailer to cover some reasonable costs if you felt like pushing it.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    4. Re:LOL by apoc.famine · · Score: 1

      What choice do you have though?

      Dozens of brands of $10-$50 programmable thermostats in this case.

      I am baffled at people's apparent need for something more than that. Every use-case I hear is either someone too lazy or too stupid to maintain a useful temperature in their house, or who is unable tolerate anything other than getting the exact temperature exactly when they want it.

      Seal your gaps, make sure your insulation is up to code, program a reasonable daily temperature profile, and then you're done. If you've bought a house built in the last 20-30 years, the first half of that work is already done.

      I really do not know how you can justify needing to yell at the thermostat from under your covers that you're too cold. Are you fucking 4?

      --
      Velociraptor = Distiraptor / Timeraptor
    5. Re:LOL by AmiMoJo · · Score: 1

      I meant in general you can't avoid these technologies completely. Sure you don't have to have a smart thermostat... Yet. Eventually they may end up like TVs and cars, you can't buy one without a microphone in it. Okay, less likely for a thermostat, but you see my point.

      I don't know what the solution is. Laws harshly punishing misuse are a good idea. I remember reading a sci-fi book where it was possible to spy on anyone at any time (using micro wormholes) so some people started living in complete darkness and communicating by silently tapping their fingers on each other's hands. Simpler times I guess, these days we know that tapping your fingers is detectable with microphones and can be decoded at a distance.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    6. Re:LOL by Anonymous Coward · · Score: 0

      Bought a cheap 20$ car stereo at walmart that has bluetooth usb mp3 and radio. It seems to have a built mic and you can't turn the bluetooth off. I know for sure that with conventional equipment you can see the bluetooth id from a 15ft radius. I wonder how hard it would be to hijack considering it has a hardwired pin and no expectation of updates.

    7. Re:LOL by terrycarlino · · Score: 1

      They are not talking about the Nest thermostat. They are talking about the Nest Security system. Two different items made by the same company.

      So return your Nest thermostat if you want, but you won't be able to do it because it has a microphone, because, as far as is known, it doesn't.

  4. 1984 by Anonymous Coward · · Score: 1

    “It was a bright cold day in April, and the clocks were striking thirteen.”

    1. Re: 1984 by Anonymous Coward · · Score: 0

      Yes.

  5. Some people buy hardware for what is not contained by bugnuts · · Score: 5, Insightful

    I will not buy a TV with a video camera.

    I'd be furious if I found out my TV had one, that only needed a software update to activate.

  6. That does it! by PPH · · Score: 2, Funny

    I'm putting my old mercury bulb thermostat back in.

    --
    Have gnu, will travel.
    1. Re:That does it! by Anonymous Coward · · Score: 0

      Yes, mercury poisoning is now less of a threat than all our electronic devices. We used to worry about radioactive Americium in smoke detectors. Now, it's cameras in smoke detectors, especially the ones located in bedrooms.

    2. Re: That does it! by Anonymous Coward · · Score: 0

      Catch!

    3. Re:That does it! by HiThere · · Score: 1

      The mercury threat of home thermostats was not to the user, or not significantly. It was when you disposed of it.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  7. The real question by Anonymous Coward · · Score: 5, Insightful

    Is how many other devices have clandestine microphones unbeknownst to the owners?

    How can you trust anything from any of these tech companies. They all spy on you.

    1. Re:The real question by PolygamousRanchKid+ · · Score: 1, Insightful

      Is how many other devices have clandestine microphones unbeknownst to the owners?

      FTFS:

      That's right: if you currently own a Nest Secure, you will be able to use it as a Google Home very soon.

      No, it uses you!

      Now, already.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    2. Re:The real question by Ol+Olsoc · · Score: 1

      Is how many other devices have clandestine microphones unbeknownst to the owners?

      Yes

      How can you trust anything from any of these tech companies. They all spy on you.

      No and yes.

      Unless you disassemble and inspect an IoT personal spying device, You must assume it has both a microphone and camera. Because it probably does. This Nest example pretty must rests my case. If it is possible to listen, they will listen

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    3. Re:The real question by Anonymous Coward · · Score: 1

      And can we assume that the Google Nest's microphone has the same magic hardware which prevents it from turning on and listening to everything unless it hears a wake-word, just like the Amazon Alexa? You know, one that totally absolutely definitely won't be recording everything in earshot for marketing, research, and creep purposes?

    4. Re:The real question by Anonymous Coward · · Score: 1

      Dark Helmet: Google! Speak next time speak! ... Did you hear anything?
      Google: No sir, we didn't hear you playing with your dolls again.
      Dark Helmet: Good!

    5. Re:The real question by argStyopa · · Score: 2

      Genuine question: anyone have any idea how "average consumer" or even "moderately tech-able /. poster" could identify this shit?

      Or, failing that, does anyone know if there's a way to, I dunno, strip out UPSTREAM data from a specific device in your router settings? I assume that would make most devices that use ethernet connections non-functional because they wouldn't be able to ack anything legitimate.

      --
      -Styopa
    6. Re:The real question by danomac · · Score: 1

      Or, failing that, does anyone know if there's a way to, I dunno, strip out UPSTREAM data from a specific device in your router settings?

      I don't know if all routers can do this. Ubiquiti routers can for sure, assign a static IP to that device and block all traffic from that IP from going to the internet.

      However, that will probably make it mostly useless as almost all of the "smart" things require internet to work.

    7. Re:The real question by Chelloveck · · Score: 2

      Without disassembling the device there's really no way to tell. The best you can do is check if the case has a hole that looks suspiciously like a microphone hole, but that's going to be pretty error prone. It's still easy to put a mic somewhere that doesn't have an obvious hole, or have what looks like a mic hole that doesn't actually have a mic mounted.

      It's trivial to configure a router to not pass upstream traffic from a particular device, but that's pretty much the same as not having it on the network at all. That's really pointless for a Google Home type of device. It has almost no local capability other than to listen for its keyword. Everything else it does is cloud-based. I don't know if Nest Secure can function disconnected from the net or not, but even if it can it's going to be well and truly hobbled.

      --
      Chelloveck
      I give up on debugging. From now on, SIGSEGV is a feature.
    8. Re:The real question by Ol+Olsoc · · Score: 1

      Without disassembling the device there's really no way to tell. The best you can do is check if the case has a hole that looks suspiciously like a microphone hole, but that's going to be pretty error prone. It's still easy to put a mic somewhere that doesn't have an obvious hole, or have what looks like a mic hole that doesn't actually have a mic mounted.

      Ohh, ohh, ohh..... I haz idea. Once you find a microphone, simply remove it from the device, then attach some wires to when the mic was, send audio to it, and start letting them listen to say, porn movie audio, or Meg Ryan's orgasm voice from "When Harry met Sally, or maybe Doctor Strangelove soundbytes. Possibly even RickRoll them.

      Or better yet, send them commercials.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    9. Re:The real question by MemeRot · · Score: 1

      I'll bet that's how it operates.

      Tiny program event - hey time to turn up the heat.
      Nest: web request to https://www.google.com/search?...
      Special hidden result which pipes web assembly back to the thermostat.
      Tiny program event - heat good enough

    10. Re:The real question by Anonymous Coward · · Score: 0

      Every device with a speaker can also be used as a microphone.

    11. Re:The real question by Anonymous Coward · · Score: 0

      Attach one of these to the circuit:
      https://www.walmart.com/ip/Kaya-Day-Mini-Mirror-Clip-USB-Digital-Mp3-Music-Player-Support-16GB-SD-TF-Card-Clearance/411163515

    12. Re:The real question by HiThere · · Score: 1

      No. Many speaker designs aren't reversible. Only if ambient sound modifies the power supply, like it did in the old carbon mics.

      But, or course, many things that don't appear to be microphones can operate as one. I'd be suspicious of any large touch screen, e.g. That could easily activate at a very low level from ambient noises in a way that would need to be carefully filtered out for normal use (as a touch screen). But if it's very massive, it would probably only pick up loud sounds, or only some particular wave lengths. (Think of the trick using a window pane as a resonator for a laser to read.)

      Much more likely is actual microphones built into standard chips. They probably wouldn't be very high quality, but if you combine several sources you could probably process it into some reasonably good quality sound. The question is what would be the ostensible purpose of the various pieces. That seems hard to predict since new effects seem to become public every few months.

      Then there's the question of "how difficult would it be to collect and process the data". Most sneaky approaches seem as if they would only work for selected targets. Mics built into consumer devices that just don't advertise themselves is a different category. Those, however, someone is likely to need to take the device apart to discover.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    13. Re:The real question by Anonymous Coward · · Score: 0

      > Unless you disassemble and inspect an IoT personal spying device, You must assume it has both a microphone and camera. Because it probably does. This Nest example pretty must rests my case.

      The fact that they deliberately expunged this from the publicly available specs pretty much confirms it was put in with malicious intent. The fact that it could, at any time, have had a mandatory update pushed to it that overrode the older software and put the mic (that wasn't listed anywhere) into listen mode, that's shocking.

    14. Re:The real question by Ol+Olsoc · · Score: 1

      > Unless you disassemble and inspect an IoT personal spying device, You must assume it has both a microphone and camera. Because it probably does. This Nest example pretty must rests my case.

      The fact that they deliberately expunged this from the publicly available specs pretty much confirms it was put in with malicious intent. The fact that it could, at any time, have had a mandatory update pushed to it that overrode the older software and put the mic (that wasn't listed anywhere) into listen mode, that's shocking.

      From the article:

      "All devices that come with the Google Assistant built in are designed with privacy in mind. Once the Google Assistant is enabled, the mic is always on but only listening for the hotwords “Ok Google” or “Hey Google”. Google only stores voice-based queries after it recognizes those hotwords. Voice data and query contents are sent to Google servers for analysis and storage in My Activity. Through My Activity, users are in control of their information. They can view or delete voice queries in My Activity."

      Translation:

      Oh shit, we were caught. When we were going to enable the Google assistant, the mic will always be on, and listening. All audio is sent to Google for analysis and surveillance purposes. So it's all good citizens, Google only has Google's best interests in mind.

      We really do need to face it - if it is IoT, it is a surveillance device, and will be used as exactly that.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  8. If you have a cell phone by Anonymous Coward · · Score: 0

    Why does it matter? Nearly everyone carries around a pocket-sized spy computer everywhere they go all day long and then leave them on the nightstand next to their bed at night.

    1. Re:If you have a cell phone by Anonymous Coward · · Score: 1

      Why does it matter? Nearly everyone carries around a pocket-sized spy computer everywhere they go all day long and then leave them on the nightstand next to their bed at night.

      Surprise AC peddles out tired "but UR cellphone" trope to justify mass insanity.

      If your faucet started leaking would it be ok if I drilled a hole in the supply line because it's leaking anyway?

      If an item turned up stolen from your home would it matter if more thieves showed up and stole everything the first thief didn't?

  9. What is the point by Anonymous Coward · · Score: 0

    Of smart devices?

    " will be able to operate as a pseudo-Google Home with just a software update."

    The same can be said of any computer with a microphone. So why not just use an actual computer that you control?

    1. Re:What is the point by AHuxley · · Score: 3, Interesting

      Ads. Tracking ads. Voice prints of known users talking about products and services.
      Got a dog? Voice prints of new people who are friends. The words and terms they use.
      The smart device is sold as a new product and service ready to respond and that is always on in the background.
      A computer feels like traditional product that is used when really needed.
      24/7 ads vs a few hours of web browsing.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re: What is the point by Anonymous Coward · · Score: 0

      You don't leave your computer on 24/7?
      Why are you even here?

    3. Re: What is the point by Anonymous Coward · · Score: 0

      In fairness, 4 of my 6 computers are laptops...

    4. Re: What is the point by Anonymous Coward · · Score: 0

      The nice thing about a traditional pc is that a dummy plug in the microphone jack disables internal mics.

  10. Creepy by Anonymous Coward · · Score: 0

    Just imagine if your girlfriend one day revealed she had a teddy bear with a camera she never told you about until you both decided to make a sex tape....

    1. Re: Creepy by Anonymous Coward · · Score: 4, Funny

      Imagine a girlfriend? This is slashdot

    2. Re: Creepy by Anonymous Coward · · Score: 0

      Imagine if you were dating someone and they told you they tried heroin once years back but it wasn't for them. Would you stop dating them? How about 10 times? How about 20 times? You probably wouldn't date a chick who has had 10+ heroin needles in her. Now, why the fuck would you date a modern slut who has had 10+ dicks in her?

  11. Yeah, sure... by HarrySquatter · · Score: 2

    Disabled or "disabled"?

    1. Re:Yeah, sure... by Anonymous Coward · · Score: 0

      I can't even! It's called differently abled, you shitlord!

    2. Re:Yeah, sure... by HarrySquatter · · Score: 1

      Cool story, edgelord.

    3. Re:Yeah, sure... by Anonymous Coward · · Score: 0

      "I'm not handicapped! I'm handi-capable!" --George Carlin

  12. not right by renegade600 · · Score: 2

    so I wonder how many other google products have hidden microphones??? what about their mesh router?

    1. Re:not right by Ol+Olsoc · · Score: 3, Insightful

      so I wonder how many other google products have hidden microphones??? what about their mesh router?

      Well, their business is exactly collecting as much data on you as they can, then selling it and making money. Care to hazard a guess? They're getting surveillance data on you that would make Microsoft blush.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    2. Re:not right by Anonymous Coward · · Score: 2, Insightful

      Well, their business is exactly collecting as much data on you as they can

      So far, so good...

      then selling it and making money.

      Oh, and you were doing so well.

      Google doesn't "sell" their data about you. That data, that's their golden goose. If they sell it, they've got nothing. No, what they sell is you. Or rather, your eyeballs and attention.

      People go to Google and say "Show my ad to enough people to earn me 100,000 additional sales". Google uses its data about you to determine whether you're likely to respond to that ad, then based on that it decides whether to show it to you. It's able to do this because of all the data it holds about you - but if it sold that data directly, then anyone else would be able to horn in on their market.

    3. Re:not right by Anonymous Coward · · Score: 0

      Is it sold in the U.S. only? In some countries the act of placing disguised listening devices near unsuspecting people comes with some serious charges and I don't think hiding the presence of a microphone from the buyer can be interpreted in any way positive.

    4. Re: not right by Anonymous Coward · · Score: 0

      Usually Europeans and Australians jump in quoting that law that states a product must be described exactly as it is before being purchased and if not it is illegal.

      So I hope they sue Google for more because Google/Alphabet isn't learning anything yet.

    5. Re:not right by terrycarlino · · Score: 1

      I've checked their website. It appears the Nest Secure is for now only available in the United States.

      Too bad. We can be sure the FTC, FCC, Justice Department, et. all will do nothing about it. If the European Union was involved I think we all know that Google would "'ave some ex'plaining to do."

    6. Re:not right by Anonymous Coward · · Score: 0

      OnHub has 7-13 antennas depending on model. The mesh one has 2 receive & 2 transmit antennas. The more antenna the better it can possibly spy on you. https://medium.com/@radiomaze/wifi-signals-enable-motion-recognition-throughout-the-entire-home-5c4dd184627c
      Human Activity Detection Using WiFi Signals and Deep Networks
      https://www.youtube.com/watch?v=rDC34awd0f8

    7. Re:not right by dwpro · · Score: 1

      The number of layers abstracted/aggregated are relevant but not exculpatory. Telling how many many of X are in area Y with a propensity for Z can give you zero or perfect accuracy on an individual, depending on the question and prior knowledge. We should all be vigilant of _any_ use of our data, as it can be combined in nefarious ways that we cannot imagine.

      --
      Millions long for immortality who do not know what to do with themselves on a rainy Sunday afternoon. -- Susan Ertz
    8. Re:not right by Ol+Olsoc · · Score: 1

      Well, their business is exactly collecting as much data on you as they can

      So far, so good...

      then selling it and making money.

      Oh, and you were doing so well.

      Google doesn't "sell" their data about you. That data, that's their golden goose. If they sell it, they've got nothing. No, what they sell is you. Or rather, your eyeballs and attention.

      People go to Google and say "Show my ad to enough people to earn me 100,000 additional sales". Google uses its data about you to determine whether you're likely to respond to that ad, then based on that it decides whether to show it to you. It's able to do this because of all the data it holds about you - but if it sold that data directly, then anyone else would be able to horn in on their market.

      Funny, that's what I call selling my data

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  13. creeeeeepy by Anonymous Coward · · Score: 0

    not listed in spec! Lawsuit?

  14. Re: Some people buy hardware for what is not conta by Anonymous Coward · · Score: 0

    But I would buy one. And there are more people like me than you, so we win.

  15. My programmable thermostat by bobstreo · · Score: 1

    has 5 or so presets, cost nothing (thanks natural gas company) and doesn't have any microphones, or wifi.

    If I had a Nest, I'd probably break out the dyke cutter and remove the microphone.

    1. Re:My programmable thermostat by Anonymous Coward · · Score: 0

      FYI: Dyke cutter = ATM machine = DNS server

      Just get a pair of dykes...

    2. Re:My programmable thermostat by KingMotley · · Score: 1

      If I had a Nest, I'd probably break out the dyke cutter and remove the microphone.

      And I would laugh my ass off after you thoroughly destroy your nest thermostat because you failed to read the summary which is about the nest secure, which is a completely different product.

  16. Summary is biased. by msauve · · Score: 1, Insightful

    "according to the official tech specs, there's no onboard microphone"

    The tech specs not listing a microphone is very different than the tech specs saying "there is no onboard microphone," as claimed.

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
    1. Re:Summary is biased. by gweihir · · Score: 4, Informative

      Tech specs, by their very nature, must list every major feature present. That list _must_ be complete. Anything major not listed must be absent. And the ability to record audio (even is "disabled" in software) is obviously a major feature in a device you put in your home. Also obviously, they do not list everything that is missing as that would be infeasible. For example, this device likely does not contain an ice-cream machine or a toilet roll holder either. Would you also expect that to be listed as absent?

      Do you see how wrong your statement is?

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    2. Re:Summary is biased. by msauve · · Score: 2, Insightful

      Oh, bullshit. The microphone isn't a feature until it starts being used. It's not uncommon for devices to have components which the engineers think might be useful in the future, but never are.

      For instance every (?) Broadcom based cellphone SoC supports FM radio functionality, but only those manufacturers who enable it list "FM radio" as a feature.

      If they'd listed a microphone, people have started complaining that they couldn't use it.

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    3. Re:Summary is biased. by gweihir · · Score: 3, Insightful

      The microphone is a feature as soon as it can be activated by software. How that activation happens is immaterial. It changes the status of the device to "listening device". Your SoC example is deeply flawed.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    4. Re:Summary is biased. by msauve · · Score: 1

      LoL.

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    5. Re:Summary is biased. by Anonymous Coward · · Score: 1

      Tech specs, by their very nature, must list every major feature present. That list _must_ be complete. Anything major not listed must be absent.

      Oh please. Why is that post being up voted?* Please quote the law which requires this. Please quote the legal definition of "major feature". Tech specs have no force of law behind them other than false advertising. MSDS do, but we're not talking about those.

      https://en.wikipedia.org/wiki/Datasheet

      *I had no idea there were this many brainless people on slashdot..

    6. Re:Summary is biased. by gweihir · · Score: 0

      Obvious troll is obvious.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    7. Re:Summary is biased. by Anonymous Coward · · Score: 0

      Indeed, your stupidity is pretty funny. Keep laughing.

    8. Re:Summary is biased. by Anonymous Coward · · Score: 0

      Listing a microphone that doesn't work would be false advertising. Even implying that it may one day work could be a serious issue with consumer law in several countries.

    9. Re:Summary is biased. by Anonymous Coward · · Score: 0

      It's getting harder these days to tell stupid people from stupid trolls.

    10. Re:Summary is biased. by MemeRot · · Score: 1

      Me to Nest:
      Ok Google, remind me when this thing can dispense toilet paper

    11. Re:Summary is biased. by Khyber · · Score: 1

      "Oh, bullshit. The microphone isn't a feature until it starts being used."

      So you'll have no problem with me selling you a device, not saying it has a microphone, and then listening to you at will with a surreptitious update. Thanks, you fucking corporate lapdog. You're one of the reasons we have all of this spying shit now.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    12. Re:Summary is biased. by Khyber · · Score: 1

      "Please quote the law which requires this"

      Truth in Advertising, FTC Regulations, fucktard. Specifically this would fall under false and misleading advertising by omitting the fact that there is a hidden microphone. Informed consumers would likely not purchase this if they knew. I certainly would not, and thus that meets one of the elements necessary for the law.

      Try again when you have actual court experience.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    13. Re:Summary is biased. by msauve · · Score: 1

      So, English isn't your native language, so you think that "listening to you" isn't "being used." Thanks, you fucking logic impaired idiot.

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    14. Re:Summary is biased. by Anonymous Coward · · Score: 0

      It's an increasingly common thing for features to be bundled but deactivated. A lot of cars these days come with additional features which you can pay the delaer $$$ for. After you pay your money he simple connects his computer and enabled them. Oracle database features work like this, big iron hardware works exactly like this. Lots of cheap hardware is basically the same reference boards with the bits they don't use just not activated (think about lot of the original i486SX processes).

    15. Re:Summary is biased. by Anonymous Coward · · Score: 0

      Oh, bullshit. The microphone isn't a feature until it starts being used.

      You're absolutely right: it's not a feature. It's an undocumented security vulnerability!

    16. Re:Summary is biased. by Anonymous Coward · · Score: 0

      When you buy a desktop computer, it's not plugged in so doesn't have any features?

    17. Re:Summary is biased. by Anonymous Coward · · Score: 0

      truth of advertising only requires you to be truthful with the statements you make, not with the statements you aren't making.

      Otherwise all advertisement is required to show everything about a device, full and complete, enough to make the device itself from a single advertisement.

    18. Re: Summary is biased. by Anonymous Coward · · Score: 0

      Having hidden potential audio recording devices without disclosing that fact is also liable for severe criminal charges in at least ~40 countries and is severe enough to pierce the corporate veil and impose criminal charges onto company individuals as well.

    19. Re:Summary is biased. by gweihir · · Score: 1

      Well, yes. Also because people these days are often unable to realize how little they actually know and understand. Probably an effect form opening up education to everybody and then dumbing it down so much that anybody can actually get a degree at the end.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    20. Re:Summary is biased. by Anonymous Coward · · Score: 0

      "The microphone isn't a feature until it starts being used."

      Yes, it is. For most devices, I would actively avoid purchasing them if I knew they contained a microphone whether or not they're currently being used.

      That makes it a major (mis)feature. That Google did this is just plain evil.

  17. FYI they are also renaming the device by 93+Escort+Wagon · · Score: 3, Funny

    Google announced that, going forward, the thermostat will be called the:

    Nest “Secure” ;-)

    --
    #DeleteChrome
    1. Re:FYI they are also renaming the device by Anonymous Coward · · Score: 0

      Google announced that, going forward, the thermostat will be called the:

      Nest “Secure” ;-)

      isnt “customer funded surveillance device” a more accurate name?

    2. Re:FYI they are also renaming the device by Hydrian · · Score: 1

      More like Nest Secure - Securing your data for us.

      --
      No good deed goes unpunished.
  18. Re:Some people buy hardware for what is not contai by Anonymous Coward · · Score: 0

    At least it's easy enough to cover a camera. If it's not in plain sight, it won't have a view at all.

    A microphone however could be internal and practically impossible to get to without opening up the device.

  19. The microphone has been in an inactive state... by Anonymous Coward · · Score: 0

    The microphone has been in an inactive state since the release of the Nest Secure, Google says.

    Prove it.

  20. Pure Evil by Anonymous Coward · · Score: 0

    They should be sued for such unethical behavior. What prevents them from adding
    a camera for select customers? I will not trust them anymore.

    1. Re: Pure Evil by Anonymous Coward · · Score: 0

      Yeah that burger you just ate...
      it's taking pictures of your colon for a fetish site.
      Deal with it.

  21. Re: Some people buy hardware for what is not cont by Type44Q · · Score: 1

    Quantity over quality: not a winner; not now; not ever.

  22. that's how they got nixon! by Joe_Dragon · · Score: 4, Funny

    that's how they got nixon!

  23. "disabled" = "can be turned on any time" by gweihir · · Score: 1

    At least unless there is a physical switch. No? Then this counts as deceptive and malicious. These evil f****** are getting more bold.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  24. Slashdotters Need To Learn by Anonymous Coward · · Score: 5, Insightful

    Slashdotters need to learn and realize that the average consumer - read the vast vast majority of people - don't give a flying-rat-fuck about security or privacy. They care about shiny new toys and personal convenience and they do not care what the price.

    These major services/vendors have figured it out. They understand that they can do whatever the fuck they want, so long as it's convenient or shiny new for the end user. The end user/consumers gleefully hand over their money, their security, and their privacy to any and all of these companies for shiny new or convenient.

    You people worrying about microphones listening in, cameras recording activities, big data tracking your every fucking activity on a global scale, you're very much in the minority. The MASSIVE majority don't just fail to understand your odd and suspicious concerns, they are angered by your belligerent resistance to devices and services such as completely unnecessary $200 thermostats that track the consumer's habits, or Smart TVs that track viewership, feed targeted ads, and listen in on household conversations.

    To the rest of the world, you're a nutter deserving of scorn, ridicule, and ostracization.

    1. Re:Slashdotters Need To Learn by WaffleMonster · · Score: 1

      Slashdotters need to learn and realize that the average consumer - read the vast vast majority of people - don't give a flying-rat-fuck about security or privacy.

      What people like you need to learn to realize is that the only difference between a slashdotter and average consumer is knowledge of how the sausage is made.

    2. Re:Slashdotters Need To Learn by marcle · · Score: 1

      Oh so sad but oh so true.

    3. Re:Slashdotters Need To Learn by Anonymous Coward · · Score: 0

      Slashdotters need to learn and realize that the average consumer - read the vast vast majority of people - don't give a flying-rat-fuck about security or privacy.

      What people like you need to learn to realize is that the only difference between a slashdotter and average consumer is knowledge of how the sausage is made.

      What people like you need to learn to realise is the the only differences between a slashdotter and the average consumer are very basic computer skills and an interest in white supremacy.

    4. Re:Slashdotters Need To Learn by AmiMoJo · · Score: 1

      This used to be true but people are learning to be more careful now. Facebook/Cambridge Analytica seems to have been the watershed. When Facebook started running real-world ads trying to restore trust people realized just how bad it was.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    5. Re:Slashdotters Need To Learn by ceoyoyo · · Score: 1

      They care. They're just really good at ignoring potential problems and only reacting when something happens.

    6. Re:Slashdotters Need To Learn by ceoyoyo · · Score: 1

      Ah, the nineties were a glorious time. Sadly this hasn't been true for at least a decade.

    7. Re:Slashdotters Need To Learn by Anonymous Coward · · Score: 0

      Slashdotters need to learn and realize that the average consumer - read the vast vast majority of people - don't give a flying-rat-fuck about security or privacy.

      We already know this. Now what? Or did you just want to heap scorn on people for caring?

    8. Re:Slashdotters Need To Learn by Anonymous Coward · · Score: 0

      bullshit, What facebook/Cambridge analytica taught the companies is that temporary damage control works as people will become distracted by the next outrageous thing (the wall, school shootings, global warming, sexism, race relations, etc etc.)

      If the problem with FB was actually a trurning point then why did nothing change other than some real world damage control? why did none of their policies actually change? Hint: because thats how they make money and the people at the top making money dont care if facebook fails as they are already investing in the next thing that will make them more money.

      You can like to believe that people are learning and changing but if that is so then why are we still arguing about racism and sexism instead of just stopping it? and yes it is easy to stop, simply by making judgement on those features illegal, but people will argue that the pendulum needs to swing to the other side first to make it even before we stop it. Reverse racism is still racism, so what happens to a swinging pendulum? it keeps swinging! Corporations understand this and as long as they keep the pendulum swinging they can focus on what they are doing while the masses are too busy focused on the pendulum.

      The mob is not waking up and it never will. The watershed moment will be when we the people decide that a corporation is less important than the individual instead of the opposite. Until then, expect things to continue on as planned and history to keep repeating itself until we have taken away this planets ability to sustain our species.

      CAP: vultures

    9. Re:Slashdotters Need To Learn by Anonymous Coward · · Score: 0

      Normies are easily manipulated and abused, but that doesn't mean it's right to do so. If you have an ethical bone in your body, at the very least you should be thinking "that's just not right" when you hear about how awful Google is to consumers. It's up to us to push back on these things, because the masses will only complain when the rope is too tight around their neck.

  25. Re: Some people buy hardware for what is not conta by Anonymous Coward · · Score: 0

    What, exactly, do you think you're "winning"?

  26. Re: Some people buy hardware for what is not conta by Anonymous Coward · · Score: 0

    No, you don't win. Everybody loses, that's a more fitting description.

  27. "Inactive" microphone...says who? by PseudoThink · · Score: 1
  28. Re:Some people buy hardware for what is not contai by gweihir · · Score: 3, Insightful

    Just expect that camera to be cleverly hidden in the future.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  29. Re: Some people buy hardware for what is not conta by gweihir · · Score: 1

    Yes, stupid wins by the numbers. In all other regards, people like you lose.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  30. Techies care out of self preservation by ghoul · · Score: 1

    The mob may be distracted by shiny toys today but at some point when the snooping gets too much the mob will get ugly and when they start the pogrom they will go after all techies not just the ones at NEST. Hence we crib about privacy and try to prevent overreach.

    --
    **Life is too short to be serious**
    1. Re: Techies care out of self preservation by Anonymous Coward · · Score: 0

      Really truly highly doubt that will ever happen. If you're too stupid to realize you're the frog in the pot of water that's slowly being heated by some unknown forces... by the time you realize you're boiling - you're just a spirit floating over your corpse thinking "WTF just happened to my hot tub! Maybe it was my selfie stick?"

  31. How can you trust them? by Anonymous Coward · · Score: 0

    confirming the built-in microphone in the Nest Guard base system that's not listed on the official spec sheet at Nest's site. The microphone has been in an inactive state since the release

    Wow, so, Google has shipped devices with hidden microphones which are left off the spec sheet ... but they've all been disabled ... we promise, we'd never do anything like hide a microphone in a device.

    I'm sorry, but there is so little goodwill to Google these days from me, that I'm not willing to take that at face value.

    Why would I believe Google when they tell us these days that they're totally not evil? Increasingly, it's hard to see them as anything but evil.

    I'm afraid I'm not believing them. Why would I when every time I turn around I see more stories about them tracking you no matter if you opt out or not?

  32. Re: Some people buy hardware for what is not conta by zlives · · Score: 2

    dubious use of "win" here.

  33. Alert: Google listen to secret Nest Mic for months by Anonymous Coward · · Score: 0

    But not that they have obtained the confidential information they were looking for, they are making the mics public. In other news, Google appears to be getting some surprise positive rulings from certain judges who own Nest kit.

  34. better is no internet connection by dltaylor · · Score: 2

    If you buy a TV that has WiFi, block the MAC; if it has wired, just don't connect it.

    I have an old WD box for Netflix, which has neither camera nor microphone.

    1. Re:better is no internet connection by bagofbeans · · Score: 4, Insightful

      You can't block the MAC on all your neighbours' wifi systems, and you can't stop the TV breaking the weakest password protection it finds.

      I remind about the Sony CD rootkit debacle.

    2. Re:better is no internet connection by LostMyAccount · · Score: 1

      I always wondered if there had been any wifi-equipped devices that also had WPA breaking automation in them to gain access to networks when they otherwise couldn't.

      But at this point what you have to stop now are cheap cellular modems.

    3. Re:better is no internet connection by Shikaku · · Score: 1

      All the smart tvs in the future are gonna have 5G connections that are "free" so that they can still phone home and do whatever they want unless you live in a faraday cage or far away enough from a 5G cell phone tower.

    4. Re: better is no internet connection by Anonymous Coward · · Score: 0

      Pry it the fuck out, and if the TV stops working and they won't refund it, take the fuckers to small claims for violating Magnuson-Moss Warranty Act.

    5. Re:better is no internet connection by AmiMoJo · · Score: 1

      You are going to have to open it up and unplug the wifi antenna, and attach an attenuator in its place.

      Or just install tinfoil wallpaper in your living room, but I've heard that may amplify the mind control rays.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    6. Re:better is no internet connection by skegg · · Score: 2

      >> unless you live in a faraday cage

      Heh heh, I like that.

      >> or far away enough from a 5G cell phone tower

      From what I hear isn't that, like, a metre?

    7. Re:better is no internet connection by Anonymous Coward · · Score: 0

      Or just snip the line to the cellular antenna.... same thing I did on our Hyundai sante fe so that it would stop sending my location to a 3rd party service over cell signal.

    8. Re:better is no internet connection by Anonymous Coward · · Score: 0

      what if the tv manufacturer includes credential for xfinity hotspots, which are probably in 1 in 3 houses in america.

    9. Re: better is no internet connection by wolf12886 · · Score: 1

      Interesting thought. However this is one level of malicious sofistication I think we haven't reached yet. At least not for consumer devices.

  35. Re: The microphone has been in an inactive state.. by Anonymous Coward · · Score: 0

    That's like saying "it was released always disabled"

    It never mentioned it wasnt ever activated.

  36. Re:Some people buy hardware for what is not contai by Anonymous Coward · · Score: 0

    Future? What makes you think they're not there now?

  37. i had a nest with hidden microphone by Anonymous Coward · · Score: 0

    but creimer came over to borrow a bucket of butter and farted and blew out the microphone

  38. It's funny how few people haven't read 1984 by Anonymous Coward · · Score: 0

    Or thought it was a good idea to have a telescreen put in their home, and actually pay for it. I never realized people were this gullible.

  39. No one did a tear down? by Anonymous Coward · · Score: 0

    No one did a tear down? You would think of someone found that they would be posting about it everywhere. It so people just expect that now?

  40. THIS IS NOT ABOUT THE THERMOSTAT! by Anonymous Coward · · Score: 0

    For people who don't read the summary, this is about the security system, not the thermostat.
    Enough with the comments about the thermostats as if this is what the story is about.

    1. Re:THIS IS NOT ABOUT THE THERMOSTAT! by HiThere · · Score: 1

      And since this is only about one Nest product, you should trust the others.

      Granted, the thermostat thing was sparked off by the Honeywell thread earlier, but why should you trust the Nest one?

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  41. Just a software update by Anonymous Coward · · Score: 0

    This unlisted mic is how the Nest Guard will be able to operate as a pseudo-Google Home with just a software update.

    This is hilarious. A compromised thermostat can be made into a surveillance device with just a software update by hacker.
    Where do I sign up for this Google gadget?

    1. Re: Just a software update by Anonymous Coward · · Score: 0

      The nest smoke alarm has a microphone also. It uses it to test whether the alarm is working.

  42. just like in every cable box, since forever... by Anonymous Coward · · Score: 0

    telescreens ftw!

  43. Ease to hide at less than 3x2mm by Anonymous Coward · · Score: 0

    Easy to hide, at sizes like 2.75 x 1.85 x 0.95mm, could be in just about anything, and would be hard to spot even if people would bother to look (and the device could be opened without damage). Example

  44. Re:Some people buy hardware for what is not contai by Sir+Holo · · Score: 2

    You can't buy a good 4k display that does not have a microphone. I said I wouldn't buy a display with a mic or camera, but I did. I just never plug an ethernet cable into it, and my wifi is white-listed to omit the display.

  45. Nest Secure is NOT Nest Thermostat by Alascom · · Score: 1

    There seems to be a lot of confusion by folks commenting.

    Nest Secure is a home security hub.
    Nest Thermostat is a thermostat.

    The Nest Secure "base station" is a keypad device with various sensors that acts as both a security component as well as a security "base station". Features of the Nest Secure include the ability to listen for "breaking glass", which can be an indicator of a break-in when the alarm is set. Other Nest security components (such as door/window & motion detectors) communicate back to the Nest Secure "base station".

    So anyone buying a Nest Secure already knows it listens, as well as tracking their motion, opening/closing of doors, along with whenever they leave or come home... That is the PURPOSE of the damn thing.

    As far as inactivate hardware features go - this is not uncommon. The Google Hub shipped as a wifi router, but included additional hardware that could be "software activated" later allowing the Hub to communicate with other protocols such as zigbee & bluetooth (never was). My Tesla model S shipped in 2013 with "inactivate" hardware, such as an onboard wifi AP & 4G LTE that would be enabled at "some future time" (never was).
    .

    1. Re:Nest Secure is NOT Nest Thermostat by Anonymous Coward · · Score: 0

      Enabled or active?
      Sometimes the hardware is actually turned on, but as the user, you're just not allowed to access it.
      Integrated wireless devices, yuck yuck yuck...

    2. Re:Nest Secure is NOT Nest Thermostat by Anonymous Coward · · Score: 0

      Sure, but the thermostat version also has a hidden microphone. Why wouldn't it? It already has an infrared+ camera, and possibly other sensors beyond mere temperature.

    3. Re:Nest Secure is NOT Nest Thermostat by terrycarlino · · Score: 1

      Since the Secure uses the microphone as a breaking glass detector I'd say it was active, but didn't have the software to phone home like a Google Home puck or phone app.

      So yep. It's been turned on, but the user couldn't access it for speach recognition.

    4. Re:Nest Secure is NOT Nest Thermostat by terrycarlino · · Score: 1

      The best reason to believe the Thermostat doesn't have a microphone is that it was developed before Google bought Nest. So since we might assume Nest wasn't originally in the data spy business, it make sense to conclude there is no microphone.

      Except didn't a new version of the Nest Thermostat come out after Google bought them? Oops!

  46. Just one microphone? by markjhood2003 · · Score: 1

    I was under the impression that these far-field voice assistants required an array of microphones to do things like beam forming, noise reduction, acoustic echo cancellation, etc. The Amazon Echo has 7 microphones in a ring.

    So there's either more than one hidden microphone or Google is rolling out a feature that's not really going to work well for voice assistance. I have to wonder what the real purpose of this update is.

    1. Re:Just one microphone? by nullchar · · Score: 1

      Technically correct, which is the best kind of correct!

      1, 7, 23, who cares. Still a "microphone" for the purpose of recording, and has been recording for awhile. Google didn't use the source audio, but everyone else did.

  47. Re: Some people buy hardware for what is not cont by Anonymous Coward · · Score: 0

    Breeding rights with the plumpest hogs in the land. Netflix and chill bro!

  48. transducers are coming and going by JackSpratts · · Score: 2

    just a reminder: ALL sound transducers, speakers and mics, do double duty. 50 years ago when sennheiser debuted their legendary 414s, they introduced headphone drivers to the world that were essentially microphones repurposed as tiny on-the-ear lightweight speakers and personal sound reproduction would never be the same. before long there wasn't a radio station or recording studio without the lightweight little hi fidelity wonders. and the reverse is also true. the "regular" consumer speaker products installed in your laptops, tablets, internet radios and smart tvs make dandy microphones and are often used as such by hobbyists and modifiers. if somebody is clever enough and is motivated enough, they can listen in on you through your supposedly micless gear via your speakers, with transmissibility approaching microphones, because that's what they essentially are.

    - js.

    1. Re:transducers are coming and going by Cmdln+Daco · · Score: 1

      When I was a kid, my next door neighbor and I strung a pair of wires from my window to his. We hooked a loudspeaker to the wire pair at each end. Voila, a bi-directional communications system. Either end could listen closely at the speaker to hear what was going on at the other end.

    2. Re:transducers are coming and going by Anonymous Coward · · Score: 0

      just a reminder: ALL sound transducers, speakers and mics, do double duty. 50 years ago when sennheiser debuted their legendary 414s, they introduced headphone drivers to the world that were essentially microphones repurposed as tiny on-the-ear lightweight speakers and personal sound reproduction would never be the same. before long there wasn't a radio station or recording studio without the lightweight little hi fidelity wonders. and the reverse is also true. the "regular" consumer speaker products installed in your laptops, tablets, internet radios and smart tvs make dandy microphones and are often used as such by hobbyists and modifiers. if somebody is clever enough and is motivated enough, they can listen in on you through your supposedly micless gear via your speakers, with transmissibility approaching microphones, because that's what they essentially are.

      - js.

      Just a reminder that an attacker would also need to find some way of connecting the speaker to an input. They would also need to upload some highly advanced shellcode capable of acting as an analogue pre-amp, which would definitely be very "motivated and clever".

  49. drillhere.org by Cmdln+Daco · · Score: 1

    This is just another instance of a situation that can be answered by an organization that puts up a website called 'drillhere.org'. This site contains detailed information about how and where to drill into your gadget to disable functionality you don't want.

    It would have things like:

    "To disable the microphone in a Nest Secure thermostat, drill a hole xxx deep using a #56 drill bit and angle X.X."

    Usually there's a precise way to take care of 'problems' like this hidden microphone, and people have a right to know how to fix said problems.

  50. Re: Some people buy hardware for what is not cont by Anonymous Coward · · Score: 0

    And I would buy one and cover the camera with black tape.

  51. what about your phone?!? by Anonymous Coward · · Score: 0

    Your phone has a mic in it. Your GM car has a mic intended for you to call for help. Any car with BT has a mic in it.

    What makes you think those can't be remotely activated?

    In fact, all US cell phones have an FM radio built in! But the phone companies won't let us use them. They easily could, with a quick software update.

    Lots hidden features, all around

  52. Re:Some people buy hardware for what is not contai by CaptQuark · · Score: 1

    Looking over the specs of a Samsung 4K TV shows it has a microphone in the remote but not in the TV. Assuming that is true, a universal remote and removing the batteries in the Samsung remote should take care of that.

    ---

  53. Re: Some people buy hardware for what is not conta by Anonymous Coward · · Score: 0

    In many cases the mic is in the "smart" remote. Ditch that remote and use the superior "dumb" one, job done.

  54. In older times was more difficult to spt by havana9 · · Score: 1

    In the older time to place a microphone somewhere hou have had to be really clever, like one that invents elecronic musical instruments: Theremin's bug now ir way way easier to russians to spy, because we have tons of micophones in appliance connected to a communication network...

  55. Disabled microphone? by Anonymous Coward · · Score: 0

    Seriously, what a misleading title. How does anyone know the microphone was really disabled?

  56. Re:Some people buy hardware for what is not contai by skegg · · Score: 1

    Same here: when I needed to buy a new TV one of my few criteria was "NOT a smart TV".

    And I predict this rule will stand when I need to buy another one.

    My choices were constrained, but so be it.

  57. Re:Some people buy hardware for what is not contai by skegg · · Score: 1

    >> Looking over the specs

    Re-read the summary !

  58. Trust in Google is insanity by Anonymous Coward · · Score: 0

    If you place any shred of trust in any Google device, heck, any smart cloud-connected device, you should check with a mental health specialist.

    Every single device you own is now a cleverly disguised piece of espionage gear, actively and uncontrollably ratting you out to the company and by subpoena or by wiretap also to authorities, 24/7, 365 days. That is no hyperbole. It is that. And companies are intentionally designing their products to do as much surveillance as possible, opt-outs be as little as possible, data collection agreements to be mandatory and pervasive.

    If you think that's hyperbole, buy a new TV and count the number and amount of "agreements to data collection". Disagree with any data collection and you will notice that your new TV will not display the most basic TV signal. Horrible.

  59. There might be a microphone? by Anonymous Coward · · Score: 0

    Someone grab a screwdriver and look inside the thing. This isnt rocket science. A microphone shold be rather obvious.

    1. Re:There might be a microphone? by ledow · · Score: 1

      Really?

      Smartphone microphones are deceptively tiny nowadays. Sometimes the only reason you know they are there is because of a small hole.

      They can be surface mount, literally a mm or so, and not at all obvious as being a microphone (but if they aren't being deliberately hidden, they likely have acoustic-friendly surroundings, like plastics funnels and shields around them).

      That was the mic on an iPhone 4, for instance:

      https://www.ifixit.com/Teardow...

      You have now reached the point (actually a while ago) where technology is so tiny, pervasive and cheap that you don't actually have a clue what is in anything any more. You can get spy cams that you can barely tell are cameras - so tiny they rival anything that Hollywood ever featured in a tie-pin. And you can buy them for next-to-nothing from a thousand Chinese sites.

      Nobody knew this thing was there because either a) nobody looked or b) nobody who looked ever saw it.

      Now consider that almost everything gets teardowns, repairability ratings, reverse-engineered, etc. nowadays... it's unlikely that nobody ever looked.

  60. From now on all devices will have a Microphone by mysidia · · Score: 2

    Microphones and the respective chips are so inexpensive, small, and low power now: that there's no reason not to include them
    on every device for possible future capability (or covert data gathering capability).

    If unused by the product... it will just be unlisted on the spec sheet, and not software enabled.

    Expect pretty soon: even simple appliances like the Smoke Detectors in every room, Electric Blankets, Vibrators, Light Switches, Wall Outlets, Toilets, Showers, Bathtubs, Faucets, Refrigerators, Microwaves, Coffee Pots, Dishwashers, Washing machines, Ovens, Stoves, etc... to all include a tiny logic board, wireless internet capability, and a little microphone and speaker: maybe eventually a tiny little camera to go with the microphone.

  61. Eavesdropping, Bugging - Who's researching the law by eepok · · Score: 1

    Assume that someone deceives you and convinces you to unwittingly install a microphone in your home that they can turn on at any time. They haven't actually turned it on, no conversation was heard/recorded. Is it still officially bugging/eavesdropping?

    Who's doing the legal deep dive on this?

  62. Nest Protect by Chaldean42 · · Score: 1

    Now I'm curious if they'll do the same with their line of smoke/CO detectors. It's already known that they contain microphones to allow them to "test" the alarms once a month.

  63. Next Release by Xarin · · Score: 1

    The unlisted video camera is enabled.

  64. Re: Some people buy hardware for what is not cont by HiThere · · Score: 1

    Unfortunately, some of the cameras recently reported for "smart phones" are reported to work through the screen. (I'm not sure this is the "notch", though I suppose it could be marketing speech for that.)

    If this is doing what the article said, then it might be a bit difficult to cover the camera.

    --

    I think we've pushed this "anyone can grow up to be president" thing too far.
  65. WAIT! by TheStickBoy · · Score: 1

    Nest sold a product....
    to be placed in private homes....
    that had a microphone...
    and they purposefully hid this fact...

    I don't even....anymore...I....ugh.

  66. Re:Eavesdropping, Bugging - Who's researching the by terrycarlino · · Score: 2

    Pretty much nobody is going to do anything about this. There is no will among regulators to do anything about this. Don't blame the Republicans. If the Democrats were in control it would be no different. Or perhaps blame them both. It won't get you anything, but you can feel justified they're all slimeballs.

    If a lawyer can make a class action lawsuit out of this, perhaps something will happen. This system came out about a year and a half ago. I didn't really see it in stores until last year. How many units have they sold? I've read that you can do a class action with as little as 40 people. Nest claims to have sold 11 million items, but I would be surprised if more than tens of thousands Nest Secures have been sold. It runs about $300. So that's like what $3 million buck ber 10,000 consumers in play? Not counting penalties. Is that enough for a set of high priced lawyers to take them to court for a protracted legal battle? I don't think so, but what do i know?

  67. So, yet another example by Anonymous Coward · · Score: 0

    Yet another example of how foolish it is to trust ANYTHING from Google.

  68. Re:Some people buy hardware for what is not contai by pjbgravely · · Score: 1

    Apple patented a camera that was embedded in the screen. I never heard anything about it since. I wonder if they started using them but never told anyone.

    --
    Star Trek, there maybe hope.