Slashdot Mirror


Nest Secure Has an Unlisted, Disabled Microphone (androidauthority.com)

An anonymous reader quotes a report from Android Authority: Owners of the Nest Secure alarm system have been able to use voice commands to control their home security through Google Assistant for a while now. However, to issue those commands, they needed a separate Google Assistant-powered device, like a smartphone or a Google Home smart speaker. The reason for this limitation has always seemed straightforward: according to the official tech specs, there's no onboard microphone in the Nest Secure system. However, Google just informed us that it is right now rolling out Assistant functionality to all Nest Secure devices via a software update. That's right: if you currently own a Nest Secure, you will be able to use it as a Google Home very soon. That means somewhere in the Nest Guard -- the keypad base station of the Nest Secure -- there might be a microphone we didn't know existed. Either that or your voice commands are going to be heard by another product (like your phone, maybe) but Assistant's output will now come from the Nest Guard, if you happen to be in the range of that device. UPDATE: Google has issued a statement to Android Authority confirming the built-in microphone in the Nest Guard base system that's not listed on the official spec sheet at Nest's site. The microphone has been in an inactive state since the release of the Nest Secure, Google says. This unlisted mic is how the Nest Guard will be able to operate as a pseudo-Google Home with just a software update.

34 of 207 comments (clear)

  1. unlisted microphone? by Anonymous Coward · · Score: 5, Insightful

    look, i just want a warm living room when i come home from work

    can we fuck off with this creeping and creepy featuritis?

    1. Re:unlisted microphone? by Anonymous Coward · · Score: 5, Insightful

      a 'smart' thermostat needs no camera, needs no microphone. needs no 'cloud' backing it up.. just a little locally run code, a source for local weather conditions, forecasts and date/time.. the national weather service and nist (and other countries' equivalents) provide those. for free.. with no creepy factor.

      anything that CAN run locally.. SHOULD be run locally. this cloud dependency simply for the sake of 'the cloud' (and data gathering) is total bullshit.

    2. Re:unlisted microphone? by Lab+Rat+Jason · · Score: 4, Funny

      What are the odds that a government, or other state sponsored entity already knew about this... and already updated your software?

      Asking for a friend...

      --
      Which has more power: the hammer, or the anvil?
    3. Re:unlisted microphone? by SuseLover · · Score: 2

      Yes, and the masses will still purchase and gobble this stuff up so it will become even more pervasive. They just don't care or see the problem with it.

      I'm having a hell of a time finding IP cameras that do NOT use the cloud. You can't even tell if you read the specs sometimes.

      If I were smart I'd startup a similar company that "features" no cloud connections for the informed market.

  2. Good thing we can trust them with our data by Anonymous Coward · · Score: 2, Funny

    id hate to think some company would install a secret microphone in peoples home and then also secretly work with the chinese government or something like that

    1. Re: Good thing we can trust them with our data by Anonymous Coward · · Score: 2, Insightful

      There's always some idiot who thinks "B...b...b...but I don't have anything to hide!"

  3. LOL by strikethree · · Score: 3, Funny

    Permit me to say: LOL

    I am shocked, shocked I say. ;)

    --
    "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
    1. Re:LOL by gweihir · · Score: 2

      I find this exceptionally funny. People are _dumb_ to trust these companies.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  4. Some people buy hardware for what is not contained by bugnuts · · Score: 5, Insightful

    I will not buy a TV with a video camera.

    I'd be furious if I found out my TV had one, that only needed a software update to activate.

  5. That does it! by PPH · · Score: 2, Funny

    I'm putting my old mercury bulb thermostat back in.

    --
    Have gnu, will travel.
  6. The real question by Anonymous Coward · · Score: 5, Insightful

    Is how many other devices have clandestine microphones unbeknownst to the owners?

    How can you trust anything from any of these tech companies. They all spy on you.

    1. Re:The real question by argStyopa · · Score: 2

      Genuine question: anyone have any idea how "average consumer" or even "moderately tech-able /. poster" could identify this shit?

      Or, failing that, does anyone know if there's a way to, I dunno, strip out UPSTREAM data from a specific device in your router settings? I assume that would make most devices that use ethernet connections non-functional because they wouldn't be able to ack anything legitimate.

      --
      -Styopa
    2. Re:The real question by Chelloveck · · Score: 2

      Without disassembling the device there's really no way to tell. The best you can do is check if the case has a hole that looks suspiciously like a microphone hole, but that's going to be pretty error prone. It's still easy to put a mic somewhere that doesn't have an obvious hole, or have what looks like a mic hole that doesn't actually have a mic mounted.

      It's trivial to configure a router to not pass upstream traffic from a particular device, but that's pretty much the same as not having it on the network at all. That's really pointless for a Google Home type of device. It has almost no local capability other than to listen for its keyword. Everything else it does is cloud-based. I don't know if Nest Secure can function disconnected from the net or not, but even if it can it's going to be well and truly hobbled.

      --
      Chelloveck
      I give up on debugging. From now on, SIGSEGV is a feature.
  7. Yeah, sure... by HarrySquatter · · Score: 2

    Disabled or "disabled"?

  8. not right by renegade600 · · Score: 2

    so I wonder how many other google products have hidden microphones??? what about their mesh router?

    1. Re:not right by Ol+Olsoc · · Score: 3, Insightful

      so I wonder how many other google products have hidden microphones??? what about their mesh router?

      Well, their business is exactly collecting as much data on you as they can, then selling it and making money. Care to hazard a guess? They're getting surveillance data on you that would make Microsoft blush.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    2. Re:not right by Anonymous Coward · · Score: 2, Insightful

      Well, their business is exactly collecting as much data on you as they can

      So far, so good...

      then selling it and making money.

      Oh, and you were doing so well.

      Google doesn't "sell" their data about you. That data, that's their golden goose. If they sell it, they've got nothing. No, what they sell is you. Or rather, your eyeballs and attention.

      People go to Google and say "Show my ad to enough people to earn me 100,000 additional sales". Google uses its data about you to determine whether you're likely to respond to that ad, then based on that it decides whether to show it to you. It's able to do this because of all the data it holds about you - but if it sold that data directly, then anyone else would be able to horn in on their market.

  9. Re: Creepy by Anonymous Coward · · Score: 4, Funny

    Imagine a girlfriend? This is slashdot

  10. FYI they are also renaming the device by 93+Escort+Wagon · · Score: 3, Funny

    Google announced that, going forward, the thermostat will be called the:

    Nest “Secure” ;-)

    --
    #DeleteChrome
  11. Re:What is the point by AHuxley · · Score: 3, Interesting

    Ads. Tracking ads. Voice prints of known users talking about products and services.
    Got a dog? Voice prints of new people who are friends. The words and terms they use.
    The smart device is sold as a new product and service ready to respond and that is always on in the background.
    A computer feels like traditional product that is used when really needed.
    24/7 ads vs a few hours of web browsing.

    --
    Domestic spying is now "Benign Information Gathering"
  12. that's how they got nixon! by Joe_Dragon · · Score: 4, Funny

    that's how they got nixon!

  13. Slashdotters Need To Learn by Anonymous Coward · · Score: 5, Insightful

    Slashdotters need to learn and realize that the average consumer - read the vast vast majority of people - don't give a flying-rat-fuck about security or privacy. They care about shiny new toys and personal convenience and they do not care what the price.

    These major services/vendors have figured it out. They understand that they can do whatever the fuck they want, so long as it's convenient or shiny new for the end user. The end user/consumers gleefully hand over their money, their security, and their privacy to any and all of these companies for shiny new or convenient.

    You people worrying about microphones listening in, cameras recording activities, big data tracking your every fucking activity on a global scale, you're very much in the minority. The MASSIVE majority don't just fail to understand your odd and suspicious concerns, they are angered by your belligerent resistance to devices and services such as completely unnecessary $200 thermostats that track the consumer's habits, or Smart TVs that track viewership, feed targeted ads, and listen in on household conversations.

    To the rest of the world, you're a nutter deserving of scorn, ridicule, and ostracization.

  14. Re:Summary is biased. by gweihir · · Score: 4, Informative

    Tech specs, by their very nature, must list every major feature present. That list _must_ be complete. Anything major not listed must be absent. And the ability to record audio (even is "disabled" in software) is obviously a major feature in a device you put in your home. Also obviously, they do not list everything that is missing as that would be infeasible. For example, this device likely does not contain an ice-cream machine or a toilet roll holder either. Would you also expect that to be listed as absent?

    Do you see how wrong your statement is?

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  15. Re:Some people buy hardware for what is not contai by gweihir · · Score: 3, Insightful

    Just expect that camera to be cleverly hidden in the future.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  16. Re:Summary is biased. by msauve · · Score: 2, Insightful

    Oh, bullshit. The microphone isn't a feature until it starts being used. It's not uncommon for devices to have components which the engineers think might be useful in the future, but never are.

    For instance every (?) Broadcom based cellphone SoC supports FM radio functionality, but only those manufacturers who enable it list "FM radio" as a feature.

    If they'd listed a microphone, people have started complaining that they couldn't use it.

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
  17. Re:Summary is biased. by gweihir · · Score: 3, Insightful

    The microphone is a feature as soon as it can be activated by software. How that activation happens is immaterial. It changes the status of the device to "listening device". Your SoC example is deeply flawed.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  18. Re: Some people buy hardware for what is not conta by zlives · · Score: 2

    dubious use of "win" here.

  19. better is no internet connection by dltaylor · · Score: 2

    If you buy a TV that has WiFi, block the MAC; if it has wired, just don't connect it.

    I have an old WD box for Netflix, which has neither camera nor microphone.

    1. Re:better is no internet connection by bagofbeans · · Score: 4, Insightful

      You can't block the MAC on all your neighbours' wifi systems, and you can't stop the TV breaking the weakest password protection it finds.

      I remind about the Sony CD rootkit debacle.

    2. Re:better is no internet connection by skegg · · Score: 2

      >> unless you live in a faraday cage

      Heh heh, I like that.

      >> or far away enough from a 5G cell phone tower

      From what I hear isn't that, like, a metre?

  20. Re:Some people buy hardware for what is not contai by Sir+Holo · · Score: 2

    You can't buy a good 4k display that does not have a microphone. I said I wouldn't buy a display with a mic or camera, but I did. I just never plug an ethernet cable into it, and my wifi is white-listed to omit the display.

  21. transducers are coming and going by JackSpratts · · Score: 2

    just a reminder: ALL sound transducers, speakers and mics, do double duty. 50 years ago when sennheiser debuted their legendary 414s, they introduced headphone drivers to the world that were essentially microphones repurposed as tiny on-the-ear lightweight speakers and personal sound reproduction would never be the same. before long there wasn't a radio station or recording studio without the lightweight little hi fidelity wonders. and the reverse is also true. the "regular" consumer speaker products installed in your laptops, tablets, internet radios and smart tvs make dandy microphones and are often used as such by hobbyists and modifiers. if somebody is clever enough and is motivated enough, they can listen in on you through your supposedly micless gear via your speakers, with transmissibility approaching microphones, because that's what they essentially are.

    - js.

  22. From now on all devices will have a Microphone by mysidia · · Score: 2

    Microphones and the respective chips are so inexpensive, small, and low power now: that there's no reason not to include them
    on every device for possible future capability (or covert data gathering capability).

    If unused by the product... it will just be unlisted on the spec sheet, and not software enabled.

    Expect pretty soon: even simple appliances like the Smoke Detectors in every room, Electric Blankets, Vibrators, Light Switches, Wall Outlets, Toilets, Showers, Bathtubs, Faucets, Refrigerators, Microwaves, Coffee Pots, Dishwashers, Washing machines, Ovens, Stoves, etc... to all include a tiny logic board, wireless internet capability, and a little microphone and speaker: maybe eventually a tiny little camera to go with the microphone.

  23. Re:Eavesdropping, Bugging - Who's researching the by terrycarlino · · Score: 2

    Pretty much nobody is going to do anything about this. There is no will among regulators to do anything about this. Don't blame the Republicans. If the Democrats were in control it would be no different. Or perhaps blame them both. It won't get you anything, but you can feel justified they're all slimeballs.

    If a lawyer can make a class action lawsuit out of this, perhaps something will happen. This system came out about a year and a half ago. I didn't really see it in stores until last year. How many units have they sold? I've read that you can do a class action with as little as 40 people. Nest claims to have sold 11 million items, but I would be surprised if more than tens of thousands Nest Secures have been sold. It runs about $300. So that's like what $3 million buck ber 10,000 consumers in play? Not counting penalties. Is that enough for a set of high priced lawyers to take them to court for a protracted legal battle? I don't think so, but what do i know?