• @geekworking
    link
    English
    3698 months ago

    Or maybe you don’t install a data mining spy device in the office?

    • @Death_Equity
      link
      English
      368 months ago

      So keep cell phone in lockers, no smart TVs, and no Alexa or similar devices.

    • @[email protected]
      link
      fedilink
      English
      368 months ago

      Is it any different than speaking in front of your smartphone?

      I don’t own an echo or Google whatever but I’ve definitely mentioned things and then got ads for that thing within the hour/day. Like cat litter when I don’t even own a cat, just mentioned it once for cleaning up spills.

      • @Seudo
        link
        English
        218 months ago

        More likely there’s a bunch of data points it can use. Coming within BT range of someone who does have a cat for example. Otherwise all the major smart phone companies would need to be in collision to keep the secret because the battery drain would be so blatant of it was recording, processing, transfering etc.

        • @cor315
          link
          English
          38 months ago

          And all the articles that have said they aren’t recording everything, I guess they would have to be in on it too.

      • @Taniwha420
        link
        English
        138 months ago

        I don’t have a smoking gun for Google advertising based on conversation, but I mentioned in an email (Gmail) that someone I know was going to the Calgary Stampede, and Google Ads flogged Stetson cowboy hats and the Stampede for weeks after that. It was so conspicuous because normally it’s just, “hot singles in your area”, “hot Christian singles in your area?” maybe, “hot Christian moms in your area?” Nowadays it’s like, “grannies near you want to fuck.” FML.

        • @[email protected]
          link
          fedilink
          English
          98 months ago

          My pastor mentioned a specific verse in his sermon recently. I went to type it in my notes. My phone’s keyboard (Gboard) suggested that specific verse immediately. Not just the book. The chapter and verse numbers, too.

          • @[email protected]
            link
            fedilink
            English
            298 months ago

            It’s more likely you’re getting those hyper-targeted ads because of location tracking and relationship tracking than because they’re listening. It’s much cheaper and easier than running voice recognition on shitty audio clips from a mic in your pocket, and honestly much scarier.

            People only ever have anecdotes to support the claim that tech companies are listening in on their conversations, but these companies openly admit to targeting ads based on your location data and specifically who you’ve been associating with.

            It’s more likely that others in your congregation searched for that verse, so it was suggested to you based on your proximity to others who already searched for it.

            • @[email protected]
              link
              fedilink
              English
              18 months ago

              from a mic in your pocket

              It was in my hand. I was taking notes on it. So I doubt the audio was all that bad. My pastor also uses a mic, so his voice is not too quiet for a phone to pick it up.

              because of location tracking and relationship tracking

              I also find this unlikely because of how specific it got. It got the chapter and verse correct. The only input it got from me was my beginning to type out the name of the book of the Bible.

              It’s more likely that others in your congregation searched for that verse, so it was suggested to you based on your proximity to others who already searched for it.

              While that’s possible, I’m not sure it’d work so quickly. I typed the reference in my note-taking app literally as soon as my pastor said it.

        • @jaybone
          link
          English
          38 months ago

          I don’t even get “hot singles in your area” anymore.

          Where did I go wrong?

      • @Chunk
        link
        English
        28 months ago

        Get out of here with your reasoning. It’s more fun to feign outrage because it gives me an opportunity to feel smart. If you start to invalidate my superiority by pointing out how arbitrary and dramatic my response is then I’m going to downvote you.

    • @ohlaph
      link
      English
      28 months ago

      True, but I shit myself. Trusted a fart and full on shit my pants.

  • @SpaceNoodle
    link
    English
    1258 months ago

    If the patient’s name is Alexa, you’re gonna have a bad time

  • @[email protected]
    link
    fedilink
    English
    1108 months ago

    If this is a medical facility, I’d never trust them ever again if I saw an echo there.

    • @[email protected]
      link
      fedilink
      English
      438 months ago

      Dentist office I went to has a private room with an Echo, they use it to switch playlists without having to touch anything, I guess. Figure they didn’t really think it through…

      But yeah I was a bit uncomfortable with that. Not that anything private was discussed, I simply had a cavity filled. They’re excellent dentists tho, best I’ve ever seen, so I won’t be going elsewhere.

      • @[email protected]
        link
        fedilink
        English
        228 months ago

        Maybe mention the potential privacy issue if they’re still using echo on your next visit. They might’ve not aware of it.

        • @[email protected]
          link
          fedilink
          English
          78 months ago

          In my experience with “mentioning the potential privacy issue” people are aware, it’s just an awkward conversation that they’d prefer not to have.

          Imagine being a receptionist at a dentists office and some whackadoodle rolls in to the waiting room on their electric scooter, and loudly exclaims… “are you aware that you and all of the staff here are absolutely completely 100% butt naked under your clothes and hosiery? It’s unhygienic, unsanitary, non-inclusive, and completely unsatisfactory. I just thought you should know and perhaps talk it over with your boss”.

          Your reaction to this hypothetical scenario is the reaction you can expect when talking to your dentist about privacy.

          • @jaybone
            link
            English
            48 months ago

            No wonder I keep getting advertisements for AAAAAAAAAAAAA no, it’s fine, go ahead, AAAAAAAAAAAAAP mint.

    • sebinspace
      link
      English
      268 months ago

      Yeah, don’t go looking too hard whenever you’re in a hospital or anything. The number of vulnerabilities I can spot with as little infosec knowledge I have is deeply concerning

      • @jarfil
        link
        English
        18 months ago

        What? What do they say?

  • @[email protected]
    link
    fedilink
    English
    1038 months ago

    You’re all missing the real kicker here - this sign is only here for the HIPAA auditor. Everyone knows that no one is actually going to mute the thing.

      • @[email protected]
        link
        fedilink
        English
        188 months ago

        We’re not all like that. Some of us do really care (a whole lot) about the person, and not just “the patient”. We get eye-rolled and sighed at sometimes because we speak up; but it doesn’t matter because advocating for our patients is one of our top priorities.

        Some hospitals have better work-cultures than others, but all of them have at least a few who truly give a damn

        • @randomdeadguy
          link
          English
          68 months ago

          I would like to thank you for maintaining integrity when it is not easy. I know it can be frustrating.

    • TWeaK
      link
      fedilink
      English
      218 months ago

      Also muting it probably doesn’t stop it listening, it just stops its response.

      • @FooBarrington
        link
        English
        1
        edit-2
        8 months ago

        No, there is a button to make the Echo stop listening.

        If you want to prove me wrong, it should be incredibly easy to press the button and record the Echos network activity. If you’re right you’d still see network traffic. But nobody has been able to show this so far. I wonder why?

        • TWeaK
          link
          fedilink
          English
          14
          edit-2
          8 months ago

          Yeah I read the other comments after making mine. However everyone keeps calling it a “physical” button, and I don’t think that’s accurate. It won’t be a physical switch that opens a circuit, it will be a button that operates a transistor that opens the circuit.

          Still, I see no good reason to trust the device - especially in a medical setting.

          • @calcopiritus
            link
            English
            28 months ago

            There’s not much difference between a direct switch and a transistor, both will cut the signal and neither is over rideable by software

            • Piranha Phish
              link
              English
              88 months ago

              This is disingenuous at best and incorrect at worst. The mute button on the Echo is just that, a button; it is not a switch. It is software-controlled and pushing it just sends a signal to the microcontroller to take some action. For instance, one action is to turn on the red indicator light; that’s definitely not physically connected to the mute button.

              Maybe another response of pushing the button is to disable the transistor used for the microphone, but it’s more likely that it just sets a software flag for the algorithm to stop its processing of the microphone input signal. Regardless of which method it uses, the microcontroller could undoubtedly just decide to revert that and listen in, either disabling or not disabling the red light at the same time.

              But I personally don’t think it listens in when muted. I don’t think it spies on us to target ads based on what we say around it. I’m not worried that the mic mute function doesn’t work as intended.

              But I fully understand that it is fully capable of it, technically speaking.

              • @calcopiritus
                link
                English
                38 months ago

                I don’t know the internal workings of the echo, I was responding to a comment that said it “operates a transistor”. Which is way different than it being an input to a microcontroller.

                If the button is just connected to a transistor, it’s not software controllable, since transistors are electronical devices that don’t interpret any software. A microcontroller does execute software. There’s a big difference.

              • @calcopiritus
                link
                English
                28 months ago

                Transistors are simple electronical devices. They don’t run software. You can control their inputs with another device (such a microcontroller) that does run software. You can also control their inputs with a button. You can’t control their output with software.

                I don’t know how an Amazon echo is wired up, but if you just have a button connected to the gate of the transistor, it works basically the same as a mechanical switch.

        • @CoggyMcFee
          link
          English
          118 months ago

          If the Echo stored the audio and then sent it sometime after you unmute, it would still pass your test.

          • @FooBarrington
            link
            English
            98 months ago

            Which you could easily see by looking at the amount of traffic sent after unmuting, unless you believe that Amazon secretly found an infinite compression algorithm they use only in muted Echo devices.

            • @CoggyMcFee
              link
              English
              58 months ago

              Unless some or all of it was sent along during the next time you actually do a voice command.

              • @V0lD
                link
                English
                38 months ago

                Tbf to foobar, that should still give a falsifiable and testable data-difference if you are willing to alter your behaviour around experimentation for an extended period of time

                Though, there are always more ways to hide traffic

              • @FooBarrington
                link
                English
                -18 months ago

                Again: Which you could easily see by looking at the amount of traffic sent after unmuting, unless you believe that Amazon secretly found an infinite compression algorithm they use only in muted Echo devices.

                You understand that sending more information means more traffic? Unless - as I stated - they found a perfect compression algorithm, you’d be able to tell.

                • @CoggyMcFee
                  link
                  English
                  68 months ago

                  I’m a little confused as to why you are being so condescending. Every time you say “this is so simple if you do X”. And then I say “what about Y?” And then you’re like “that’s obvious too, just do Z” and kind of insulting me, even though you did not account for it in your prior comment. And it becomes less trivial with each additional test.

                  Your first method involves simply checking if there is any traffic after muting. Your revised method involves additionally checking if there is any traffic for some period of time after muting (how long?). And now your third method involves doing the first two things as well as gathering data on the average amount of traffic in your requests generally and deciding whether subsequent traffic during requests after muting for an unspecified amount of time is significantly large enough to conclude it is sending information acquired during muting.

                  But if they send it a little bit at a time, or they just leak a small portion of it occasionally in some requests, I think it would be very challenging to conclude definitively one way or the other.

                  I’m actually aware that there is no infinite compression algorithm, so you don’t need to keep saying that. And to be honest it just makes you look like you are lacking imagination because it’s not the only way to make detection difficult as illustrated by my responses.

        • Billegh
          link
          English
          108 months ago

          I’m not sure that’s the case. We have one at work and if it thinks you’re calling out to it repeatedly it will say out loud that its mic is off and that you have to enable it.

          It might just be the part that listens for “Alexa” but that audio buffer is available to the device and it can do things with it.

          • @FooBarrington
            link
            English
            58 months ago

            I just tried it with mine, it doesn’t react in any way.

          • Arthur Besse
            link
            fedilink
            English
            58 months ago

            We have one at work and if it thinks you’re calling out to it repeatedly it will say out loud that its mic is off and that you have to enable it.

            This is the funniest thing I’ve read today (though I’m not sure if it is a joke).

          • @FooBarrington
            link
            English
            28 months ago

            Shouldn’t take you more than 5 minutes to prove me wrong. Please do!

              • @FooBarrington
                link
                English
                38 months ago

                Because - as I’ve explained in the comment you replied to - it’s pretty easy to check it for yourself. Unless you believe that an Echo has a secondary cellular connection that’s only used while muted, any traffic must go over your configured connection.

                Just look at the amount of transferred data while it’s muted. If there is data (beyond extremely low background traffic) I’m wrong. If there is no data, you’re wrong.

                This is not some hypothetical metaphysical principle we’re talking about, it’s a product that you can analyse yourself. Put up or shut up.

  • @Devouring
    link
    English
    918 months ago

    It’s fascinating how people know that these devices break their privacy, yet they keep using them.

  • @MrFlamey
    link
    English
    738 months ago

    Why do they even have an Amazon echo if they know it’s a fucking security risk? If you need a speaker, just get a speaker, not one a spyker (sorry, that was shite)

  • @hperrin
    link
    English
    668 months ago

    Maybe just don’t have any big tech surveillance devices in the hospital/clinic/whatever.

  • @aesthelete
    link
    English
    548 months ago

    Friendly reminder to pause your bleeple before you buttlebode your over-driver. You do not want (CCF) cloud confederation forces to scuttle your bodes.

  • Kevnyon
    link
    English
    458 months ago

    Shit like this is why I got a dumb speaker. It just plays audio, it doesn’t have a battery (meaning that unplugged = zero power), it doesn’t have wifi, it doesn’t have an assistant, it just plays the music I ask it to play via Bluetooth.

    • @thorbot
      link
      English
      248 months ago

      And by pull the plug I mean smash it with a fucking hammer

      • @SpaceNoodle
        link
        English
        148 months ago

        Yes, there’s a dedicated mute button that literally cuts power to the mic.

          • @SpaceNoodle
            link
            English
            6
            edit-2
            8 months ago

            Yes, third parties have published complete hardware teardowns of various Echo devices. For what it’s worth, I’ve also personally reviewed multiple Echo device schematics, and have nothing to gain from lying.

            • Jack Riddle
              link
              fedilink
              English
              08 months ago

              Sounds like something that someone who has something to gain from lying would say.

              • @SpaceNoodle
                link
                English
                28 months ago

                Heh. I’ll continue to badmouth Amazon for all the internal and external bullshit they pull, but during the decade I worked there, they actually took privacy and security seriously for the in-house devices.

  • @CyberDine
    link
    English
    238 months ago

    I hate it when acronyms aren’t clearly defined… PHI stands for Protected Health Information.

    • @Bgugi
      link
      English
      328 months ago

      This is almost certainly in a provider setting, in which all covered employees will have received extensive training detailing what “PHI” stands for.

  • @PeterPoopshit
    link
    English
    188 months ago

    IoT and smart device security only means your data is protected from unauthorized access. It’s up to the manufacturer, not the user to decide who can get in.