1 2
Dusterbd13-michael (Forum Supporter)
Dusterbd13-michael (Forum Supporter) MegaDork
5/31/21 6:38 p.m.

This is default on free wifi access to everyone through the alexa. I had no idea about it until dad sent the link to me. 

Im willing for limited security risk, but not all that...

 

Hadn't seen it or heard about it before now so i figured I'd share.

https://arstechnica.com/gadgets/2021/05/amazon-devices-will-soon-automatically-share-your-internet-with-neighbors/

Toyman01 + Sized and
Toyman01 + Sized and MegaDork
5/31/21 7:06 p.m.

That's interesting. Glad I don't have any of their Sidewalk enabled devices.

Keith Tanner
Keith Tanner MegaDork
5/31/21 7:25 p.m.

Not just Alexa, pretty much anything owned by Amazon like Ring. It's a privacy nightmare. Amazon doesn't really have a stellar history with locking this stuff down, and the fact that it is opt-out instead of opt-in tells you what they think of their customers.

Best option: take anything owned by Google or Amazon and throw it away after wiping all settings. 

Second best option: make the effort to opt out.

Toyman01 + Sized and
Toyman01 + Sized and MegaDork
5/31/21 7:43 p.m.
Keith Tanner said:

...the fact that it is opt-out instead of opt-in tells you what they think of their customers.

...

This is my main issue. And the fact that it is a little advertised option. Ranks right up there with date rape drugs as far as I'm concerned. Like hey, we are going to screw you but you won't know about it so don't worry. 

It actually pissed me off enough that I just ordered a bunch of parts from Summit instead of Amazon. 

Some of the Net security types are going a little ape about the back door it is creating into every wifi system with an Amazon device hooked up to it. 

Stampie
Stampie MegaDork
5/31/21 7:53 p.m.

I don't let Amazon in my house with anything active.  I'm working on removing Google from my house.

Teh E36 M3
Teh E36 M3 SuperDork
5/31/21 8:08 p.m.

I'm trying to not make a snarky comment ala wtf did you expect- except I'm as bad as anyone else. My line is drawn at the "smart helper" thing, but I'll be ducked if I don't use Gmail, and don't have a smart thermostat (nest?). My son has pretty much shamed me from using Amazon unless I have to. I will spend some effort divorcing myself from google as well- have a proton mail account but haven't put effort forth to transition everything. 

mtn
mtn MegaDork
5/31/21 8:47 p.m.

I have a few fire tablets and a fire stick. Don't really use them that often, most of the time the fire stick is unplugged and the tablets are dead. 
 

should I worry about anything with this?

Toyman01 + Sized and
Toyman01 + Sized and MegaDork
5/31/21 9:19 p.m.

Amazon's list of Sidewalk devices. 

Sidewalk Bridges are devices that provide connections to Amazon Sidewalk. Today, Sidewalk Bridges include many Echo devices and select Ring Floodlight and Spotlight Cams. A comprehensive list of Sidewalk devices includes: Ring Floodlight Cam (2019), Ring Spotlight Cam Wired (2019), Ring Spotlight Cam Mount (2019), Echo (3rd gen and newer), Echo Dot (3rd gen and newer), Echo Dot for Kids (3rd gen and newer), Echo Dot with Clock (3rd gen and newer), Echo Plus (all generations), Echo Show (all models and generations), Echo Spot, Echo Studio, Echo Input, Echo Flex.

CrustyRedXpress
CrustyRedXpress Reader
6/1/21 7:35 a.m.

RevRico
RevRico UltimaDork
6/1/21 7:54 a.m.

Really what does anyone expect if they're BUYING a live microphone to put in their house in the first place?

maschinenbau
maschinenbau UltraDork
6/1/21 8:06 a.m.

When it comes to these "voluntary home surveillance devices", we are not the consumers, we are the product being sold. 

ProDarwin
ProDarwin MegaDork
6/1/21 8:07 a.m.

 The article talks about Amazon & "Sidewalk" devices, but I see others here commenting on Google.  What is the concern there?  I have an android phone... is there something I should be aware of (other than they suck)?

Toyman01 + Sized and said:

It actually pissed me off enough that I just ordered a bunch of parts from Summit instead of Amazon. 

I have been trying to not give them my business, but damn they make it hard sometimes.

 

1988RedT2
1988RedT2 MegaDork
6/1/21 8:12 a.m.

I am surprised that anyone could be surprised at this.

On a related note:  How is this different from every Comcast customer having a Comcast modem that is accessible to anyone using their xfinity wifi everywhere public network?

Toyman01 + Sized and
Toyman01 + Sized and MegaDork
6/1/21 8:22 a.m.
ProDarwin said:

I have been trying to not give them my business, but damn they make it hard sometimes.

Yes they do. They have the best online buying experience by far. Their website is easy to use, well run, and fast. Between company and personal purchases, I placed 361 orders last year. I think I'm going to be more careful and spread that around to other sites in the future. 

ProDarwin
ProDarwin MegaDork
6/1/21 8:38 a.m.
1988RedT2 said:

On a related note:  How is this different from every Comcast customer having a Comcast modem that is accessible to anyone using their xfinity wifi everywhere public network

Comcast is sharing a parallel connection, not your bandwidth.  I'm not an expert, but since that sharing is all pre-router I imagine there aren't personal security concerns as well.

Amazon is sharing your connection from inside your network.

93EXCivic
93EXCivic MegaDork
6/1/21 8:39 a.m.

I really can't figure out how to opt my Tile devices out of this. Can't find it on the Tile app and can't find it on the Alexa app which I just downloaded even though I went to where it says it is. 

AAZCD (Forum Supporter)
AAZCD (Forum Supporter) Dork
6/1/21 9:22 a.m.

Thanks for posting. Mrs AAZCD and I both have the these devices scattered around the compound surveiling us. I just opted out on both accounts.

ProDarwin
ProDarwin MegaDork
6/1/21 10:01 a.m.
Toyman01 + Sized and said:
ProDarwin said:

I have been trying to not give them my business, but damn they make it hard sometimes.

Yes they do. They have the best online buying experience by far. Their website is easy to use, well run, and fast. Between company and personal purchases, I placed 361 orders last year. I think I'm going to be more careful and spread that around to other sites in the future. 

Yep.  I'm happy to pay a few bucks more to get product from somewhere with integrity, but I really struggle when they have a E36 M3ty user experience.

I think there is a serious business opportunity out there for someone to make an site that is just Amazon, but not E36 M3ty.

93EXCivic
93EXCivic MegaDork
6/1/21 11:38 a.m.
AAZCD (Forum Supporter) said:

Thanks for posting. Mrs AAZCD and I both have the these devices scattered around the compound surveiling us. I just opted out on both accounts.

So I just went to do this and I don't have the option. 

Keith Tanner
Keith Tanner MegaDork
6/1/21 11:45 a.m.
ProDarwin said:

 The article talks about Amazon & "Sidewalk" devices, but I see others here commenting on Google.  What is the concern there?  I have an android phone... is there something I should be aware of (other than they suck)?

Toyman01 + Sized and said:

It actually pissed me off enough that I just ordered a bunch of parts from Summit instead of Amazon. 

I have been trying to not give them my business, but damn they make it hard sometimes.

Amazon has a legit business selling actual stuff. Google has a business selling advertising :) Facebook is even worse, I should have put them on the list as well but I keep forgetting they have their own devices.

Google's biggest problem is that they have a short attention span. That Google product you buy may not be owned or run by Google for long. Their home security product lasted three years.
https://arstechnica.com/gadgets/2020/10/google-kills-the-nest-secure-its-500-home-security-system/

But they have also had security problems in their security hardware.
https://www.zdnet.com/article/vulnerabilities-in-google-nest-cam-iq-can-be-used-to-hijack-your-camera/

I installed a new TV last week. It wants a network password. No, you are a TV. Your job is to make pretty pictures. You don't even get to make noise. There's no way you're getting on the internet so that Alexa and friends can listen in. Same for you, Bluray player.
https://www.consumerreports.org/privacy/how-to-turn-off-smart-tv-snooping-features/ 

I have some smart things in my house, but they are standalone smart. I just finished programming a new temperature/humidity controller that will text me if the temperature in my shop drops below a certain level. But it does not rely on an outside server and I have complete control over all the code. The text mechanism is just sending an email. If you have something that relies on an external server to function, you have both a security problem and a guaranteed limit to the lifespan.

And yet there's a Tesla in the garage. I fully understand the irony (or is it just hypocrisy?) of this. I accept it because I feel there is real value to the data it uploads for engineering purposes.

AAZCD (Forum Supporter)
AAZCD (Forum Supporter) Dork
6/1/21 12:01 p.m.
93EXCivic said:
AAZCD (Forum Supporter) said:

Thanks for posting. Mrs AAZCD and I both have the these devices scattered around the compound surveiling us. I just opted out on both accounts.

So I just went to do this and I don't have the option. 

Mrs AAZCD had the same problem initially. Update the Alexa app.

ProDarwin
ProDarwin MegaDork
6/1/21 12:13 p.m.
Keith Tanner said:

Amazon has a legit business selling actual stuff. Google has a business selling advertising :) Facebook is even worse, I should have put them on the list as well but I keep forgetting they have their own devices.

Google's biggest problem is that they have a short attention span. That Google product you buy may not be owned or run by Google for long. Their home security product lasted three years.
https://arstechnica.com/gadgets/2020/10/google-kills-the-nest-secure-its-500-home-security-system/

But they have also had security problems in their security hardware.
https://www.zdnet.com/article/vulnerabilities-in-google-nest-cam-iq-can-be-used-to-hijack-your-camera/

I installed a new TV last week. It wants a network password. No, you are a TV. Your job is to make pretty pictures. You don't even get to make noise. There's no way you're getting on the internet so that Alexa and friends can listen in. Same for you, Bluray player.
https://www.consumerreports.org/privacy/how-to-turn-off-smart-tv-snooping-features/ 

I have some smart things in my house, but they are standalone smart. I just finished programming a new temperature/humidity controller that will text me if the temperature in my shop drops below a certain level. But it does not rely on an outside server and I have complete control over all the code. The text mechanism is just sending an email. If you have something that relies on an external server to function, you have both a security problem and a guaranteed limit to the lifespan.

And yet there's a Tesla in the garage. I fully understand the irony (or is it just hypocrisy?) of this. I accept it because I feel there is real value to the data it uploads for engineering purposes.

Ok, I own no Google hardware.  I agree regarding the attention span.  And that isn't just hardware.  Im honestly surprised they haven't cancelled their search engine only to replace it with 6 different overlapping products.

RE: TV -  Do you not have any streaming services?  Or watch youtube?

Even your 'standalone smart' temp/humidity controller still has to have a network password (or Ethernet) to text you though, right?

Keith Tanner
Keith Tanner MegaDork
6/1/21 1:26 p.m.

I do have streaming services, yes. We stream via AppleTV. I have no doubt it is reporting back to its masters, but I have a higher level of trust with Apple than I do of, say, Samsung or Sony. It also does not listen to us. There's no reason my TV should be reporting home and the same goes for my Bluray. It's impossible not to have something phoning home these days but there's no reason that everything should, and devices should be chosen for their ability to function without a parent server unless they simply cannot work any other way. Streaming service? Well, other than Plex that means you have to rely on an outside server. A thermostat? Not so much.

Another example: our ceiling fans are smart enough to react to the current temperature and light conditions and can run on a schedule. They're programmed via app - but they are on a standalone network that is air-gapped from the internet. So the fans and controllers can talk to each other but nobody else. If you want to program one, you have to switch to FanNet first.

My standalone smart controller has a password to get on the local network but it is not accessible from outside the LAN thanks to the firewall. To send the text, it sends a CURL request to an external mail server - you can send texts to Verizon phones by sending email to 1234567890@vtext.com. Since I wrote the software, I know exactly what communication is going on.

Rons
Rons HalfDork
6/1/21 1:37 p.m.

In reply to Keith Tanner :

Actually that probably is neither ironic or hypocritical - just an informed individual choice.

ProDarwin
ProDarwin MegaDork
6/1/21 1:44 p.m.
Keith Tanner said:

My standalone smart controller has a password to get on the local network but it is not accessible from outside the LAN thanks to the firewall. To send the text, it sends a CURL request to an external mail server - you can send texts to Verizon phones by sending email to 1234567890@vtext.com. Since I wrote the software, I know exactly what communication is going on.

Got it (you can do the same with ATT btw).  So its a smart device that doesn't have a home server to report back to = standalone smart.

I'm with you on most of this stuff.  I don't have many smart devices, and I find the need to report to a server dumb.  For me its less of a privacy concern as it is a lifespan/maintenance/etc. concern.  I don't want a simple device becoming useless because the main server was sunset by the company that acquired them.

Out of curiosity, is there anyone that makes a 'smart home' system that is standalone, and integrated more at the fusebox/builder level (CAN bus on power lines maybe) with just a replaceable brain?

1 2

You'll need to log in to post.

Our Preferred Partners
WG00axVuKRtKEQGpAMzAIusPPtLgKfwPtmUiPnnACOGQzq0U5P07lgAtxkfqPM3M