What a privacy nightmare - eviltoast
  • hungryphrog@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    109
    arrow-down
    1
    ·
    3 days ago

    This sign implies they’re fully aware of how unsafe it is to have a device like that. SO WHY THE FUCK DO THEY HAVE ONE?!

      • Delphia@lemmy.world
        link
        fedilink
        arrow-up
        4
        arrow-down
        2
        ·
        3 days ago

        As a enthusiastic home cook being able to set timers without using my hands is a godsend. Thats 90% of what my google nest hub does.

          • Delphia@lemmy.world
            link
            fedilink
            arrow-up
            5
            ·
            3 days ago

            I disabled voice assistant on my phone. My wife wanted a google nest for home, after the novelty wore off its basically a timer-setter and sometimes turning the tv on when I cant find the remote.

  • yeehaw@lemmy.ca
    link
    fedilink
    arrow-up
    122
    ·
    edit-2
    3 days ago

    Ah yes. “Muted”.

    If you should be aware of anything, it should be that if you have an Internet connected microphone the only way to truly know it’s muted is to remove it from power.

      • sp3ctr4l@lemmy.zip
        link
        fedilink
        English
        arrow-up
        15
        ·
        3 days ago

        Yep, was gonna post this.

        Good luck, this hospital’s IT department, good fucking luck.

          • sp3ctr4l@lemmy.zip
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            7 hours ago

            … Can you expand on what you mean by that?

            Are you saying just… firewall all the Echoes, lock them out of any ability to access the actual internet?

            So they never phone home?

            I mean… yeah I guess that could work, if you took the time to manually do custom firmware updates on them in some way that only involves your local (hospital) intranet… and overrides the default proprietary firmware and basically flashes it with some custom system that doesn’t rely on AWS connections to work… if… that even exists…

            Their hospital oriented implementation… was… reliant on a constant AWS connection to actually process voice recordings, transform them into text or some other digital format, then send that back to the hospital, “securely.”

            https://www.hipaajournal.com/amazon-ends-support-for-third-party-hipaa-eligible-alexa-skills/

            Apparently they actually lost HIPAA compliance back in 22.

            If they are literally just a being used as an intercomm system… why would you even use Echoes?

            There are tons of other, actually HIPAA compliant, hospital oriented, digital intercomm software systems and manufacturers.

            Seriously, please explain to me how ‘802.11x’, a term that means ‘all wifi standards’, somehow solves the problem of Echoes being non HIPAA compliant, requiring constant access to Amazon servers to actually process the raw audio…

            Please elaborate.

    • GreyBeard@lemmy.one
      link
      fedilink
      arrow-up
      7
      ·
      3 days ago

      I had a few Google Home devices, they had a switch to turn off the mic. I assume it was legit switch, because the thing literally yelled at you and had bright red lights any time you muted it. It literally said “The mic is turned off” every time it booted up in a voice that reminds me of a child tattling on their sibling.

      • yeehaw@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        7 hours ago

        Have some too, I would not be surprised if it’s a software driven hardware switch lol

            • trogon@lemmy.world
              link
              fedilink
              English
              arrow-up
              11
              ·
              3 days ago

              These companies don’t even have to go to that much trouble, since people seem to be just fine connecting everything to the internet willingly.

              • CarbonatedPastaSauce@lemmy.world
                link
                fedilink
                English
                arrow-up
                6
                ·
                3 days ago

                This. They don’t give a shit about the tiny, infinitesimal percentage of people like me and my fellow privacy-conscious lemmings that understand what’s going on, care about it, and refuse to participate.

                • wizblizz@lemmy.world
                  link
                  fedilink
                  arrow-up
                  4
                  ·
                  3 days ago

                  This is why regulations to reign in corporate bullshit exist, expecting the average person to have even the faintest idea why this is important isn’t reasonable.

        • chiliedogg@lemmy.world
          link
          fedilink
          arrow-up
          5
          ·
          3 days ago

          The first-gen echo devices at least actually had a board that listened for the activation word only that then powered on the main device. It’s why you couldn’t name them whatever you wanted, but had to choose between “Echo”, “Alexa”, “Amazon”, or “Computer.”

  • henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    22
    ·
    3 days ago

    I’m not even surprised. All your info is being sent around by shady fax-to-email conversion companies using Chinese servers. Ask me how I know–we use them.

  • dylanmorgan@slrpnk.net
    link
    fedilink
    arrow-up
    31
    arrow-down
    1
    ·
    3 days ago

    I worked for a couple years at a residential school where a lot of the kids had significant medical issues (to the point part of our training was on HIPAA). Tons of kids had echo devices, and I spent a significant chunk of my time there trying to get anyone to take seriously the huge privacy risk those things posed.

  • CrayonRosary@lemmy.world
    link
    fedilink
    English
    arrow-up
    22
    ·
    edit-2
    3 days ago

    Why is there a mugshot superimposed on this photo? It’s just one of those psychological tests where most people don’t see it because they expect the window to be reflecting something and they’re just reading the sign?

  • lemmydividebyzero@reddthat.com
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    3 days ago

    I want such a voice thingy, but 100% local.

    Homeassistant is making porgress with this idea, but it’s a slow progress.

    • The Picard Maneuver@lemmy.worldOP
      link
      fedilink
      arrow-up
      10
      arrow-down
      1
      ·
      3 days ago

      That’s how I feel about AI stuff too. Like, I’d love to “Ghibli-fi” my family like everyone else, but I’d prefer to run it locally rather than hand over family photos to one of these AI companies.

    • Tower@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Same boat. Tools like this and Gemini make managing my ADHD sooooo much easier. Having a JARVIS-esque “AI personal assistant” would make a lot of my struggles less debilitating. I’d even be willing to pay, as long as the data stayed private.

        • Tower@lemm.ee
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          3 days ago

          My working memory is terrible. If I don’t write something down, it’s likely forgotten. I’ve always tried to keep a pen and paper on me, to varying degrees of success. Now, instead I can “Hey Google, add x to my grocery list” and it’ll add it to my shopping list in Keep, or “… Create a reminder/alarm/event for…” for reminders to empty the dishwasher in 45 minutes or remember that I just agreed to plans on Saturday.

          I’m not a huge fan of Google anymore, but I still willingly use their services because the tradeoff is that beneficial to me.

      • I think local voice to text algorithms have gotten pretty freaking accurate. You’d need a way to activate listen, send it over the router, then receive the output signal to an Arduino/Raspberry Pi to switch something on or off. I’m sure it’s not terribly difficult to design, but I bet the subscription model is so lucrative no one with the know how would offer a local version.

    • Ronno@feddit.nl
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      The new update looks great! I’m yet to try it myself though.

      It includes a way to automatically have the voice assistant ask a question, so you only have to respond. E.g. when you come home it can ask: Do you want to play some music? Or when you heat up the oven, it can ask if you want to set a timer. You then just reply with what you want. This is the kind of interaction that makes it feel a lot more like Jarvis IMO.

  • GooberEar@lemmy.wtf
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    5
    ·
    3 days ago

    We had this policy at my last job, but not due to HIPAA. Any time “Alexa” came up in conversations, it was very common for peoples’ devices to chime in, telling on them.

    Granted, we were in tech, so we were very aware that these things aren’t recording everything you say and sending the recordings off to motherbrain nor “spying”, per se.

    • hessenjunge@discuss.tchncs.de
      link
      fedilink
      arrow-up
      21
      arrow-down
      1
      ·
      edit-2
      3 days ago

      I recall them being caught of being in the possession of recordings they shouldn’t have had.

      On top of this the option of not sending recordings to the cloud is being removed just now - so they stopped pretending to respect your privacy.

      • GooberEar@lemmy.wtf
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        4
        ·
        3 days ago

        I’d need more (and reliable) information to comment on your first statement.

        For your second statement, there were apparently a limited number of devices which could process some commands locally, but most devices never had that capability to begin with. For the ones that could, it sounds like Amazon is deprecating the functionality. Does that sound correct? Either way, that’s still a substantially different situation from having a device that’s recording everything you say and uploading it to the cloud.