News for hackers. Stuff that matters.
Re:Amazon Echo Look by Blahah on Wednesday April 26, 2017 @11:25AM (#14203740)
I'm not normally one to be creeped out by these kind of things. But this is a device that's designed to take photos and videos of you while you get dressed, and will be both connected to the internet and constantly communicating those images over the network.

This feels like a device literature professors would use to teach dystopian fiction writing.

edit: case in point - matthewmcg's comment https://news.ycombinator.com/item?id=14203772

Re:Amazon Echo Look by philsnow on Wednesday April 26, 2017 @02:01PM (#14205385)
what's worse: that amazon thought that enough people wouldn't care about an always-on, always-connected camera watching them get dressed (and undressed) every day, to make it a viable product ? ... or that _they might be right_ ?
Re:Amazon Echo Look by Eridrus on Wednesday April 26, 2017 @04:32PM (#14206708)
This is basically a Nest Dropcam, and people seem to like those.
Re:Amazon Echo Look by croon on Thursday April 27, 2017 @04:29AM (#14210033)
But isn't that for home security/checking in when you're not home?

The always-connected part is the steep price for that functionality.

Here the entire thing is designed around constantly uploading incriminating photos of you, without the value of home security.

Re:Amazon Echo Look by Eridrus on Thursday April 27, 2017 @11:36AM (#14212277)
On one hand the Dropcam is constantly uploading video and audio of you and storing it in the cloud for extended periods of time, even when you're home.

On the other hand, the Echo Look only uploads photos when you ask it to, and AFAIK doesn't store them, but everyone is freaking out because it could upload photos whenever it wants.

Sure, HN doesn't see the value in a Look, but it is clearly less invasive than a Dropcam.

Re:Amazon Echo Look by philsnow on Thursday April 27, 2017 @04:53PM (#14214600)
It's only more invasive if you assume that things only do what they say on the tin.
Re:Amazon Echo Look by eh78ssxv2f on Thursday April 27, 2017 @11:29PM (#14216690)
No, because people typically either install nestcam outdoors or set it to turn it on when they are not at home. Also, I suppose very few people install Nestcams in the bedroom/bathroom/closet.
Re:Amazon Echo Look by Johnny555 on Wednesday April 26, 2017 @12:01PM (#14204172)
Is it any riskier than a cell phone or laptop computer with a camera?
Re:Amazon Echo Look by rovek on Wednesday April 26, 2017 @12:26PM (#14204457)
Anecdotally I don't have anything pointing at me while I change, regardless of who's watching it.

My phone at rest is either looking at the inside of my pocket or the ceiling/floor.

Re:Amazon Echo Look by Johnny555 on Wednesday April 26, 2017 @12:30PM (#14204512)
Then I'd bet you're not in the target market for a camera that can record you when you're trying on new outfits.

But if you were, I'd be willing to bet that you have a laptop in your bedroom or phone-cradle that can hold your phone in a position to record you so you can instagram today's outfit to your friends.

Re:Amazon Echo Look by icebraining on Wednesday April 26, 2017 @01:27PM (#14205070)
Even if you're "in the market" for this (and not everyone filmed will necessarily be a buyer - e.g. spouses, kids, etc), it's still riskier to have a camera always pointed at you when changing clothes than one you usually have to purposefully point at you.
Re:Amazon Echo Look by api on Wednesday April 26, 2017 @12:37PM (#14204581)
Yes, for several reasons.

(1) This device is absolutely sealed and opaque. It can't (easily) be analyzed to see what it's running, doing, or sending. It's even more opaque than a phone. It has enough processing power to do local image analysis, object recognition, etc., so just looking at bulk traffic won't prove anything about whether or not it's watching.

(2) The camera in this device is part of its core functionality, is always on, and is situated deliberately so as to watch you.

(3) The device is literally an Amazon sales rep in your house. Its primary purpose is to represent Amazon and sell you stuff.

I've always thought Alexa and the other cloud-connected voice-activated things were completely insane. I will never own such a thing. Period. This takes it to a whole new level of creepiness.

Re:Amazon Echo Look by Johnny555 on Wednesday April 26, 2017 @12:50PM (#14204711)
Well, not completely opaque -- it uses your wifi network, so you can watch its traffic to see if it's sending streaming video back home without your permission. The stream should be encrypted, so you may not know exactly what it is sending back home, but you simple traffic analysis will tell you if it's sending video.

Having it being completely sealed without the ability of the end-user to install software is a security win for most people. Then it's much less likely that a user will install Malware on the device, and it's not likely that Amazon is going to hack their own devices to make them into spy cams. Not allowing user installed software greatly reduces the attack surface of the device.

Re:Amazon Echo Look by CaptSpify on Wednesday April 26, 2017 @01:15PM (#14204952)
> not likely that Amazon is going to hack their own devices to make them into spy cams

No, there's no way anyone would do that.....

http://abcnews.go.com/GMA/Parenting/pennsylvania-school-fbi-...

https://www.washingtonpost.com/business/technology/2013/12/0...

https://it.slashdot.org/story/13/01/29/0111238/58000-securit...

Even if it wasn't intentional, unknown bugs are a thing, and trusting someone like amazon, who clearly does not have their customers best interests in mind, seems foolish to me.

Re:Amazon Echo Look by trevyn on Wednesday April 26, 2017 @05:38PM (#14207249)
simple traffic analysis will tell you if it's sending video

This is not super-useful; it could locally cache "bad" video and send it later when you think it is only sending "good" video.

Re:Amazon Echo Look by i_cant_speel on Wednesday April 26, 2017 @12:05PM (#14204223)
It's not usually recording you while you are changing.
Re:Amazon Echo Look by Johnny555 on Wednesday April 26, 2017 @12:09PM (#14204274)
How do you know?

Amazon says their camera only records you when you ask it to, if you don't trust them, then how do you trust that your cellphone or laptop isn't recording you illicitly?

Re:Amazon Echo Look by twothamendment on Wednesday April 26, 2017 @12:28PM (#14204490)
How do I know my smart phone isn't shooting a video of me when I'm dressing? It isn't pointed at me. It doesn't sit on a stand with a view of the room. Sure the microphone might catch something interesting in the bedroom, but setting up an internet connected camera with a view is very different than than one that is pointed in a safe direction.

Firearms: never point it at something you don't want to destroy. Internet connected cameras: never point them at something you don't want the world to see.

Re:Amazon Echo Look by ReedJessen on Wednesday April 26, 2017 @05:22PM (#14207114)
You have my upvote for distilling my ambiguous worries into a catchphrase I can repeat to my friends and family.
Re:Amazon Echo Look by brewdad on Wednesday April 26, 2017 @12:29PM (#14204498)
I don't bring my phone with me when I'm going to shower or change clothes. If I do, I can place it face down and even place something on top of the rear camera if I'm afraid of capturing something other than my ceiling.

This Amazon device either needs to be left alone to capture/not capture whatever it is going to or it serves no purpose at all. I'm not going to turn it around or cover it every time I enter my bedroom. If I did, then the value proposition falls significantly.

Re:Amazon Echo Look by untog on Wednesday April 26, 2017 @12:49PM (#14204704)
It's not even an issue of trusting Amazon. Or, just trusting their motives. You also have to trust their security on an ongoing basis, as your device could theoretically be compromised at any time.
Re:Amazon Echo Look by nroach on Friday April 28, 2017 @01:31PM (#14221365)
While this may be true, I'd trust Amazon more than the various Chinese camera makers that offer cloud connected streaming and storage. Heck, I'd trust them more than my own ability to secure a vulnerability-laden home router that AT&T manages and probably never patches.
Re:Amazon Echo Look by icebraining on Wednesday April 26, 2017 @12:24PM (#14204438)
The point is that one doesn't usually purposefully keep our cameras directly pointed at us when we're changing clothes. Cellphones in particular are usually pointed at the table directly under them. Laptops are often more risky, which is why these exist: https://supporters.eff.org/shop/laptop-camera-cover-set
Re:Amazon Echo Look by syshum on Wednesday April 26, 2017 @01:01PM (#14204816)
>>if you don't trust them, then how do you trust that your cellphone or laptop isn't recording you illicitly?

I dont, and I dont trust them, I am one of "those people" that places tape over the lens. I also do not own an echo, nor will I own this or any device like it

I hate that Phone do not have removal batteries because there was a time where I did remove them.

Some may call be paranoid, but only the paranoid are ever truly prepared

Re:Amazon Echo Look by self_assembly on Wednesday April 26, 2017 @02:26PM (#14205629)
The products aren't exactly comparable in terms of utility. I get a whole lot more utility out of a cell phone or laptop then I would out of the amazon look. Even if both have security risks one has substantially greater rewards.
Re:Amazon Echo Look by i_cant_speel on Wednesday April 26, 2017 @12:25PM (#14204452)
That's true. I was more saying that it's not usually pointed in my direction when I'm changing. I have a cover over my webcam and my phone is usually looking at the ceiling or whatever surface it's on.
Re:Amazon Echo Look by dbliss on Wednesday April 26, 2017 @01:44PM (#14205235)
Do you even use a phone with a front facing camera while sitting on toilet? I bet those pictures could be embarrassing too.
Re:Amazon Echo Look by GCA10 on Wednesday April 26, 2017 @11:35AM (#14203866)
What could go wrong?
Re:Amazon Echo Look by conanbatt on Wednesday April 26, 2017 @11:45AM (#14203993)
It could recommend animal print. We are doomed.
Re:Amazon Echo Look by hrayr on Wednesday April 26, 2017 @12:02PM (#14204189)
Famous last words.
Re:Amazon Echo Look by dom0 on Wednesday April 26, 2017 @11:44AM (#14203984)
Bad fashion advice?
Re:Amazon Echo Look by BlackjackCF on Wednesday April 26, 2017 @01:32PM (#14205123)
Just the first camera shot in that ad was already creepy as fuck.
Re:Amazon Echo Look by friedman23 on Wednesday April 26, 2017 @01:45PM (#14205241)
Seriously, who thought the stalker sneaking around the door camera shot was a good idea?
Re:Amazon Echo Look by splintercell on Wednesday April 26, 2017 @02:08PM (#14205453)
My wife does this daily thing where she tries a pair of clothing, looks at herself in the mirror, sometimes ask my opinion, then change into complete different outfit, repeating the same process until she settles on what she would wear.

I swear, my wife would LOVE this product, unless I can scare her about the security implications.

Re:Amazon Echo Look by Shivetya on Wednesday April 26, 2017 @01:59PM (#14205364)
didn't the XBOX also feature something similar to this? I could swear I saw demos where it took your picture and did fashion shows
Re:Amazon Echo Look by WorldMaker on Wednesday April 26, 2017 @02:42PM (#14205771)
There are Kinect-based 3rd Party fitting room applications, mostly used as demos at fashion shows it looks like from a quick search. There are also Kinect games that play with similar concepts, in the space of a game.

The Xbox itself has never had fashion/fitting advice as a feature.

[dead]
Re:Amazon Echo Look by maxerickson on Wednesday April 26, 2017 @12:24PM (#14204435)
Please consider trying to respect the privacy of people, even when the internet doesn't.
Re:Amazon Echo Look by return0 on Wednesday April 26, 2017 @04:18PM (#14206591)
> this is a device that's designed to take photos and videos of you while you get dressed, and will be both connected to the internet and constantly communicating those images over the network.

So, like a smartphone?