News for hackers. Stuff that matters.
Re:Google’s Nest fiasco harms user trust and invades their p... by iforgotpassword on Saturday March 16, 2019 @10:06AM (#19407862)
I suspect this is going to be an unpopular opinion, but I still don't get the fuzz. People buy crap like Amazon echo left and right, and have been carrying little computers with microphones and an internet connection around all day for even longer. Apart from the fact that any sane person shouldn't trust any google product value their privacy in the first place, how many people are there consciously not buying a smartphone in fear of it being used to spy on them, then go buy this nest product and feel safe about it.

I might be an asshole for it and rightly so get down voted, but I really feel schadenfreude from this story. And maybe now some more people will learn their lesson. You can tell a toddler a dozen times that the stove is hot. They really only learn after they touched it once.

Re:Google’s Nest fiasco harms user trust and invades their p... by ignoramous on Saturday March 16, 2019 @10:32AM (#19407969)
Couple of reasons why I think the fuzz is approp:

1. The fact that things are already bleak doesn't justify a more bleaker tomorrow. The fact that a large section of humanity is oblivious to privacy breaches doesn't mean the select few who do care about it should stop protesting against it, regardless of behaviour of the masses [0].

2. The law makers (governments) and the king makers (tech conglomerates) shouldn't be given a free-pass to do as they please at the expense of security, privacy, free-speech, and other ethos that make internet such a powerful medium. Policies needs to be continually renewed in response to emerging threats at pace [1] and so it is important to keep naming/shaming said entities to drive the dialogue.

--

[0] Bruce Schneier on Censorship, Surveillance, Propaganda, and User Control https://www.youtube.com/watch?v=m3NJ-Ow2Lvg

[1] Bruce Schneier, again, on Security of Everything https://www.youtube.com/watch?v=GkJCI3_jbtg

Re:Google’s Nest fiasco harms user trust and invades their p... by iforgotpassword on Saturday March 16, 2019 @12:13PM (#19408510)
Fair points. And I didn't intend to say google should go unpunished for this, in case it came across as defending them.

Added those vids to my queue, thanks.

Re:Google’s Nest fiasco harms user trust and invades their p... by reaperducer on Saturday March 16, 2019 @10:51AM (#19408070)
little computers with microphones and an internet connection around all day for even longer

The difference is that we know our phones have microphones and cameras and internet.

The reason people are upset is because there was no way anyone would know they added an internet-connected microphone to their home with this device unless they opened it up and reverse engineered the firmware.

If anyone can prove that these microphones were turned on without the owner’s consent — even just for “telemetry” or “quality assurance” — then criminal charges will follow.

Re:Google’s Nest fiasco harms user trust and invades their p... by iforgotpassword on Saturday March 16, 2019 @12:08PM (#19408485)
> The difference is that we know our phones have microphones and cameras and internet.

The question is, does that really matter? Isn't that just something you tell yourself to feel like you're still in control, ahead of the game? I have two colleagues who in general are pretty concerned with privacy, data protection etc. but still bought an echo. Then countered my surprise with the same argument: at least I know it's listening and how it works! Like somehow, that knowledge makes you immune to the Problem. In reality, you don't suddenly behave differently at home. You won't think twice before saying something. You just managed to fool yourself enough to deal with that cognitive dissonance.

And I'm all for charges against google here, I mean I dislike them more every day because of something they did, including this story. It's just funny that some people still think you can trust them in any way.

Re:Google’s Nest fiasco harms user trust and invades their p... by ncallaway on Saturday March 16, 2019 @01:52PM (#19409132)
> The question is, does that really matter?

I absolutely think it does.

I have also bought an Amazon Echo, but I unplug it when it's out of use for extended periods of time.

I wouldn't purchase a similar product from Facebook, because I trust Amazon with my personal data more than Facebook.

I've never purchased a Smart TV that contains a microphone.

Just because I make some decisions you disagree with in balancing my privacy and convenience trade-offs doesn't mean I should be prevented from making those decisions at all.

Re:Google’s Nest fiasco harms user trust and invades their p... by reaperducer on Saturday March 16, 2019 @04:13PM (#19409974)
I have also bought an Amazon Echo, but I unplug it when it's out of use for extended periods of time.

I was given a Google Home for Christmas, and won't even take it out of the box. I'd give it away, but that not really solving the problem.

I've never purchased a Smart TV that contains a microphone.

My LG has one in the remote control. But I disallowed the TV from my home wifi about a year ago. I don't trust LG, and looking through the 53 screens of Terms of Service LG thinks need to agree to just to watch TV, I probably did the right thing.

Re:Google’s Nest fiasco harms user trust and invades their p... by glennpratt on Saturday March 16, 2019 @04:40PM (#19410145)
> I'd give it away, but that not really solving the problem.

This implies that your moral judgement must apply to whoever you gave it to. Why?

Re:Google’s Nest fiasco harms user trust and invades their p... by skookumchuck on Saturday March 16, 2019 @04:53PM (#19410228)
> I have also bought an Amazon Echo, but I unplug it when it's out of use for extended periods of time.

I'd buy an Echo if it had a physical switch to enable the microphone, along with a light that says its on. Software switches are worthless.

Re:Google’s Nest fiasco harms user trust and invades their p... by Baeocystin on Saturday March 16, 2019 @05:46PM (#19410499)
I power my echo through a smart plug. Works great... assuming there isn't a hidden mic in the plug. :D
Re:Google’s Nest fiasco harms user trust and invades their p... by wurst_case on Saturday March 16, 2019 @12:18PM (#19408551)
Yes it does matter. I have camera covers for my phone and laptop. In terms of microphones I keep the phone and laptop away from me when I have conversations about politics. Call me paranoid but we know that the potential for listening in is there and I just don't know who is recording what. Remember that only two generations ago my German jew grandparents were put in camps. I don't live in a constant state of fear or anything like that, these precautions have just become habit.
Re:Google’s Nest fiasco harms user trust and invades their p... by wgjordan on Saturday March 16, 2019 @01:02PM (#19408813)
> The question is, does that really matter?

Legally speaking, it really does matter (18 U.S.C. 2511(2)(d) [1]) [my emphasis]:

> It shall not be unlawful under this chapter for a person [...] to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception [...].

[1] https://www.law.cornell.edu/uscode/text/18/2511

Re:Google’s Nest fiasco harms user trust and invades their p... by Pocketknife on Saturday March 16, 2019 @08:04PM (#19411257)
You say that as if Silicon Valley is subject to the law in the same way as you or I.

They learned to pay off DC around when Microsoft was taken to the anti-trust woodshed.

Now they are beyond accountability. Especially once it's clear to everyone that they control election results to a wide degree.

Re:Google’s Nest fiasco harms user trust and invades their p... by MertsA on Saturday March 16, 2019 @10:35PM (#19411855)
That's not what he's saying. The section he is quoting is that if the user already consented to e.g. an Amazon Echo listening with a microphone then that's totally legal. Hence it does matter whether or not Google disclosed this to the end user although reading through the rest of that section there's nothing there that would implicate Google if they didn't actually use the microphone in some way. I'm not saying there isn't some law being broken here, but it isn't in 18 U.S. Code § 2511.
Re:Google’s Nest fiasco harms user trust and invades their p... by gregd on Saturday March 16, 2019 @02:19PM (#19409291)
Of course it matters. How many consumers honestly knew that Nest was bought by Google?

I mean laughing and experiencing schadenfreude over someone planting a hidden and previously unknown microphone in ones home, is just weird man.

Re:Google’s Nest fiasco harms user trust and invades their p... by skookumchuck on Saturday March 16, 2019 @04:52PM (#19410221)
The camera and microphone on a phone is severely limited by battery life (and your data plan). But one connected to the electric grid and LAN can run 24/7 without being noticed.
Re:Google’s Nest fiasco harms user trust and invades their p... by ncallaway on Saturday March 16, 2019 @01:50PM (#19409119)
> People buy crap like Amazon echo left and right

People know the Amazon echo contains a microphone.

> have been carrying little computers with microphones and an internet connection around all day for even longer

People know that their phones contains a microphone.

Surely the difference of being able to make an informed choice is still significant?

> I might be an asshole for it and rightly so get down voted, but I really feel schadenfreude from this story

I don't understand the schadenfreude here. Because some people make privacy choices that you disagree with, then we should take pleasure when companies stop presenting a choice at all?

I guess I just fundamentally don't understand how you can equate the two categories of products together.

In one category people make a knowing choice. In the other category they do not, and the company has outright lied to them to prevent them from making a knowing choice.

Re:Google’s Nest fiasco harms user trust and invades their p... by ehsankia on Saturday March 16, 2019 @01:59PM (#19409174)
I don't understand the shadenfreude either, but for the opposite reason. I think most people who have Nest products also are in the Google ecosystem, and are probably happy that they now have a Google Home for free.

Considering half of the other Nest products contain microphones already, I don't think anyone who truly is worried about this stuff would've gotten a Nest ecosystem to start with.

I agree, it's important to have all the facts so you can make informed decision, but this specific case has been way overblown, mostly by people who don't use Nest nor ever will. Almost anyone who's outraged probably would've never bought the product anyway.

Re:Google’s Nest fiasco harms user trust and invades their p... by justicezyx on Saturday March 16, 2019 @02:15PM (#19409265)
What's the point of arguing who made the arguments, when we are debating how much validity do the arguments have.
Re:Google’s Nest fiasco harms user trust and invades their p... by arkades on Saturday March 16, 2019 @02:40PM (#19409403)
> People buy crap like Amazon echo left and right, and have been carrying little computers with microphones and an internet connection around all day for even longer.

Consent. The difference is consent. You may get laid ten times a day for a week, but the time it happens without your permission is still a problem.

I have trouble believing folks that “don’t get this” aren’t being purposely obtuse. Consent isn’t that complicated an idea.

Re:Google’s Nest fiasco harms user trust and invades their p... by iforgotpassword on Saturday March 16, 2019 @03:18PM (#19409615)
> Consent. The difference is consent. You may get laid ten times a day for a week, but the time it happens without your permission is still a problem.

Interesting choice of analogy.

Lets assume that you actually consented to your smartphone recording you at any time without telling you, and then google use that recording for whatever they like. That is most probably not true: you only want the mic to record you in very specific moments, and you also probably want to know exactly where any data that leaves your device is stored and how it's being used.

You have to trust google (or any other company who's app you gave permission to access the mic) to comply with this.

If you do, then the nest case shouldn't be an issue to you at all. You never consented to this mic being used for anything, so legally they can't use it for anything, and since you trust them in the smartphone case, you do here too. End of story.

If however you wouldn't even trust google with the mic in your smartphone, then why would you buy anything from them at all? "Oh it doesn't have a mic so they'd only abuse all the other data they can collect from it."

> I have trouble believing folks that “don’t get this” aren’t being purposely obtuse. Consent isn’t that complicated an idea.

Common sense isn't either. Google is evil, and not just since yesterday. I wouldn't even buy a Chromecast.

Re:Google’s Nest fiasco harms user trust and invades their p... by hedora on Saturday March 16, 2019 @10:42AM (#19408021)
The reason I think it’s news: I agree Google products are a privacy dumpster fire, and even think some people that bought the nest thingy agree.

The part that is news for me: Google is (inadvertently?) moving the bar of acceptable behavior to “we’ll plant microphones (and other surveillance hardware capabilities) in devices now, wait until you start relying on unrelated functionality, then totally issue a press release before we turn them on and start slurping your data.”

Re:Google’s Nest fiasco harms user trust and invades their p... by abootstrapper on Saturday March 16, 2019 @12:40PM (#19408685)
If a stranger comes in your house uninvited and without your knowledge, what’s the big deal? You’ve let other people in your house, and your father in law is a terrible house guest!
Re:Google’s Nest fiasco harms user trust and invades their p... by Zelphyr on Saturday March 16, 2019 @10:14AM (#19407889)
I think yours is an important question that few people realize which is; these companies are legally required to tell you when they are listening to you, or even potentially listening to you.

Google "accidentally" forgot to tell people that they included a mic in those devices. That's still illegal.

Re:Google’s Nest fiasco harms user trust and invades their p... by propogandist on Saturday March 16, 2019 @10:39AM (#19407998)
Google admitted to congress they're constantly tracking people via their devices

>Hawley pointed out on Tuesday that a user's location is sent to Google hundreds of times a day, even when the phone is not in use. In fact, Hawley said, a user's location is tracked "every four minutes, or 14 times an hour, roughly 340 times during a 24-hour period," even when the phone is not in use.

>DeVries confessed that "location information is absolutely core to making a mobile phone work the way that you want it to work." He said that Google has an "optional service" called Location History that is opt-in and "can collect location over time when people turn that on."

>"But Google collects geolocation data even if Location History is turned off, correct?" Hawley pressed.

>"Yes, senator, it can in order to operate other services—"

This should be illegal and was admitted to congress -- justifying it with BS excuses -- but virtually no major media outlet is covering this.

https://pjmedia.com/trending/google-tracks-you-even-when-loc... (one of 3 articles I found about this)

Re:Google’s Nest fiasco harms user trust and invades their p... by hedora on Saturday March 16, 2019 @10:51AM (#19408071)
This has been well-known for a while, so the story itself isn’t news.

(The fact that congress called them in to testify is news, since it means maybe some politicians are going to make noises about how unacceptable this is, or perhaps even introduce a bill.)

Re:Google’s Nest fiasco harms user trust and invades their p... by propogandist on Saturday March 16, 2019 @11:12AM (#19408205)
It's not new news to me, but having a Google exec publically admit should be bigger news, in my opinion. In the testimony [0] he also positions Google's location service as something that's required for the phone to function and even make calls, which is untrue. Being a lawyer and apparently on Google's privacy counsel for a decade this may've been a disclosure on how deep the data-mining goes. These are the sort of details that should be pulled out and scrutinized by the media.

Unfortunately most of these news publications rely on things like Google's YT + Adsense for content distribution and revenue, so they may not want to anger their overlords. I also doubt anything will come out of this hearing -- people don't seem to care about privacy and they want convenience. Although this senator understands the privacy concerns, most of his peers are clueless.

https://www.youtube.com/watch?v=PwyuCtbK3qw

Re:Google’s Nest fiasco harms user trust and invades their p... by milkthefat on Saturday March 16, 2019 @10:23AM (#19407933)
What happens if i created a device that has multiple speakers and through a software update I make one an (albeit)poor quality mic? Do I need to tell you before hand that this was possible? Are they still considered speakers?
Re:Google’s Nest fiasco harms user trust and invades their p... by ineedasername on Saturday March 16, 2019 @10:37AM (#19407988)
Uh, yes? I don't think it's an open question that product updates should detail the updates made. And since recording someone in any way without their knowledge is illegal in many contexts, that would go double for something like you describe.
Re:Google’s Nest fiasco harms user trust and invades their p... by foobarian on Saturday March 16, 2019 @11:20AM (#19408243)
The point is that there are a million devices with speakers and we don't expect their manufacturers to disclose that it is possible to record us with them. As long as they are not actually doing it I don't see the big deal with the dormant microphone either.
Re:Google’s Nest fiasco harms user trust and invades their p... by ineedasername on Saturday March 16, 2019 @11:58AM (#19408419)
They disclose the speaker. And I'm willing to bet the vast majority aren't wired to be an input device. Your comparison is a false equivalency.
Re:Google’s Nest fiasco harms user trust and invades their p... by code_duck on Saturday March 16, 2019 @02:02PM (#19409197)
Obviously that change would be made in order to use the new microphone capability, and of course that would require informing consumers when you’re using the mic and why.
Re:Google’s Nest fiasco harms user trust and invades their p... by renholder on Saturday March 16, 2019 @10:48AM (#19408054)
>...how many people are there consciously not buying a smartphone in fear of it being used to spy on them...

I'd say that the number is relatively small to non-existent but that might have more to do with the fact that cell phones are more a requirement for day-to-day life than anything else.

For example, try to sign-up for paging services, as a means to replace your cellphone with a passive-only device, and see how far you can actually get with that idea.

Or try to buy a CRT-TV.[0]

At some point you have to concede that means to go against society's trends are no longer there, unless you make them yourself - and most people either don't have the resources nor the time or a combinations of either to do that.

[0] - https://www.amazon.co.uk/s/ref=lp_560864_nr_p_n_feature_thre...

Re:Google’s Nest fiasco harms user trust and invades their p... by reaperducer on Saturday March 16, 2019 @10:54AM (#19408093)
try to sign-up for paging services, as a means to replace your cellphone with a passive-only device, and see how far you can actually get with that idea.

Pagers are still used in some industries, like healthcare, where people can die if a message doesn’t get through. Pagers are still more reliable than text messages and cell phones in many locations and especially inside large buildings like hospitals. Though the industry is switching.

Re:Google’s Nest fiasco harms user trust and invades their p... by renholder on Saturday March 16, 2019 @02:54PM (#19409474)
>Pagers are still used in some industries...

I never said that they weren't, yeah?

I suggested it being a difficult alternative because of the wide-spread use of cell phones. For example, in my country, the national paging system was taken down in August of 2011; so, there's no consumer paging services. B2B (which hospitals would be inclusive of) still exist, to be sure, but that means nothing in the overall scheme of a consumer trying to not buy a cell phone.

Re:Google’s Nest fiasco harms user trust and invades their p... by pdkl95 on Saturday March 16, 2019 @11:10AM (#19408193)
https://www.washingtonpost.com/news/the-switch/wp/2014/08/11...

"Why one of cybersecurity’s thought leaders [Dan Geer] uses a pager instead of a smart phone"

Re:Google’s Nest fiasco harms user trust and invades their p... by dontbenebby on Saturday March 16, 2019 @11:57AM (#19408415)
>I suspect this is going to be an unpopular opinion, but I still don't get the fuzz. People buy crap like Amazon echo left and right

People are aware an Echo contains a microphone though.

For consent to be valid, it must be informed consent.

Keep in mind pretty much any sensor can be leveraged via court order, so it's valid for people to be upset they were unable to properly threat model due to a lack of information.

Re:Google’s Nest fiasco harms user trust and invades their p... by brandon272 on Saturday March 16, 2019 @07:21PM (#19411052)
I believe that one reason it grinds people's gears is that it's symbolic of a larger problem. Dumping microphones in products and then having it not occur to you to even note the microphone in a spec represents a blind spot in how this company views privacy, and indicates how they take for granted the ability to add whatever sensors and capture hardware into their products with the purpose of collecting information about their customers - with or without their consent.
Re:Google’s Nest fiasco harms user trust and invades their p... by oh_sigh on Saturday March 16, 2019 @07:33PM (#19411113)
Does it really grind peoples gears? As in, new people who weren't upset with amazon echos, google homes, apple homepods, etc? Or is it just the same people that were up in arms about 'spy devices' being welcomed into peoples homes that are also up in arms about Nests having a microphone in them?
Re:Google’s Nest fiasco harms user trust and invades their p... by specialist on Saturday March 16, 2019 @01:35PM (#19409019)
Some people want to receive what they pay for, nothing more, nothing less.

If you had a peanut allergy, wouldn't you want to know if the candy bar has peanuts?

Re:Google’s Nest fiasco harms user trust and invades their p... by orev on Saturday March 16, 2019 @10:09AM (#19407872)
There’s a difference between doing it knowingly vs unknowingly. In fact, that is the ONLY thing that matters.
Re:Google’s Nest fiasco harms user trust and invades their p... by iforgotpassword on Saturday March 16, 2019 @10:17AM (#19407908)
But that's people bullshitting themselves. It's not like you suddenly behave differently in your own home once you got an echo dot. You basically know you just sold your privacy to amazon, but you tell yourself it's OK since you know about it, which somehow puts you on top of the game. It doesn't.
Re:Google’s Nest fiasco harms user trust and invades their p... by viscanti on Saturday March 16, 2019 @10:25AM (#19407943)
> But that's people bullshitting themselves.

No it's not. What Google did here was illegal. There are also people who value their privacy and don't have an Amazon echo or other listening device.

You're trying to argue that SOME people don't value their privacy so NO ONE should ever have an expectation that a device they buy isn't secretly listening in on them illegally. I fundamentally disagree with that take.

Re:Google’s Nest fiasco harms user trust and invades their p... by HALtheWise on Saturday March 16, 2019 @12:05PM (#19408452)
I agree. Remember Amazon's little dash buttons they sold to allow quick reordering of products? They contain a microphone. I'm pretty sure they didn't mention that in their public documents, and it never seems to have been used for anything except an ultrasonic pairing procedure with some iPhones, but it definitely exists. HN didn't get mad because Amazon has never claimed to be a morally good company, so they aren't the current corporate bogeyman. It seems to me like disclosing when I sell a product all of the nefarious ways it could possibly be OTA updated is a little bit of an extreme position, given that even a simple accelerometer can be used to track you and sometimes record sound. In short, if you think a company is actively working against your well being, don't put anything they make in your house. Otherwise, don't worry.
Re:Google’s Nest fiasco harms user trust and invades their p... by wurst_case on Saturday March 16, 2019 @12:14PM (#19408513)
They did? You are wrong, I find that equally concerning. I do make choices on electronics based on their hardware. I do not have any devices like he echo or homepod because I find them intrusive. Maybe you two don't but I definitely do. I have two devices with microphones and cameras connected to the internet as far as I know and I have taken the necessary precautions to ensure that those are safe. Now I have to open up my other Google products to check if they've been bugged. You bet your butt I'm a bit miffed.
Re:Google’s Nest fiasco harms user trust and invades their p... by rhizome on Saturday March 16, 2019 @05:59PM (#19410588)
"People" use Facebook and vote, but it's really not that simple now, is it?