News for hackers. Stuff that matters.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by rayhendricks on Thursday September 24, 2020 @11:25PM (#24586284)
So this is basically yet another reason to not let Amazon echo/Alexa on your network.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by dav43 on Thursday September 24, 2020 @11:35PM (#24586338)
From a technical and privacy standpoint, is there a huge difference to the Apple U1 device network - with the limited amount of information that’s been made public?

I’m coming from a position of limited knowledge on both platforms, so curious.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by duxup on Thursday September 24, 2020 @11:41PM (#24586362)
Amazon's Ring device and how they work with police raises a lot of questions about what these devices will report, to whom, and etc:

https://www.vox.com/recode/2019/10/8/20903536/amazon-ring-do...

Makes you wonder that even if you choose not to share with police, if your amazon devices will help someone else's device do so...

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by heavyset_go on Thursday September 24, 2020 @11:58PM (#24586439)
> Makes you wonder that even if you choose not to share with police

This is a false choice, because police don't need your permission to obtain video evidence on Amazon's servers if they have a warrant or court order. They don't even have to notify you if they look at it or use it as evidence, either.

Most of the time law enforcement just asks providers nicely for the data they want access to, and providers comply. No warrant is even needed in that scenario.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by nullc on Friday September 25, 2020 @12:16AM (#24586528)
Yep. In the US you generally have no standing to resist a warrant for your data that you handed over to a third party.

Don't use cloud based cameras.

Products like ring could easily be designed so that your data would be protected-- e.g. encrypt on the device, all storage is encrypted.. you give a password to any client to view it that amazon never sees. Yet even though its straightforward to do so this is not available in any commercial product that I'm aware of. I don't think that's an accident: These products exists to spread monitoring, -- mostly for marketing purposes, the fact that they can be abused by authorities for dragnet surveillance without (adequate) due process is just a "bonus".

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by heavyset_go on Friday September 25, 2020 @12:38AM (#24586626)
> mostly for marketing purposes, the fact that they can be abused by authorities for dragnet surveillance without (adequate) due process is just a "bonus".

It's not just a bonus, it's a selling point. Not for normal consumers, but for law enforcement, and Amazon would like to keep the police surveillance use case secret[1].

From The Secret Scripts Amazon Gives to Cops to Promote Ring Surveillance Cameras[2]:

> Documents obtained by Motherboard reveal that Ring provides 46 standardized comments that cops can post on social media, and several documents with scripted responses to possible questions from the public.

[1] https://www.cnet.com/news/amazon-ring-wants-police-to-keep-t...

[2] https://www.vice.com/en_us/article/wjwea4/revealed-the-secre...

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by galaxyLogic on Friday September 25, 2020 @02:47AM (#24587191)
Amazon can protect you too. They don't care who they are protecting as long as they get paid, see:

https://nypost.com/2020/09/24/amazons-new-dashcam-gadget-all...

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by ponker on Friday September 25, 2020 @01:42AM (#24586905)
There is a big advantage of cloud based cameras and that is that the data is off premises and can't be just taken away on an SD card. Of course you could send video to your own server but that is beyond the capabilities of most users.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by 01100011 on Friday September 25, 2020 @04:18AM (#24587745)
I use 'rclone' and 'motion' to push video and images to my google drive account. If I wanted to, I could easily encrypt it first. I think it's superior to most cloud video providers. I don't think most LE agencies would think to check something like Google Drive for active video feeds.

I also delete anything over 3 days(thanks rclone) and use a script which detects the presence of either my wife's or my phone on our LAN so the cameras auto-start when we're not home.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by ponker on Friday September 25, 2020 @04:28AM (#24587805)
That's cool but accessible to about 0.1% of the population.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by sgerenser on Friday September 25, 2020 @12:52PM (#24591723)
It’s not any harder than using an ftp account with curlftpfs as a Dropbox replacement!
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by seattletech on Friday September 25, 2020 @11:11AM (#24590624)
So a standard HN solution then
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by duxup on Friday September 25, 2020 @12:00AM (#24586446)
My understanding is that police have been asking the owners for the video. It would seem that direct access to Amazon beyond finding out who has the video isn't entirely open.

If they can get a warrant then yeah it's moot, but that's not always the case.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by heavyset_go on Friday September 25, 2020 @12:02AM (#24586460)
This is law enforcement just asking nicely for the video. They do this before getting a warrant because it is less work. If you don't comply, they'll just go to a judge and order Amazon to release it.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by ashtonkem on Friday September 25, 2020 @12:27AM (#24586585)
They should be universally told to pound sand without a warrant. You don’t give the armed representatives of the state everything they ask for just because they’re being polite; make them go through the proper procedures with oversight.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by mc32 on Friday September 25, 2020 @08:34AM (#24589013)
Probably when you know that your neighbor was burglarized or attacked, etc., you don’t want to impede the investigation. That’s worse than not taking care of your weeds or garbage in your yard in terms of getting along with neighbors.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by ashtonkem on Friday September 25, 2020 @10:57AM (#24590485)
“Don’t impede the investigation” is second only to “think of the children” for the erosion of our rights. Those who will abuse their powers will always have a great excuse for it, which is why we must be vigilant.

And of course the neighbor can freely hand over their own data to the cops if they want to; the cops should need a warrant to get that video from Amazon directly.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by detaro on Friday September 25, 2020 @12:04AM (#24586468)
There's both. Amazon has a feature for law enforcement to ask the owner nicely, but since these things upload to the cloud they can also get a warrant to get it from Amazon directly.

https://www.govtech.com/security/Amazons-Ring-Video-Camera-A... (warrant part right the end)

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by ashtonkem on Friday September 25, 2020 @12:26AM (#24586581)
A system that requires warrants would be superior, even warrants are often rubber stamped. Just giving whatever law enforcement wants, even audio recorded in your own home, without even a shred of oversight is the literal definition of a police state.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by gruez on Thursday September 24, 2020 @11:56PM (#24586428)
>Makes you wonder that even if you choose not to share with police, if your amazon devices will help someone else's device do so...

It's safe to assume whoever's buying a ring doorbell probably has internet access as well so it's a moot point.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by duxup on Friday September 25, 2020 @12:01AM (#24586454)
I'm guessing those devices will happily use the sidewalk network as a backup as well, you still might be sharing.
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by hoytschermerhrn on Friday September 25, 2020 @12:19PM (#24591400)
What’s everyone’s hot take on allowing eero routers within your network?
Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by comex on Thursday September 24, 2020 @11:42PM (#24586367)
Yes, if you’re worried about it using (from the article) 80kbps of your bandwidth.

Otherwise no.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by smokelegend on Friday September 25, 2020 @12:16AM (#24586527)
Think you might be mistakenly mixed up device to cloud speed vs device to device speed.

I think it states 500mb cap for device to device comms. That's a decent pipe for comms.

Re:Amazon details its low-bandwidth Sidewalk neighborhood ne... by comex on Friday September 25, 2020 @12:15PM (#24591352)
To quote the whitepaper [1] itself:

The maximum bandwidth of a Sidewalk Bridge to the Sidewalk server is 80Kbps, which is about 1/40th of the bandwidth used to stream a typical high definition video. Today, total monthly data used by Sidewalk enabled- devices, per customer, is capped at 500MB, which is equivalent to streaming about 10 minutes of high definition video.

My reading is that there are two caps that both apply to the same, device-to-cloud data usage:

- 80 kbps instantaneously per bridge device (e.g. Echo)

- 500 MB per month "per customer" (not sure if this is different from per bridge)

This seems reasonably consistent. At 80kbps, 500 MB would take about 14 hours to transfer, which is much less than a month, but I think the expectation is that bridges rarely max out the 80kbps.

[1] https://m.media-amazon.com/images/G/01/sidewalk/privacy_secu...