News for hackers. Stuff that matters.
Re:Amazon devices will soon automatically share your Interne... by efitz on Saturday May 29, 2021 @10:07PM (#27330003)
You mean, like AirTag/Find My?

I think that Amazon's marketing for this is horrible, reminds me of XBox' failed marketing around their online-only plan for XBox One game purchases [1].

But really all they've done is built AirTags as a platform rather than an application, e.g. Tile is supported by Amazon's new platform.

I don't want to give random people with random apps any amount of arbitrary bandwidth; I'd rather that users of the Sidewalk platform would have to register app specific message types publicly (to ensure transparency) and with Amazon (who should enforce message type and payload restrictions).

[1] https://arstechnica.com/gaming/2013/06/xbox-one-eighty-micro...

Re:Amazon devices will soon automatically share your Interne... by lxgr on Sunday May 30, 2021 @02:17AM (#27331022)
> I don't want to give random people with random apps any amount of arbitrary bandwidth

It uses a maximum of 500 megabyte per month.

Regarding payload type registration – it seems like it would be pretty difficult to monitor that, given that payloads are encrypted.

That actually seems more like a feature than a problem to me: If my IP address does not show up in any logs and I can't even see what's being transmitted, I really doubt there would be any liability for the user here.

Re:Amazon devices will soon automatically share your Interne... by secfirstmd on Sunday May 30, 2021 @07:11AM (#27332368)
500 megabyte a month is a lot if you are loving in a relatively poor country.
Re:Amazon devices will soon automatically share your Interne... by lxgr on Sunday May 30, 2021 @12:02PM (#27334154)
That's a fair point, and I do hope that regional caps will take that into consideration.

Generally speaking, are volume caps on fixed line internet a thing in many countries? I'd imagine that it would be hard to use something like a smart speaker on such a tight data budget in the first place, as I can't imagine them to be very bandwidth-conscious in general (music streaming having no "low data usage" option on them usually, etc).

Re:Amazon devices will soon automatically share your Interne... by cglace on Sunday May 30, 2021 @09:19AM (#27333037)
Are people in poor countries likely to own a lot of Amazon devices?
Re:Amazon devices will soon automatically share your Interne... by justahuman74 on Sunday May 30, 2021 @03:00AM (#27331204)
Wait till your IP address gets banned from something for being a source of spam
Re:Amazon devices will soon automatically share your Interne... by zorked on Sunday May 30, 2021 @05:21AM (#27331841)
Sidewalk does not allow generic access to the Internet. It connects to Sidewalk servers only.

Source: https://www.amazon.com/gp/help/customer/display.html?nodeId=...

Re:Amazon devices will soon automatically share your Interne... by bradknowles on Tuesday June 01, 2021 @12:21AM (#27350713)
Or a crime gets committed via your IP address and you get thrown in jail for it.
Re:Amazon devices will soon automatically share your Interne... by clajiness on Saturday May 29, 2021 @10:40PM (#27330170)
> You mean, like AirTag/Find My?

Can you explain your comparison?

Re:Amazon devices will soon automatically share your Interne... by efitz on Saturday May 29, 2021 @10:55PM (#27330230)
Any AirTag owned by anybody can and will communicate with your iPhone over Bluetooth if you have the right features enabled (which are default). Your phone will contact Apple and tell them about the interaction. I haven’t seen protocol details, but last week a security researcher demonstrated that it is possible to use the AirTags protocol as a covert channel (with very low bandwidth).
Re:Amazon devices will soon automatically share your Interne... by sgtnoodle on Sunday May 30, 2021 @01:04AM (#27330748)
I recently read up on Bluetooth low energy. The AirTags are most likely periodically broadcasting announcement packets, and folks' iPhones are passively receiving them. It therefore seems comparable to using 802.11 SSID beacons for geo-location, except that folk intentionally bought the AirTag to be position tracked.

Just by modulating whether or not the AirTag is transmitting, it seems like you could communicate at a low data rate. You could even use hundreds or thousands of AirTag IDs to get a useful data rate. Just because you could do it, though, it seems like there are plenty of other more practical covert channels.

Re:Amazon devices will soon automatically share your Interne... by bottled_poe on Saturday May 29, 2021 @11:17PM (#27330302)
not great, but not the same as open connectivity to unknown devices.
Re:Amazon devices will soon automatically share your Interne... by detaro on Sunday May 30, 2021 @07:03AM (#27332317)
Amazon Sidewalk also is not "open connectivity".
Re:Amazon devices will soon automatically share your Interne... by SN76477 on Sunday May 30, 2021 @12:40AM (#27330649)
No, it isn’t a great comparison. But it is a similar slippery slope.
Re:Amazon devices will soon automatically share your Interne... by efitz on Sunday May 30, 2021 @05:10PM (#27336812)
It would be trivial to design a protocol that allowed client side contact inspection.

It would be possible to design an encrypted protocol that allowed Amazon server side content inspection.