News for hackers. Stuff that matters.
Re:Alexa leaks private wishlists by danielskogly on Saturday September 18, 2021 @11:19AM (#28576908)
I run a simple, free and privacy-friendly wishlist service[0] with zero ads and tracking that's been around for a couple of years now, and I don't even keep your e-mail address in plaintext[1]. It's been exciting to see the user count go from ~500 to ~2500 the last year. Any feedback and feature requests are much appreciated :)

[0] https://wishy.gift/

[1] https://news.ycombinator.com/item?id=24965671

Re:Alexa leaks private wishlists by vmoore on Saturday September 18, 2021 @10:11AM (#28576425)
I have a 16gb USB flash drive encrypted with LUKS[0]. In there are various lists that I don't want anyone to find, however mundane they actually are. Things like shopping lists and 'to buy' lists for Amazon etc. Always presume 'private' stuff you have in the cloud will be leaked via various means (Rogue employee, data breach, sloppy programming etc)

[0] https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup

Re:Alexa leaks private wishlists by djhworld on Saturday September 18, 2021 @09:52AM (#28576271)
It's an interesting unintended consequence sort of thing, especially as the OP set this list up before even getting an Alexa device.

I'd feel the same sense of annoyance if something like that happened to me.

Re:Alexa leaks private wishlists by dzink on Saturday September 18, 2021 @09:40AM (#28576181)
Use https://www.dreamlist.com instead. It is completely private and ads free.

This is not the first time large companies with built in wishlists have ignored or abused their users. There were times when a retailer would direct your loved ones no to your list but to an “Idea” list in a tab right next to it when they went to your link. Most often they just index your list on Google and it becomes a top result when someone searches your name (great SEO for them, bad for you). Or suggest gift cards to stores that are 30% overpriced to your loved ones right at the top of your list, when you never wished for one. I built DreamList by hand over the past few years to prevent these and other abuses with family’s wishes and money and now it’s growing. I would love to get your feedback as well.

Re:Alexa leaks private wishlists by whoknew1122 on Saturday September 18, 2021 @11:27AM (#28576971)
On the internet, you are a consumer or you're the product. You're paying for something, or you yourself are being sold. Dreamlist isn't "completely private." Read their privacy policy.

> "We may share information about you in anonymous and/or aggregated form with third parties for industry analysis, demographic profiling, research, analysis and other similar purposes."

If you think that savvy companies can't use other databases to aggregate user profiles and deanonymize data... well, you're the perfect user for Dreamlist!

EDIT: Or, as I found out by clicking on the parent's user handle, you actually founded Dreamlist. I might humbly suggest at this point, Diana, that you're open and forthright about the fact you sell data to other companies. Even if you're completely dutiful in anonymizing data, you have no control over what is done with the data once you sell it.

---

For what it's worth, I'm much more worried about the privacy implications of Dreamlist than Alexa. With Alexa, I know I'm giving access to my logged-in Amazon profile/account to anyone with access to my device. With Dreamlist, no one knows who my data is being sold to.

Re:Alexa leaks private wishlists by dzink on Sunday September 19, 2021 @12:30AM (#28581705)
No data is being sold and no wishlists are being indexed to google. I built DreamList for my own family first. I work daily to make it safe for my kids to use. If you google DreamList and any competing wish list / registry brand and a common first name (or yours) you will see who keeps user data private (everyone else will show you thousands of personal wishlists and registries, we don’t, and preventing that is deep in our architecture choices). I suggested to the Cloudflare Team that they need to build backend analytics into their platform years ago, and they did it. I use that data to report our growth to the YC Startup School dashboard. We had google analytics which is why we had to add that disclaimer in the privacy policy, but we are actively trying to find a better more reliable solution on the backend instead. Front end metrics are still needed because we have many nontechnical users who are grandparents or families in need being added to gift drives and we need to know when something goes wrong for them and narrow down what the issue might be. For google analytics we cut off all fine grained tracking - no per user data, no integrated ads consoles, and only the landing pages that have no private user data get indexed. If we remove it completely, Google lowers SEO rankings. Every day the numbers diverge more between google and Cloudflare analytics given fhe increased use of built in browser ads blockers, and that makes us happy. We’d never add facebook pixels or viglink or other ad network JS into the site.

We went deeper than that, testing to make sure no data about the user leaks at any point even in the console, or caching, or any other section. External links go through one redirect page that removes source page information, so everything looks like it’s coming from the main site. If you have feedback, especially about privacy, please feel free to send it [email protected] - we push out changes and updates almost daily.

We noticed a well known billion valued startup ended up showing their employee emails in the network tab data streams of the browser console, because apparently they like to access people’s private content on occasion and their system leaves a trace of that that shows on every page visit. That’s why we also added a private memories and journal section for anyone on DreamList as well. Grandparents who are frequent users need to be able to save stories for loved ones, and we want them to have a place to do that that is private and ads free.

Always open to feedback. The site is bootstrapped and definitely looking for contributors.

Re:Alexa leaks private wishlists by system2 on Saturday September 18, 2021 @12:25PM (#28577372)
Well, he is the founder of dreamlist, what did you expect him to say?!
Re:Alexa leaks private wishlists by whoknew1122 on Saturday September 18, 2021 @01:00PM (#28577624)
Something more truthful?
Re:Alexa leaks private wishlists by quantified on Saturday September 18, 2021 @12:59PM (#28577615)
She.
Re:Alexa leaks private wishlists by contravariant on Saturday September 18, 2021 @10:20AM (#28576483)
Private in what sense? Is it just a company not within FAANG promising to protect your privacy or is there some actual security?
Re:Alexa leaks private wishlists by true_religion on Saturday September 18, 2021 @10:51AM (#28576710)
Rather than a promise, I’d like to see things like this written into the actual contract of paid services.

Even if the try to limit the liability to just what you paid them, it’s still a useful barrier to selling your data or exposing it.

In the case of them blatantly selling it to “partners” you could still go after them for the value they gained by breaking the contract and selling your copyrighted information.

Re:Alexa leaks private wishlists by booleandilemma on Saturday September 18, 2021 @10:40AM (#28576609)
I don’t think this is the same thing as Amazon’s wishlists right? This looks closer to gofundme.

If you need a wishlist (in the Amazon sense) and you’re worried about privacy, write down the stuff you wanna buy in a notebook.

Re:Alexa leaks private wishlists by robmiller on Saturday September 18, 2021 @10:48AM (#28576683)
My soon-to-be 8 year old son was devastated and ran into his room crying when he asked Alexa what the notification was and she described his hoverboard present just delivered to the front porch. Could we have anticipated that? Maybe. The surprise was the ruining of the surprise instead of the surprise itself.
Re:Alexa leaks private wishlists by dylan604 on Saturday September 18, 2021 @12:11PM (#28577273)
That actually made me chuckle. That's definitely not a scenario one would have thought of in advance. I wonder if the "Item is a gift" checkbox would have any bearing on how Alexa describes a delivery? Hey Alexa, hint hint...
Re:Alexa leaks private wishlists by AlotOfReading on Saturday September 18, 2021 @12:30PM (#28577406)
There's a couple of settings for it. One disables the item reading entirely, one disables names for things marked as gifts or items ordered around major holidays.
Re:Alexa leaks private wishlists by quantified on Saturday September 18, 2021 @01:00PM (#28577623)
Alexa is a box, not a butler. Discretion is not part of the makeup.
Re:Alexa leaks private wishlists by dylan604 on Saturday September 18, 2021 @01:06PM (#28577674)
It's a box made by programmers to be used by consumers. Programmers can make it do things that would make it even better and more useful to the consumers. As another comment has already indicated, these programmers have already taken this into consideration and provide the options.

Not really sure where you thought anyone was confused by a small box being a butler.

Re:Alexa leaks private wishlists by quantified on Sunday September 19, 2021 @12:52PM (#28585810)
> The surprise was the ruining of the surprise instead of the surprise itself.

Not confused, surprised. A hallmark of a butler is discretion. I hope you didn’t read that I was contradicting you or disagreeing? “Don’t spoil the suprise by divulging the nature of the package to the intended recipient” is beyond Alexa’s programming. For a butler, it wouldn’t even be a checkbox option, it would go without saying.

Re:Alexa leaks private wishlists by Handytinge on Wednesday September 22, 2021 @10:13AM (#28616524)
It worries me how ubiqutous the idea of letting your single digit age children talk to a "voice assistant" that analyses and stores their words has become. It also concerns me that people describe this thing as a "she", humanising it.
Re:Alexa leaks private wishlists by wenc on Saturday September 18, 2021 @02:39PM (#28578293)
Just curious, maybe I'm not understanding this well, but why was your son crying? Was a hoverboard not what he expected?

I'm thinking back to when I was a child -- I wouldn't normally cry if a surprise was ruined. The ruining of a surprise would not have been a big deal. But I might have cried if I hadn't gotten what I'd hoped for.

Re:Alexa leaks private wishlists by oautholaf on Saturday September 18, 2021 @03:36PM (#28578645)
This type of thing has also happened to me with Google Maps and Android Auto. I used Google Maps to locate a store to get a gift for my wife. Later, we used the car. When I plugged in my phone, Google Maps displayed the store as a recommended destination on the center console screen. This ruined the surprise.

Now, Google Maps has an Incognito mode, but now I know I must use it when buying surprise presents.

The problem is this interaction is impossible to anticipate, and makes me not want my preferences on communal devices at all.

Re:Alexa leaks private wishlists by Nextgrid on Saturday September 18, 2021 @12:23PM (#28577352)
I keep a list of stuff I need to buy in my usual notes or todo app. This means it's website-agnostic (not limited to Amazon), private, and the shop doesn't know what I want until I actually commit to buying it (so they can't raise prices or do targeted advertising by knowing that I'm interested in a given item). As a bonus, it protects me from these kinds of surprises.

I don't get the point of using a proprietary, crappy (in this case) implementation that gives an adversary an edge when a simple text file would do?

Re:Alexa leaks private wishlists by danielskogly on Saturday September 18, 2021 @12:26PM (#28577377)
I'd guess that for many, the point is that it's not simply a list of things they want or need to buy for themselves, but a list they can send to others. In this case, though, a todo-list might have been a better choice, although I myself also keep ideas for others in the wishlist service I use.
Re:Alexa leaks private wishlists by danbrooks on Saturday September 18, 2021 @10:39AM (#28576605)
Why not turn off deal notifications for both public and private wishlists?

I imagine few users have both types of wishlists and want different deal notifications.

Re:Alexa leaks private wishlists by bcopa on Saturday September 18, 2021 @10:26AM (#28576522)
We're building a competitor to Amazon wishlist with https://chestr.app/

We just opened our Beta a week ago

If people are looking for an alternative, we'd love to hear your feedback

P.S: we have a private list feature ...

Re:Alexa leaks private wishlists by jcims on Saturday September 18, 2021 @11:02AM (#28576778)
Did they just fix this?

https://imgur.com/dLRlBRb

Re:Alexa leaks private wishlists by Someone1234 on Saturday September 18, 2021 @11:23AM (#28576951)
Changing that option doesn't fix the problem the OP mentioned. So, no.
Re:Alexa leaks private wishlists by swiley on Saturday September 18, 2021 @09:10AM (#28575962)
I don’t know if you could pay me enough to have one of these in my house.
Re:Alexa leaks private wishlists by Someone1234 on Saturday September 18, 2021 @11:22AM (#28576936)
Why exactly?

This is a technology site, the way these voice assistant works has been posted numerous times and is common knowledge at this point. They've been ripped apart by multiple security pros. Yet every thread we get unjustified replies like this. It is tiresome and frustrating.

But I'll post it once again:

- Wake phase detection is all handled locally (i.e. on device).

- It loops a continuous recording over itself. If no phase is detected within a few seconds the recording is permanently lost.

- We can see from data monitoring it isn't continuously transmitting (and that's also what the companies behind it claim).

- "It could be modified" is a red herring. You are already carrying ON YOUR PERSON an always connected microphone with not one by two layers of operating system on it (baseband + consumer OS).

It should not be popular to post "photographs can steal your soul"-levels of tech-spiracy on a site like this, but yet here we are again.

Re:Alexa leaks private wishlists by perl4ever on Saturday September 18, 2021 @12:19PM (#28577315)
I don't have any particular reason to think the above is incorrect, let alone deliberately false or misleading. You sound more knowledgeable about the device than me.

But I think you're tremendously overstating your certainty to contrast with people you're calling paranoid.

If lives depended on it, are you that sure you fully understand how things work? Are you that sure of the contrast you point out between Alexa and a smartphone?

I'm not questioning your opinions and facts; I'm urging you to examine your own feelings and motivations, which obviously only you can.

When people attack doubts in others as paranoia, well, it might be accurate. But strong emotions and especially anger on the subject tend to suggest the underlying issue is suppressing one's own doubts.

The general attitude of "we know how it works" always makes me think of the quote "Given enough eyeballs, all bugs are shallow" and OpenSSL.

My rule of thumb is, if something is technically feasible, if it's not possible to casually detect it, and there are likely no immediate, directly applied penalties for it, then it's unwise to bet against it.

Something I see people assert to comfort themselves is that companies care about reputation and therefore wouldn't do some thing. I think you have to have blinkers on and somehow repress all your experience working for corporations or consuming products made by them to think that way.

Re:Alexa leaks private wishlists by xfhgjxcfgh on Saturday September 18, 2021 @11:58AM (#28577183)
>..."photographs can steal your soul"-levels of tech-spiracy...

It's a microphone connected to the internet. If corporations and governments choose to use this variety of device nefariously, they won't be stopped. Many people are feel concerned when their society increasingly resembles East Germany.

Re:Alexa leaks private wishlists by davidcbc on Saturday September 18, 2021 @01:36PM (#28577868)
> It's a microphone connected to the internet.

So is a cellphone and they are way more ubiquitous

Re:Alexa leaks private wishlists by lvass on Saturday September 18, 2021 @01:40PM (#28577902)
That is equally reprehensible.
Re:Alexa leaks private wishlists by swiley on Monday September 20, 2021 @05:52AM (#28591955)
These companies have a history of absolutely abusing things like this. Comparing reasonable concern that’s informed by history to superstition is very upsetting to me.
Re:Alexa leaks private wishlists by lvass on Saturday September 18, 2021 @01:35PM (#28577866)
My phone has a microphone kill switch. And yes, this device's software could be modified.
Re:Alexa leaks private wishlists by aquir on Saturday September 18, 2021 @09:27AM (#28576095)
Agree. I don’t see the purpose or the point of these devices. The only place where voice control makes sense it’s in the car.
Re:Alexa leaks private wishlists by davnicwil on Saturday September 18, 2021 @09:36AM (#28576157)
Admittedly it's a pretty trivial usecase for such an expensive device, but one thing it is brilliant at is setting timers, hands free, while cooking.
Re:Alexa leaks private wishlists by ivan_gammel on Saturday September 18, 2021 @09:43AM (#28576204)
Apple Watch does this job well too.
Re:Alexa leaks private wishlists by jasonlotito on Saturday September 18, 2021 @10:15AM (#28576447)
Just tried this with my Apple Watch, hands free of course. Didn’t work. Do you have to enable this?

Edit: nm I had to be away from my phone for my watch to pick this up over my phone.

Re:Alexa leaks private wishlists by Jcowell on Saturday September 18, 2021 @11:46AM (#28577106)
For a timer it shouldn’t matter since iPhone timers will also activate on the watch
Re:Alexa leaks private wishlists by Razengan on Saturday September 18, 2021 @05:07PM (#28579310)
If you raise your wrist to speak then I think Siri will prioritize the Watch, no?
Re:Alexa leaks private wishlists by innocenat on Saturday September 18, 2021 @09:45AM (#28576220)
You wear watch while cooking?
Re:Alexa leaks private wishlists by Razengan on Saturday September 18, 2021 @09:49AM (#28576243)
Is that a serious question?
Re:Alexa leaks private wishlists by lnxg33k1 on Saturday September 18, 2021 @10:09AM (#28576408)
Well it's not the most hygienic thing, items are hardly sanitisable
Re:Alexa leaks private wishlists by ivan_gammel on Saturday September 18, 2021 @10:50AM (#28576692)
Depends on how and what do you cook.
Re:Alexa leaks private wishlists by innocenat on Saturday September 18, 2021 @10:40AM (#28576614)
From a hygenic point of view, yes, it's a serious question.
Re:Alexa leaks private wishlists by zenexer on Saturday September 18, 2021 @11:21AM (#28576926)
Yes, I do. I sanitize my Apple Watch regularly anyway, which is why I opted for one of the silicone bands over the fancier options.
Re:Alexa leaks private wishlists by Kiro on Saturday September 18, 2021 @09:34AM (#28576143)
It's not about lack of utility, it's about lack of privacy. There are many great use cases for voice control at home.
Re:Alexa leaks private wishlists by tinyhouse on Saturday September 18, 2021 @09:52AM (#28576266)
What about disable people? The fact you don't see a purpose doesn't mean there isn't.
Re:Alexa leaks private wishlists by mnd999 on Saturday September 18, 2021 @10:19AM (#28576480)
If their disability is no concern for their own privacy then sure.

Voice control might be a need, Alexa voice control shouldn’t be.

Re:Alexa leaks private wishlists by tinyhouse on Saturday September 18, 2021 @10:33AM (#28576565)
Again, you're making assumptions that people worry about privacy like you are. You're also making an assumption that people think like you that Alexa harms their privacy. Finally, your first sentence is pretty ignorant I must say. Let people in a wheelchair talk about Alexa and their tradeoffs.

Personally I have an Alexa but don't find it too appealing. I barely use it. My kids use it much more often. I don't worry about privacy. I trust Amazon (or Google/Apple/Microsoft) that non of the audio is saved or sent to the cloud unless the device hears the trigger word. Can someone hack it and listen to our interactions at home? I'm assuming it's possible but that's true for our phones too.

Re:Alexa leaks private wishlists by dylan604 on Saturday September 18, 2021 @07:08PM (#28580171)
Please, this is either a serious lack of imagination or a ton of insincerity on your part. Having the ability to speak a command at home to turn on/off lights, adjust the temperature, play music, etc is extremely convenient. I would love to do it at my home, but I will not be using any of these products when they require an internet connection.
Re:Alexa leaks private wishlists by nicolas_t on Saturday September 18, 2021 @09:34AM (#28576144)
I'd love to have voice control at home but I want something that's private and stays within my network, I refuse to install spyware inside my own house
Re:Alexa leaks private wishlists by autoliteInline on Saturday September 18, 2021 @09:45AM (#28576224)
I can think of a brilliant use case, but it's the only one I can think of offhand.

For the disabled, particularly blind people, it would be great to have interactive voice stuff if that whole ecosystem were really fleshed out. Some of this exists but a world of audio books, online banking, interaction with social media, all with interfaces optimized for voice use/audio listening would be great.

Interacting with a screen by having some software read it to you just seems incredibly clumsy.

Personally, I think the hands-off case for automotive use is dangerous. Talking on the phone or listening to email while driving is sketchy even though you're still gripping the steering wheel. AM/FM radio interfaces were perfected 75 years ago.

Re:Alexa leaks private wishlists by paulryanrogers on Saturday September 18, 2021 @10:34AM (#28576574)
> AM/FM radio interfaces were perfected 75 years ago.

While I agree physical and simple is best, I've also totaled a car by fussing with such a radio and driving. Safest is probably no radio and no distractions. Second best may be set and forget interfaces that don't allow changes while moving.

Re:Alexa leaks private wishlists by gpm on Saturday September 18, 2021 @10:33AM (#28576561)
I know of some people who use them as an excuse to get their kids to learn some English... I'm not really sold on it, but it makes some sense.
Re:Alexa leaks private wishlists by wizzwizz4 on Saturday September 18, 2021 @09:50AM (#28576252)
If you want to work on this: https://mycroft.ai/
Re:Alexa leaks private wishlists by autoliteInline on Saturday September 18, 2021 @09:56AM (#28576302)
Thanks, I'll check it out.

In order to really reach people with vision issues, it seems like places like Bank of America (just an example) need to do a good job of Alexa skills. Dunno how you deal with security.

As a side note, it's funny how absurd online banking websites are. It's a thing that would be well served by simple/secure pure text interfaces but that certainly isn't what you get.

The amount of cruft on the web just blows me away, whether it's a weather or real estate or recipe site. We're living in a world of shit.

Re:Alexa leaks private wishlists by ShroudedNight on Saturday September 18, 2021 @10:50AM (#28576695)
Having worked for and with a few different large companies, my experience has been that multi-national banks are the most pathologically "not a single entity". They have all sorts of factions within often working directly against the interests of each other, with large projects kept secret purely for _internal_ competitive advantage. With that model, the resulting mangled mess they present as an interface makes significantly more sense.
Re:Alexa leaks private wishlists by wizzwizz4 on Saturday September 18, 2021 @10:42AM (#28576625)
Treat the crappy site as an API and make a better interface. Like the SimpleWeb project: https://simple-web.metalune.xyz/
Re:Alexa leaks private wishlists by cube00 on Saturday September 18, 2021 @10:53AM (#28576724)
> jEfF BeZoS Is aLwAyS LiStEnInG To yOu!!1!!!!111!

> As long as he gives me cheap same-day delivery, IDGAF.

It's disappointing that even when people know about the widespread harsh treatment of workers, as long as they get their cheap same day delivery, they don't care.

Re:Alexa leaks private wishlists by edent on Saturday September 18, 2021 @11:11AM (#28576849)
"There is no ethical consumption under capitalism"
Re:Alexa leaks private wishlists by asddubs on Saturday September 18, 2021 @11:45AM (#28577093)
I do think there is truth to that meme but I don't think it's meant to be an invitation to not give a shit about consumption ethics at all
Re:Alexa leaks private wishlists by dylan604 on Saturday September 18, 2021 @12:05PM (#28577233)
I'm so sick of this quote. Yes, there is unethical behavior, but there is unethical behavior in all practices. It's not the consumption that is ethical/unethical, it is the person doing the consuming and/or selling.
Re:Alexa leaks private wishlists by codegladiator on Saturday September 18, 2021 @10:31AM (#28576545)
How to be an unpaid tester, Step 1
Re:Alexa leaks private wishlists by Razengan on Saturday September 18, 2021 @09:46AM (#28576231)
I just use the default reminders or notes app for any kind of lists. Easy to share when needed too.
Re:Alexa leaks private wishlists by black_13 on Saturday September 18, 2021 @10:35AM (#28576584)
My wish is jeff bezos pays his taxes
Re:Alexa leaks private wishlists by tinyhouse on Saturday September 18, 2021 @09:18AM (#28576022)
Fake title. That is not a data leak.
Re:Alexa leaks private wishlists by jsudi on Saturday September 18, 2021 @09:27AM (#28576097)
No it doesn’t. If I give you my phone or you are reading my screen over my shoulder my apps aren’t leaking.

This title is inflammatory.

Re:Alexa leaks private wishlists by scotth on Saturday September 18, 2021 @09:34AM (#28576139)
This is a device shared by members of a household. It leaks.
Re:Alexa leaks private wishlists by jcims on Saturday September 18, 2021 @09:50AM (#28576251)
I think I've just been in the Amazon ecosystem too long, I can't really figure out which part is surprising that it could be considered a 'leak'.

1 - That Alexa has access to information about any particular Amazon user? To me the registration process and features of the product make this extremely obvious, but maybe its not?

2 - That Alexa will send audio notifications related to the status of the account its linked to? This is the only thing that I feel is of any possible surprise. Most of the marketing around Alexa products show interactions initiated by the user.

3 - That 'private wish lists' aren't excluded from the full set of notifications? Amazon just calls them 'wish lists' and to me they are just cached shopping carts. I don't really see them as any more sensitive than any other information in the account.

Re:Alexa leaks private wishlists by boomboomsubban on Saturday September 18, 2021 @10:00AM (#28576333)
On 3, something you've set as "private" being brought up in a public setting is surprising. You made it someway so that others couldn't see it, so it seems rational to assume it would be considered sensitive information.

If nothing else, giving the option to disable this on private lists would be nice.

Re:Alexa leaks private wishlists by jcims on Saturday September 18, 2021 @10:33AM (#28576562)
The entire account is ‘private’ in this context.

Unless you explicitly share something, all of the information is protected equally except for credit card numbers and your password.

Like I mentioned above, if the author had a gift in their shopping cart or ‘save for later’ and Alexa notified on a price change, would they have a similar reaction?

It’s not a moot point now but either this is just a serendipitous occasion or somebody Amazon really listens, but I just opened up the app, went to manage lists, and there’s literally an option now to manage the list through Alexa or not.

Re:Alexa leaks private wishlists by boomboomsubban on Saturday September 18, 2021 @11:06AM (#28576815)
>if the author had a gift in their shopping cart or ‘save for later’ and Alexa notified on a price change, would they have a similar reaction?

These are different in that the person involved did not explicitly set them as private. They might feel annoyed, but would realize they made the mistake.

Re:Alexa leaks private wishlists by leephillips on Saturday September 18, 2021 @11:53AM (#28577156)
This is pretty much what I was thinking. This is no more a “leak” than your monitor “leaking” data about your Amazon account when you’re logged in to amazon. This guy decided to buy this device, put it in his house so it could listen in on him, gave it his Amazon credentials, and it’s working as designed and promised. Why have something like this in your house unless you hate privacy already?
Re:Alexa leaks private wishlists by jsudi on Saturday September 18, 2021 @09:37AM (#28576163)
Don’t use your personal account for a device that is shared by many people.
Re:Alexa leaks private wishlists by CydeWeys on Saturday September 18, 2021 @09:48AM (#28576242)
Then what account should you use? Who has multiple Amazon accounts, and isn't that even against their ToS?
Re:Alexa leaks private wishlists by HappyTypist on Saturday September 18, 2021 @09:58AM (#28576322)
Don't think so, as part of signing up to become an Amazon Flex worker, the app explicitly suggests you create a separate Amazon account.
Re:Alexa leaks private wishlists by tedunangst on Saturday September 18, 2021 @09:49AM (#28576249)
And so does your phone and your browser and every other device you allow other people to use. Is it a leak if you allow your wife to use your phone and receive a notification?
Re:Alexa leaks private wishlists by mstolpm on Saturday September 18, 2021 @09:19AM (#28576030)
I don't know if I'm really the only one who shares an Amazon account with his significant other? My partner doesn't need Alexa to be notified what's on my wishlist ... she can just look it up. So blaming Alexa to spoil the secret is a bit ... hyperbole?
Re:Alexa leaks private wishlists by jffry on Saturday September 18, 2021 @09:48AM (#28576241)
Even if the author shared a single Amazon account with his wife, there's still a difference between the two scenarios.

If his wife logs in and opens up a private wishlist labeled "Liz Presents", she is choosing to spoil something for herself.

If the Alexa says you have a notification (with no more detail) and then immediately spills the beans, his wife did not choose to be spoiled.

So yes, it's very much not hyperbole to blame Alexa for spoiling this secret.

Re:Alexa leaks private wishlists by tyingq on Saturday September 18, 2021 @10:30AM (#28576540)
It seems very logical that a list marked private shouldn't send any notifications to Alexa, a device that isn't private by design. It either announces or displays things to anyone near it.

At the very least, the default should be "no notifications", and you could turn them on for the list if desired.

Re:Alexa leaks private wishlists by weird-eye-issue on Saturday September 18, 2021 @09:24AM (#28576069)
Obviously if you are sharing an account nothing is "private". Doesn't this go without saying?
Re:Alexa leaks private wishlists by mstolpm on Saturday September 18, 2021 @09:25AM (#28576082)
If someone in my house is reading my notifications, is the device or the person to blame?
Re:Alexa leaks private wishlists by wizzwizz4 on Saturday September 18, 2021 @09:53AM (#28576276)
Alexa reads out notifications publicly, so it should only be reading public notifications.
Re:Alexa leaks private wishlists by calsy on Saturday September 18, 2021 @10:15AM (#28576445)
If you've used a phone in last decade you would know that they have options to hide notification details behind lock screens and it is in most cases the default setting.
Re:Alexa leaks private wishlists by Zababa on Saturday September 18, 2021 @09:25AM (#28576089)
I think people using Alexa and equivalents might need an explanation or two about privacy in general.
Re:Alexa leaks private wishlists by Kiro on Saturday September 18, 2021 @09:36AM (#28576155)
That's very condescending. I use Google Home and I am very well aware of the privacy implications, thank you.
Re:Alexa leaks private wishlists by Zababa on Saturday September 18, 2021 @09:47AM (#28576234)
I don't mean it as condescending. Most people are not aware of how they private information is stolen all the time. Before the GDPR, I think most people weren't aware that cookies were used to spy on them.

Let's take another example: harmful chemicals. Most people aren't aware that chemical X or Y is harmful until it becomes a scandal, at which point the companies switch to another that also hasn't been tested long term. In that case, like with privacy, I don't think the people are at fault. People assume that companies aren't going to abuse them.

That's why I don't agree with 'Obviously if you are sharing an account nothing is "private". Doesn't this go without saying?'. People have some expectations that sadly don't reflect reality, so in cases like that they need explanations.

Re:Alexa leaks private wishlists by fnord77 on Saturday September 18, 2021 @09:49AM (#28576244)
> jEfF BeZoS Is aLwAyS LiStEnInG To yOu!!1!!!!111!

> As long as he gives me cheap same-day delivery, IDGAF.

for lower and lower quality of items, with less of a real selection (go look at electric kettles - there's 50 different brands - with weird names - but the kettles all almost look identical). Also the while prices creep up as any competition gets annihilated.

The high cost of cheap shipping

Re:Alexa leaks private wishlists by Santosh83 on Saturday September 18, 2021 @09:53AM (#28576283)
This hits the nail on the head. I agree ebay and Amazon are also sometimes the only option for finding obscure stuff, but most of the world now buys most of the mundane stuff from them, and then we act surprised when they become international empires, richer than countries, and more powerful than most of them, and only getting bigger and bigger. Society is simply not equipped to deal with the cascading effects of consumerism and 'free' market, be it privacy, data mining, social security, or the environment.
Re:Alexa leaks private wishlists by RotaryTelephone on Saturday September 18, 2021 @10:10AM (#28576411)
What do you recommend instead?
Re:Alexa leaks private wishlists by dpweb on Saturday September 18, 2021 @10:10AM (#28576415)
More brands means higher likelihood of a used item however. Normally I'll just put in a max price or click the used link.

So the $29 kettle is $21. I've never bought a "used" item from Amazon that was unsatisfactory cause it was "used".

Re:Alexa leaks private wishlists by dylan604 on Saturday September 18, 2021 @12:24PM (#28577361)
I've bought new items from Amazon that were clearly used that were unsatisfactory. So, maybe I received your item and you received mine.
Re:Alexa leaks private wishlists by edoceo on Saturday September 18, 2021 @01:28PM (#28577806)
Hamilton Beach stainless, 1.75 l. Now 5+ years old, used 7 days a week. It's a good kettle.