this post was submitted on 23 Dec 2023
152 points (90.4% liked)

Privacy

31814 readers
247 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Vinegar@kbin.social 22 points 10 months ago* (last edited 10 months ago) (3 children)

Companies DO analyze what you say to smart speakers, but only after you have said "ok google, siri, alexa, etc." (or if they mistake something like "ok to go" as "ok google"). I am not aware of a single reputable source claiming smart speakers are always listening.

The reality is that analyzing a constant stream of audio is way less efficient and accurate than simply profiling users based on information such as internet usage, purchase history, political leanings, etc. If you're interested in online privacy device fingerprinting is a fascinating topic to start understanding how companies can determine exactly who you are based solely on information about your device. Then they use web tracking to determine what your interests are, who you associate with, how you spend your time, what your beliefs are, how you can be influenced, etc.

Your smart speaker isn't constantly listening because it doesn't need to. There are far easier ways to build a more accurate profile on you.

[–] ryannathans@aussie.zone 5 points 10 months ago (2 children)

A recent study found these devices incorrectly activate like 80 times per day on average

[–] library_napper@monyet.cc 2 points 10 months ago (1 children)
[–] ryannathans@aussie.zone 2 points 10 months ago* (last edited 10 months ago)

On mobile, can't find the recent one based on conversation that was floating around lemmy recently.

This one finds high levels of inconsistent misactivation from TV shows. Some shows caused more than 4 misactivations per hour (a rate of more than 80 per day) https://moniotrlab.khoury.northeastern.edu/publications/smart-speakers-study-pets20/

[–] skullgiver@popplesburger.hilciferous.nl 1 points 10 months ago* (last edited 10 months ago)

[This comment has been deleted by an automated system]

[–] ristoril_zip@lemmy.zip -1 points 10 months ago (2 children)

It's literally impossible for them to not be "analyzing" all the sounds they (perhaps briefly) record.

[Sound] --> [Record] --> [Analyze for keyword] --> [Perform keyword action] OR [Delete recording]

Literally all sounds, literally all the time. And we just trust that they delete them and don't send them "anonymized" to be used for training the audio recognition algorithms or LLMs.

[–] bdonvr@thelemmy.club 12 points 10 months ago

It is possible to analyze the traffic leaving these devices, and AFAIK it hasn't been shown that they are doing this.

[–] Solemn@lemmy.dbzer0.com 11 points 10 months ago (1 children)

The way that "Hey Alexa" or "Hey Google" works is by, like you said, constantly analysing the sounds they said. However, this is only analyzed locally for the specific phrase, and is stored in a circular buffer of a few seconds so it can keep your whole request in memory. If the phrase is not detected, the buffer is constantly overwritten, and nothing is sent to the server. If the phrase is detected, then the whole request is sent to the server where more advanced voice recognition can be done.

You can very easily monitor the traffic from your smart speaker to see if this is true. So far I've seen no evidence that this is no longer the common practice, though I'll admit to not reading the article, so maybe this has changed recently.

[–] uzay@infosec.pub 2 points 10 months ago

If they were to listen for a set of predefined product-related keywords as well, they could take note of that and send that info inconspicuously to their servers as well without sending any audio recordings. Doesn't have to be as precise as voice command recognition either, it's just ad targeting.

Not saying they do that, but I believe they could.