小程序
传感搜
传感圈

How Much Do Your IoT Devices Know About You?

2023-04-18 15:30:26
关注

Illustration: © IoT For All

In 2018, a Portland, Oregon couple got a shock when their Amazon Echo covertly recorded their conversation, then sent it to a random person on their contact list. Amazon apologized and clarified that Alexa wasn’t recording on purpose, but had mistaken a word in the couple’s conversation for the activating “Alexa” phrase. So how much information do internet-connected devices really gather — what do they do with it? In general, owning a smart device means you will be giving away some data, and it’s critical for you to be aware of potential risks. Let’s take a look at the IoT smart devices that you should be aware of and what kind of data they are storing.

“In general, owning a smart device means you will be giving away some data, and it’s critical for you to be aware of potential risks.”

-Zac Amos

#1: Smart Speakers Store Readings

According to a study from NPR and Edison Research, 35% of Americans 18 and older own a smart speaker like Amazon Echo or Google Nest. But how many of them realize it may be eavesdropping?

Amazon’s Echo smart speaker keeps a log of everything a user has said to it, including instances where it was activated by mistake. Users can simply scroll through their voice history in the app’s settings to listen to the recordings. One man found so many soundbites Alexa had recorded in secret that he turned them into a song. In addition to storing this data in the app, Amazon itself also holds onto the recordings. In a few high-profile murder cases, Amazon has even relinquished the recordings to serve as evidence of domestic disputes turned violent. 

Amazon defends its collected recordings by saying it uses them to train the algorithm. Translation? Amazon employees can listen to the clips in person. While the vast majority of Echo interactions are mundane, many people still view this practice as an invasion of privacy, especially since smart speakers are usually used in the home. In addition to storing soundbites, Amazon’s Echo speaker also keeps a record of thermostat settings and how many times a user turns the lights on or off.

#2: Smart Watches Guess Fertility Levels

The Apple Watch gathers data on how long a person exercises as well as heart rate, cardiac fitness, environmental noise levels, and hard falls. It can also track users’ sleep schedules and menstrual cycles, estimating when people are ovulating based on body temperature fluctuations. Most users are aware of these features and use them to their advantage.

However, a cybersecurity breach can leak this information to the public. In 2021, over 61 million fitness tracker records from both Fitbit and Apple were exposed, revealing people’s names, birthdates, heights, weights, gender, and geographical location. Security teams fixed the issue within a few hours. However, the incident serves as a reminder that hacking and careless behavior can exploit personal devices and their data, and less may be more when it comes to sharing health information.

#3: Smart TVs Can Watch People Back

Smart TVs are IoT devices that are connected to the internet and let users watch YouTube videos, scroll through social media, or stream on-demand content. Essentially, they’re just computers rebranded as TVs. 

In 2018, “watching TV” took on a sinister new meaning when smart TV manufacturer Vizio paid a $17 million settlement for tracking its users’ viewing habits. It had been making note of what people watched and when, and then selling the information to advertisers and data brokers.

Now, Vizio promises to ask permission from users before tracking their TV-watching habits or collecting demographic data — but how many other smart TV manufacturers are doing the same thing, just without getting caught?

#4: Smart Toothbrushes Affect Insurance Rates

Dental insurance company Beam uses its IoT-connected toothbrush device to incentivize better oral hygiene. It tracks how users take care of their teeth — including whether they brush for two minutes twice a day — and awards points to people who do a good job. 

Users can redeem points for things like new brush heads and toothpaste. Of course, as an insurance company, Beam benefits from having healthier customers — it reduces the dental insurance premiums of customers who brush more frequently. 

#5: Smart Cameras Record More Than Videos

Ring is a popular home security system. In addition to tracking visitors to a user’s home, it also stores the user’s name, postal address, phone number, email address, and info about the Wi-Fi network. It stores videos and photos on Amazon’s servers for up to two months. 

Additionally, the Ring website tracks cookies, web beacons, and web server logs to use for advertising purposes. While the company doesn’t explicitly sell data, its privacy policy indicates that Ring can share data with service providers who perform services for them, including marketers. In other words, it almost certainly collects and sells data to data aggregators to create targeted ads.

Making Informed Decisions

Who benefits the most from a smart device — the user or the company? Most IoT devices send data back to the parent company for use in market research, and some overstep privacy boundaries by collecting sensitive info or not asking for permission. In general, owning a smart device means giving away data.

The business model is to trade a small amount of privacy for convenience or lower prices. In the end, if a service is free or seems too good to be true, the users themselves are often part of the product. Whether that’s OK is up to the individual.

Tweet

Share

Share

Email

  • Connectivity
  • Consumer IoT
  • Consumer Products
  • Cybersecurity
  • Internet of Things

  • Connectivity
  • Consumer IoT
  • Consumer Products
  • Cybersecurity
  • Internet of Things

参考译文
你的物联网设备对你了解多少?
插图:© IoT For All --> 2018年,美国俄勒冈州波特兰的一对夫妇震惊地发现,他们的亚马逊Echo设备在他们未察觉的情况下悄悄录下了他们的对话,并将其发送给了通讯录里一个随机的人。亚马逊对此表示歉意,并澄清Alexa并不是故意录音,而是将对话中的一个词误认为唤醒词“Alexa”。那么,这些联网设备到底收集了多少信息?它们又会做些什么呢?一般来说,拥有智能设备意味着你会主动或无意中放弃一些数据,而你必须意识到其中的潜在风险。让我们来看看那些你应该注意的物联网智能设备,以及它们究竟存储了哪些数据。“一般来说,拥有智能设备意味着你会放弃一些数据,而你必须意识到潜在的风险。” -Zac Amos **#1:智能音箱存储语音内容** 据NPR和Edison Research的一项研究,35%的18岁以上美国人拥有一台类似亚马逊Echo或谷歌Nest的智能音箱。但有多少人意识到,它可能在悄悄地监听他们呢?亚马逊的Echo智能音箱会记录用户对它说过的一切内容,包括被误唤醒的情况。用户只需在应用的设置中滚动浏览语音历史记录,就可以听到这些录音。有一个人发现Alexa在不知情的情况下记录下了大量的语音片段,甚至将它们编成了一首歌。除了在应用中存储这些数据,亚马逊本身也保存着这些录音。在一些著名谋杀案件中,亚马逊甚至把这些录音交给警方,作为家庭纠纷升级为暴力事件的证据。 亚马逊解释说,它们会利用这些录音来训练算法。换句话说,亚马逊的员工可以亲自收听这些片段。虽然大部分Echo的互动内容都很普通,但许多人仍然认为这种做法侵犯了隐私,特别是因为智能音箱通常在家中使用。此外,除了存储语音片段,亚马逊的Echo音箱还会记录温控器的设置以及用户开关灯的次数。 **#2:智能手表推测受孕周期** 苹果手表会收集用户锻炼时长、心率、心脏健康状况、环境噪音水平以及剧烈跌落的数据。它还可以追踪用户的睡眠时间表和生理周期,根据体温波动估算排卵时间。大多数用户都了解这些功能,并会加以利用。然而,如果发生网络安全漏洞,这些信息也可能泄露出去。2021年,超过6100万条来自Fitbit和苹果的健身追踪记录被泄露,其中包括用户姓名、出生日期、身高、体重、性别和地理位置。安全团队在数小时内修复了这个问题。然而,这一事件提醒我们,黑客攻击和用户粗心行为可能会利用这些设备及其数据,因此在分享健康信息时,少即是多。 **#3:智能电视可能回看观众** 智能电视是一种连接互联网的物联网设备,允许用户观看YouTube视频、滚动社交媒体或点播内容。本质上来说,它们只是被重新包装为电视的电脑。 2018年,“看电视”这一行为有了一个新的阴暗含义,因为智能电视制造商Vizio因跟踪用户观看习惯被罚款1700万美元。该公司曾记录用户观看的节目及其时间,并将这些信息出售给广告商和数据交易商。如今,Vizio承诺会在跟踪用户观看习惯或收集人口统计数据之前征求用户同意——但还有多少其他智能电视制造商也在做同样的事情,只是还没被抓住呢? **#4:智能牙刷影响保险费率** 牙科保险公司Beam使用其物联网连接的牙刷设备来激励用户改善口腔卫生。它会追踪用户如何护理牙齿,包括是否每天刷牙两次、每次刷牙是否持续两分钟,并为表现良好的人提供积分奖励。用户可以用积分兑换新的刷头和牙膏。当然,作为一家保险公司,Beam也从客户更加健康中获益——它会降低那些刷牙更频繁客户的牙科保险费用。 **#5:智能摄像头记录的不只是视频** Ring是一款受欢迎的家庭安全系统。除了追踪用户的访客情况,它还会存储用户的名字、邮政地址、电话号码、电子邮件地址以及Wi-Fi网络信息。视频和照片会存储在亚马逊服务器上,最多保存两个月。此外,Ring网站还会追踪cookie、网页信标和网页服务器日志,用于广告目的。虽然该公司并未明确出售数据,但其隐私政策表示,Ring可以与为其提供服务的服务提供商(包括广告商)分享数据。换句话说,它几乎肯定会收集并出售数据,以生成定向广告。 **做出明智的决策** 谁最受益于智能设备——用户还是公司?大多数物联网设备会将数据传回母公司,用于市场研究,有些则越界收集敏感信息,或不征求用户同意。一般来说,拥有智能设备意味着你在放弃部分数据。商业模型是用一点点隐私换取便利或较低的价格。最终,如果一项服务是免费的,或者看起来好得难以置信,用户自己通常就是产品的一部分。是否可以接受,就取决于个人判断。 TweetShareShareEmail 连接性 消费者物联网 消费产品 网络安全 物联网 --> 连接性 消费者物联网 消费产品 网络安全 物联网
您觉得本篇内容如何
评分

评论

您需要登录才可以回复|注册

提交评论

广告
提取码
复制提取码
点击跳转至百度网盘