Alexa records conversation and sends it to 3rd party

From the Independent and others today.

https://www.independent.co.uk/life-style/gadgets-and-tech/news/amazon-echo-alexa-record-conversation-privacy-security-a8368231.html

A family had a private conversation broadcast across the internet to a friend by their Amazon Echo.

The horrifying discovery began with an equally chilling phone call, telling them to unplug their devices immediately. "You're being hacked," the voice said.

As it turns out, that person had accidentally been sent a full recording of the family's conversation. The sounds had been picked up and then sent by the Echo to a friend, who could then hear the entire conversation.

The family initially didn't believe that the message could have been sent. Then the person who received it said, "You sat there talking about hardwood floors", and the family realised that they had accidentally been broadcast across the internet.

A woman only identified as Danielle said that she would not be using the devices again. "I can't trust it," she told local news station KIRO 7, which first reported the story.

Amazon said that the chilling recording was the result of an entirely accidental and unlucky series of events. The Alexa voice inside the Echo has a series of checks to ensure that messages are not sent without the explicit consent of the people stood around the talking cylinder – but somehow Alexa mistakenly thought that those checks had been satisfied.

"Echo woke up due to a word in background conversation sounding like 'Alexa'," an Amazon spokesperson said. "Then, the subsequent conversation was heard as a ;'send message' request. At which point, Alexa said out loud 'To whom?' At which point, the background conversation was interpreted as a name in the customers contact list. Alexa then asked out loud, '[contact name], right?' Alexa then interpreted background conversation as 'right'. As unlikely as this string of events is, we are evaluating options to make this case even less likely."

Amazon had told the family that it had investigated what had happened by listening to logs of the conversations with Alexa. It wasn't clear what Echo device was being used.

Alexa has a series of checks built into it to ensure that it can't listen in on conversations without permission, and certainly not to send it. Chief among them is the "wake word" that is built into the Echo – the voice assistant cannot start listening or sending recordings over the internet until it hears the word "Alexa".

But occasionally those checks can go awry, usually by accident. The fact that the cylinders are inside the house, listening and speaking on command, can make those issues especially creepy.

Earlier this year, for instance, Echo speakers started refusing to fulfil requests and then laugh at their users. The strange behaviour was the result of a misheard command – but that didn't make the bizarre chuckle any less creepy.


I wonder how long before hotels have these devices in rooms instead of phones for room service, with all the subsequent issues?

This was predicted years ago and people are so vain and guillable that they have to buy these devices "because their friends have them" and they never realise the implications of having them. Are they so blind or just blase to the hundreds of thousands of CCTV cameras around them continually watching them, the televisions with inbuilt cameras which filmed them in their homes, or the basic fact that any device which audio, video, or a combination of the two, and is connected to the internet, is never safe irrespective of how many safeguards they claim to have.