@CISOScott wrote:
One of the things I ask people when they turn these "features" on is this:
1) How does it know when you said "Hey, Siri?" (or whatever your device's catchphrase is).
It MUST be listening all the time in order to be responsive. Or is Siri a psychic?
2) Once it does think you awakened it on purpose, how does it know how to interpret what was just said?
It MUST send the request off to be analyzed.
3) Does it analyze everything you said or just look for keywords?
If you say "Alexa, what is the weather today?" Does it just gather your location data, which it already knows, and regurgitate the weather forecast for the current day?
And WHO is doing the analyzing? A machine or a human?
Once the analyzing is done, what is done with the conversation? Do they store it like they do every other detail about your Internet life?
In 5 or maybe 10 years have they recorded enough of your conversations to be able to piece together a full conversation in your voice?
Maybe a little cynical thinking but who knew that 10-20 years ago that we would be at this point now?
All my experience is with Alexa, but here is what I have learned.
For all three major players (Amazon's Alexa, Google's OK Google, and Apple's Siri) the companies claim that unless you have switched the mic off (there is an easy way to do so) the devices are, as you suggest, listening at all times for the trigger word. However, there is no recording within the device or transmission to the mother ship, until the trigger word (Alexa/Computer, OK Google, or Siri) is recognized by the local device on-board computer. At that time, the device fires up communication with the mother ship, and all it hears that begins within 5 seconds of the trigger word is sent to the Big AI in the Sky(net).
The home office AI interprets the command and responds accordingly with reply or action. Yes, Alexa does already know the device location, so it is easy to provide the local weather, news, and transportation information.
I cannot speak to Google or Apple, but yes, Alexa does preserve all of the recorded conversations. The account holder can review them and delete selected recordings if desired. Also, I am sure that part of the learning at the home office for each account is to recognize recurring commands, like my "Alexa, play Willie Nelson," to speed action when a repeat command happens.
Even more fascinating is the Google effort, and apparently soon the Alexa plan, to distinguish separate recurring voices, so a profile can result for each household member, to speed replies and suggestions.
As for the persona data and profile accumulation over the coming decades, i think we have more to worry about the police-linked public surveillance cameras in London, Nwe York, Chicago, etc., than from these commercial services.
That said, BE VERY WARY of legislatures pushing laws requiring government access to the commercial databases.
I recommend membership in EPIC and EFF.
