What Amazon Echo Taught Me About IoT Security
summary
Amazon Echo/Alexa stores Wi‑Fi password on Amazon servers by default, devices are effectively always listening and keyword triggers can be spoofed, and region/VPN setup produces falsified users. Concrete failures: a carrier geolocation returned a cluster of 17 “workers” that were actually skiers, Fitbit misread Scrabble‑stillness as sleep, and Alexa fails basic offline tasks. Remedies that were built and tested include compute at the edge, store only essential remote data, and add context‑aware filters to reduce leaks and false analytics.
AI-written summary · about
chapters (12)
- 0:00Intro
- 2:31Amazon Alexa
- 4:33Always on
- 6:40No context
- 11:00Context
- 13:10Data
- 14:54We are flawed
- 15:15Fitbit example
- 16:25Pokemon Go example
- 17:35Amazon Echo in other countries
- 20:01Privacy and honesty
- 21:17Outro
related talks
48mThe Internet of Things and iOS: Don't let your toaster bring down the internet!
39mAlexa, is The Smart Home vision failing?
35mKr00k: How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
13mMy Voice Is Your Command: The Perils of Smart Voice Assistants
05mExploring Authentication for Security-Sensitive Tasks on Smart Home Voice Assistants
26mSkill Squatting Attacks on Amazon Alexa
23mMake Cyber Great Again
35mBuilding Trust & Enabling Innovation for Voice Enabled IoT