this post was submitted on 15 Dec 2023
244 points (100.0% liked)

Privacy

789 readers
3 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
top 28 comments
sorted by: hot top controversial new old
[–] GissaMittJobb@lemmy.ml 80 points 11 months ago (1 children)

Some random company claiming this capability without any further evidence should probably be treated with some level of scrutiny.

[–] TheFriar@lemm.ee 13 points 11 months ago (5 children)

Why?

What about modern capitalism makes you optimistic. I know for a fact this is happening. I bought a pair of Bose earbuds—I was pretty excited about them but they were defective. The app they tried to get me to download required me to sign away permission to “map” my head movements, intercept any sound coming through what I actively play through the headphones…AND “passively record any sound around you.”

And when I saw that shit, I got right the fuck out of there—even though seeing that shit required me to click through three sub menus and entirely different legal documents, all of which I would’ve agreed to like every other privacy policy: absentmindedly.

After getting right the fuck out of there, I went on their website to contact customer service about the defect. So I opened an SMS chat with customer service—where I was told “replying to this chat is tacit agreement to our CUSTOMER SERVICE PRIVACY POLICY,” which I opened. And initially I was fine because it seemed like it was a different policy just allowing them to record the conversation “for training purposes.” Until I clicked through one, two, three and now FOUR sub menus to find I WOULD’VE AGREED TO THE SAME FUCKING PRIVACY POLICY.

So I fucking called Bose. I wanted to know if I could use these headphones without ever agreeing to the privacy policy. But of course customer service couldn’t even conceive of my question. I asked to get transferred to the legal dept.

Lol of course not. What the fuck was I thinking.

So fuck them, I returned those fuckers as fast as I could.

How often are you digging into sub pages and cited clauses of the privacy policies you’re agreeing to on a day-to-day basis? Because I will tell you, they were making me sign away the right to ALL a of that information, and their specific info on how they were using it (a different sub-contract) was pretty lax on who they could share it with.

I fully believe this has been happening WAY longer than just recently. Capitalism is trading on our data in the most invasive ways imaginable. The spying and capabilities have reached dystopian levels. How long ago did those CIA leaks come out about smart TVs being used to eavesdrop? That was like 2014. Ten goddamn years ago.

load more comments (5 replies)
[–] impiri@lemm.ee 22 points 11 months ago

They've redirected the page now that it's getting attention, but here's the archived version.

I'm very skeptical of their claims, but it's possible they've partnered with some small number of apps so that they can claim that this is technically working.

[–] Melody@lemmy.one 20 points 11 months ago (1 children)

This is why I generally ensure my phone is configured ahead of time to block ads in most cases. I don't need this garbage on my device.

As for how they could listen? It's pretty easy.

By waiting until the phone is completely still and potentially on a charger, it can collect a lot of data. Phones typically live on the nightstand by your bed at night; and could be listening intently when charging.

Similarly it could start listening when it hears extended conversations; simply by listening to the microphone for human speech every x minutes for y minutes. Then it can record snippets; encode them quickly and upload them for processing. This would be thermally undetectable.

Finally it could simply start listening in certain situations; like when it detects other devices (via BT). Then it could simply capture as many small snippets of your conversation as it could.

[–] ArcaneSlime@lemmy.dbzer0.com 6 points 11 months ago (3 children)

Aren't they all already listening always? I mean, how else does it hear you say "Ay yo Siri" otherwise?

[–] Melody@lemmy.one 15 points 11 months ago

No.

Both Android and iOS do enforce permissions against applications that have not been granted explicit access to listen constantly.

For example, the Google Assistant is a privileged app oftentimes; and it is allowed to listen. It does so by listening efficiently for one kind of sound, the hotword "Ok Google".

Other applications not only have to obtain user permission; but oftentimes that permission is restricted to be only granted "While app is in use", meaning it's the app on the screen, notifying the user, in the foreground, or recently opened. This permission prevents most abuses of the microphone unless someone is using an app.

[–] noodlejetski@lemm.ee 8 points 11 months ago (1 children)

the phone's processor has the wake up word hardcoded, so it's not like an ad company can add a new one on a whim. and it uses passive listening, so it's not recording everything you say - I've seen it compared to sitting in a class and not paying attention until the teacher says your name.

[–] ArcaneSlime@lemmy.dbzer0.com 5 points 11 months ago (1 children)

There's no way that an app with mic permissions could basically do the same thing and pick up on certain preprogrammed words like Ford or Coke which could then be parsed by AI and used by advertisers? It certainly seems like that isn't out of the realm of physical possibility but I'm definitely no expert. Would they have had to pay the OS maker to hardcode it in to the OS? Could that be done in an update at a later time?

[–] noodlejetski@lemm.ee 3 points 11 months ago* (last edited 11 months ago) (1 children)

There's no way that an app with mic permissions could basically do the same thing and pick up on certain preprogrammed words like Ford or Coke which could then be parsed by AI and used by advertisers?

only if you want the phone to start burning battery and data while displaying the "microphone in use" indicator all the time.

not to mention that the specific phrases have been picked in order to cause as few false positives as possible (which is why you can't change them yourself), and you can still fool Google Assistant by saying "hey booboo" or "okay boomer". good luck with making it reliably recognize "Ford", lol.

[–] ArcaneSlime@lemmy.dbzer0.com 4 points 11 months ago

Huh, TIL. I figured "if they can do it with one thing they could do it with more than one thing."

[–] Tremont@lemmings.world 6 points 11 months ago (1 children)

For that I think they use special hardware, that's the reason that you can't modify the calling word, and they still notify you when the voice assistant is disabled. I don't know if this is actually true, or the companies try to hide behind this, or I just remember it incorrectly.

[–] ArcaneSlime@lemmy.dbzer0.com 4 points 11 months ago

That same hardware couldn't also have a brand added as a code word for ad, like say "pepsi?"

[–] dangblingus@lemmy.dbzer0.com 16 points 11 months ago

We already knew this was happening at least a decade ago when people realized why Facebook and Instagram needed unrestricted microphone permissions.

[–] BearOfaTime@lemm.ee 14 points 11 months ago

And people kept telling me I was wrong when I said this.

[–] remotelove@lemmy.ca 8 points 11 months ago

I found that gem as well.

[–] HurlingDurling@lemm.ee 8 points 11 months ago (1 children)

Copyright © 2023 Cox Media Group, LLC.

Fucking COX, why am I not surprised a fucking ISP like this garbage is behind it.

[–] LWD@lemm.ee 2 points 11 months ago* (last edited 9 months ago) (1 children)
[–] HurlingDurling@lemm.ee 4 points 11 months ago

TIL we have too many cox in this world

[–] stardust@lemmy.ca 6 points 11 months ago

I wouldn't even know because I don't see ads on my phone or pc.

[–] SplashJackson@lemmy.ca 5 points 11 months ago
[–] sic_semper_tyrannis@feddit.ch 5 points 11 months ago

"Unprecedented understanding of consumer behavior"

Scary stuff

[–] elvith@feddit.de 4 points 11 months ago

CMG’s website addresses this with a section that starts “We know what you are thinking…”

“Is this legal? YES- it is totally legal for phones and devices to listen to you. That's because consumers usually give consent when accepting terms and conditions of software updates or app downloads,” the website says.

Well, yes, but actually no. No idea how this might play out in other parts of the world than the US. But in most places, you'd usually need consent of all parties, that are involved. If my neighbor were to install an (infected) app like this, then carries his phone around and talks to me, I did not consent and it would be illegal to record me, even if he were not tricked into consenting, but did knowingly accept it. Worse yet, in the last scenario, he might be on the hook for legal consequences, too...

Besides that legal minefield, I thinks it's a bluff. The tech is either way less accurate than they claim, or quite ressource intensive by either eating through your data plan on a mobile phone or draining your battery. My bet is on a PR stunt.

[–] LWD@lemm.ee 4 points 11 months ago* (last edited 9 months ago) (1 children)
[–] Contend6248@feddit.de 5 points 11 months ago

And companies responsible for this are cocks?

[–] cyborganism@lemmy.ca 3 points 11 months ago
[–] wincing_nucleus073@lemm.ee 3 points 11 months ago

This will continue until people learn to use custom roms :)