Alexa and Google Are Listening: How Much Are They Transmitting

Alexa and Google Are Listening: How Much Are They Transmitting

Presentation from BSidesIowa and BSidesKC 2018

260a95e08b7880ecd76b964203f25c87?s=128

Aaron Blythe

April 21, 2018
Tweet

Transcript

  1. 10.
  2. 11.
  3. 14.

    @ablythe Assistant/Device Cost Test Result Siri/iPhone Too Much/ Have to

    have What sound does a pig make? Alexa/Echo Dot $49.95 ($29.95 Black Friday) What does a pig say? I’m sorry. I only know English at the moment, I’ll try and learn some animal languages Hey Google/ Google Home $49.00 ($29.99 Black Friday) What sound does a pig make? What does a pig say?
  4. 18.

    @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT TRAFFIC IS LEAVING MY HOUSE?
  5. 20.
  6. 21.
  7. 23.
  8. 24.
  9. 26.
  10. 27.

    @ablythe DOMAINS • *.cloudfront.com —> Needs authentication - Amazon CDN

    • clients3.google.com —> ??? • *.amcs-tachyon.com —> Registered to Amazon
  11. 29.
  12. 32.
  13. 33.
  14. 34.

    @ablythe DOMAINS • redirector.gvt1.com —> Registered to google • *p-cdn.com

    -> Pandora • *.tritondigital.com • tunein.com • sb.scorecardresearch.com
  15. 35.
  16. 36.
  17. 37.
  18. 38.
  19. 39.
  20. 40.

    @ablythe DOMAINS • redirector.gvt1.com —> Google • *p-cdn.com —> Pandora

    • *.tritondigital.com —> Podcasts/Streaming • tunein.com —> Podcasts/Streaming • sb.scorecardresearch.com —> ??
  21. 41.
  22. 42.
  23. 43.

    @ablythe Data to Home Company Data to 3rd Parties I

    Expect Data to 3rd Parties that Surprise Me
  24. 45.

    @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? HOW MUCH? HOW OFTEN?
  25. 46.

    @ablythe • Plugin Ethernet • Create a Network • Connect

    Device (Echo Dot or Google Home Mini) • Reference • https://support.apple.com/kb/PH25327?locale=en_US • https://stackoverflow.com/questions/7166044/how-can-i-configure-wireshark-to-see-https- traffic
  26. 49.
  27. 58.

    @ablythe Data when interacting ~ 5 to 10 seconds Data

    when silent ~ 3 mins Data when tv on ~3 mins 46,665 7,728 2,035 187,967 36,176 33,276
  28. 60.

    @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT HAVE I AGREED TOO?
  29. 62.

    @ablythe AMAZON ECHO • Alexa Terms of Use: • https://www.amazon.com/gp/help/customer/display.html?

    nodeId=201809740 • Amazon Privacy Notice: • https://www.amazon.com/gp/help/customer/display.html? nodeId=201909010
  30. 63.
  31. 64.
  32. 65.
  33. 67.

    @ablythe GOOGLE HOME • Google Home Privacy: • https://support.google.com/googlehome/answer/7072285?hl=en •

    Google Privacy Policy: • https://www.google.com/policies/privacy/ • Archive • https://www.google.com/policies/privacy/archive/
  34. 68.
  35. 72.

    @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT’S STORED ON THE SERVER SIDE?
  36. 75.
  37. 76.
  38. 80.
  39. 81.
  40. 82.
  41. 84.
  42. 89.
  43. 92.
  44. 93.
  45. 95.