Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Alexa and Google Are Listening: How Much Are Th...

Alexa and Google Are Listening: How Much Are They Transmitting

Presentation from BSidesIowa and BSidesKC 2018

Avatar for Aaron Blythe

Aaron Blythe

April 21, 2018
Tweet

More Decks by Aaron Blythe

Other Decks in Technology

Transcript

  1. @ablythe Assistant/Device Cost Test Result Siri/iPhone Too Much/ Have to

    have What sound does a pig make? Alexa/Echo Dot $49.95 ($29.95 Black Friday) What does a pig say? I’m sorry. I only know English at the moment, I’ll try and learn some animal languages Hey Google/ Google Home $49.00 ($29.99 Black Friday) What sound does a pig make? What does a pig say?
  2. @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT TRAFFIC IS LEAVING MY HOUSE?
  3. @ablythe DOMAINS • *.cloudfront.com —> Needs authentication - Amazon CDN

    • clients3.google.com —> ??? • *.amcs-tachyon.com —> Registered to Amazon
  4. @ablythe DOMAINS • redirector.gvt1.com —> Registered to google • *p-cdn.com

    -> Pandora • *.tritondigital.com • tunein.com • sb.scorecardresearch.com
  5. @ablythe DOMAINS • redirector.gvt1.com —> Google • *p-cdn.com —> Pandora

    • *.tritondigital.com —> Podcasts/Streaming • tunein.com —> Podcasts/Streaming • sb.scorecardresearch.com —> ??
  6. @ablythe Data to Home Company Data to 3rd Parties I

    Expect Data to 3rd Parties that Surprise Me
  7. @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? HOW MUCH? HOW OFTEN?
  8. @ablythe • Plugin Ethernet • Create a Network • Connect

    Device (Echo Dot or Google Home Mini) • Reference • https://support.apple.com/kb/PH25327?locale=en_US • https://stackoverflow.com/questions/7166044/how-can-i-configure-wireshark-to-see-https- traffic
  9. @ablythe Data when interacting ~ 5 to 10 seconds Data

    when silent ~ 3 mins Data when tv on ~3 mins 46,665 7,728 2,035 187,967 36,176 33,276
  10. @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT HAVE I AGREED TOO?
  11. @ablythe AMAZON ECHO • Alexa Terms of Use: • https://www.amazon.com/gp/help/customer/display.html?

    nodeId=201809740 • Amazon Privacy Notice: • https://www.amazon.com/gp/help/customer/display.html? nodeId=201909010
  12. @ablythe GOOGLE HOME • Google Home Privacy: • https://support.google.com/googlehome/answer/7072285?hl=en •

    Google Privacy Policy: • https://www.google.com/policies/privacy/ • Archive • https://www.google.com/policies/privacy/archive/
  13. @ablythe Agreement (Legal) Router (Technical) Server Amazon Google App Services

    Other Services Client Pandora… etc ??? WHAT’S STORED ON THE SERVER SIDE?