Amazon’s Echo and Personal Privacy

Wrongo’s daughter gave him an Amazon Echo Dot for his birthday. Bob Lefsetz says that Amazon is becoming the new Apple: (brackets by the Wrongologist)

The Echo came with almost no instructions. Simple packaging. Not a work of art, like [Steve] Jobs’ creations, but far from the old Microsoft where there’s so much info you’re inundated.

Simple and slick, particularly when it comes to using Echo to listen to music on Spotify, (assuming that you have Spotify premium) because Alexa eliminates a step. Before the Echo, you navigated your PC or mobile to Spotify’s site, entered the artist or track you wanted to hear in Spotify’s clunky search engine, then waited for the track to pop up, and then clicked on it to play.

With Alexa, you say the name of the track and/or the artist, and tell Alexa you want to hear it on Spotify, and it begins playing. Very nice.

Alexa brought in yuuge sales numbers for Amazon this season. Bloomberg reported:

Sales for Echo speakers based on Alexa’s voice-recognition software were nine times more than the 2015 holiday season…Echo and Echo Dot were the best-selling products across Amazon this year…

Sales were so good that Amazon sold out of its Echo speakers in mid-December. The Echo shortage shows voice-activated assistants have found a strong niche with consumers. Smart home devices in general are booming at the moment and so it the desire for installation services like crestron programming. But there’s a potential dark side to having an Alexa device: Alexa’s job is to listen to you speak, and then recognize and use those data.

This begs the question of whether you should have any expectations of privacy if Alexa is plugged in. If you think this is an academic question, consider that police in Arkansas want to know what an Amazon Echo device may have heard during a murder:

Authorities in Bentonville issued a warrant for Amazon to hand over any audio or records from an Echo belonging to James Andrew Bates. Bates is set to go to trial for first-degree murder for the death of Victor Collins next year.

Sound Orwellian to you? Your hot new Xmas gift may be the Trojan horse that kills your privacy.

Police say Bates had several other discoverable smart devices, including a smart water meter. The water meter shows that 140 gallons of water were used between 1 AM and 3 AM the night Collins was found dead in Bates’ hot tub. The police think all that water was used to wash away evidence of what happened that night.

The data from the water meter, and the request for stored Echo information raise questions about what constitutes individual privacy in the internet of things (IoT). Due to the “always on” nature of the Echo, authorities want any saved audio the speaker may have picked up that night. The Echo is supposed to be only activated by certain words, but it spoke random answers to Wrongo, when not asked a question, if the room it was in was filled with people over the holidays.

What’s more, Echo captures audio and streams it to the cloud when the device hears a wake word, such as “Alexa.” What the owner says are called “utterances” by Amazon, and they are stored in the cloud until a customer deletes them either individually, or all at once.

Why does Amazon save your words? Probably because you can order items from them via the Echo. A record of the sale could be necessary in a dispute.

In the Bates case, Amazon would not provide the police with any information that Bates’ Echo had logged on its servers. It later released a statement:

Amazon will not release customer information without a valid and binding legal demand properly served on us. Amazon objects to overbroad or otherwise inappropriate demands as a matter of course.

So, Amazon just told the Bentonville police and police everywhere what they have to do to get your stored information: Your privacy is in play if you have an Echo, and you get arrested.

We have an expectation of privacy in our homes, but these devices listen to you, they talk to each other, and to companies like Amazon and Spotify, so the challenge to individual privacy seems very clear. Governments from city to federal, will try to develop any information they can about a criminal case. If those data are gleaned from a smart device in your home, it’s just another data point, and it will become your job to make the case that your Constitutional rights were violated.

The Constitutional question is whether the data you generate in your home through internet-connected devices are data that you own at all. Do you share ownership with corporate America?

Does the state have rights to your private information if they say they need it?

Tip: Alexa has a microphone off button. Use it. Its possible that Amazon can’t hear you then.

Facebooklinkedinrss

The Steady Erosion of Due Process Rights

Do the incarcerated lose the right to email privacy when they are institutionalized? Last week, the NYT reported on a case where prosecutors were reading the email correspondence between a prisoner and his lawyers. But this wasn’t a case at GITMO, it was at a federal prison in Brooklyn, NY.

The extortion case against Thomas DiFiore, a reputed boss in the Bonanno crime family, encompassed thousands of pages of evidence, but even as he was sending daily emails to his lawyers:

…federal prosecutors informed Mr. DiFiore last month that they would be reading the emails sent to his lawyers from jail, potentially using his own words against him.

The Times says that federal prosecutors around the country have begun reading prisoners’ emails to their lawyers. The issue has spurred court battles over whether inmates have a right to confidential email communications with their lawyers — a question on which federal judges have been divided.

All defendants using the federal prison email system, Trulincs, have to read and accept a notice that communications are monitored. So prosecutors point out that defendants are forewarned. Defense lawyers say the government is overstepping its authority and taking away a necessary tool for an adequate defense. Prosecutors say there are other ways for defense lawyers to communicate with clients; defense lawyers say the other methods are very inefficient.

In Brooklyn and across the country, the issue is being decided case by case.

The Times reports on a case In Georgia, in which a man named Jared Wheat used Trulincs email to work on ads for a banned weight-loss product. The FTC used the emails as part of a successful contempt case, arguing he violated a permanent injunction barring him from making unsubstantiated weight-loss claims.

Mr. Wheat’s lawyers said the trade commission’s request for the emails was illegal. Federal regulations allow mail sent to prisons to be marked as privileged:

…and email, particularly in the 21st century, has effectively replaced US Postal Service mail for most communications, and this court should not treat it differently than traditional mail.

But judge Charles A. Pannell Jr. of the US District Court in Atlanta, ruled in 2012 that by using Trulincs, Mr. Wheat “consented to the monitoring and thus had no reasonable expectation of privacy.”

That’s like saying that by using the space in prison for in-person meetings with lawyers, the prisoner “consents” to eavesdropping. A prisoner has a right to communicate with his lawyer, and the burden should be on the prison to see that the right to the confidentiality is preserved through each avenue of communication provided by the prison as much as it is through other avenues.

In the DiFiore case, his lawyer, Steve Zissou, tried to persuade a judge to stop prosecutors from monitoring his client’s emails:

Regardless of whether such communications qualify for protection under the attorney-client privilege, the government’s decision to read our communications with our client is entirely inappropriate.

The judge overseeing that case, Allyne R. Ross, ruled last Thursday that the government was allowed to review the emails. She wrote:

The government’s policy does not ‘unreasonably interfere’ with Mr. DiFiore’s ability to consult his counsel.

In the case of another Brooklyn-based prisoner, Syed Imran Ahmed, a surgeon accused of Medicare fraud who is being held at the Metropolitan Detention Center in Sunset Park, Brooklyn, the decision went another way. In Dr. Ahmed’s case, the judge, Dora L. Irizarry, ruled against the government last month, barring it “from looking at any of the attorney-client emails, period.”

She seemed to take particular offense at an argument by a prosecutor, F. Turner Buford, who suggested that prosecutors merely wanted to avoid the expense and hassle of having to separate attorney-client emails from other emails sent via Trulincs. The government was not otherwise interested in the contents of those messages, he said. From Judge Irizarry:

That’s hogwash…You’re going to tell me you don’t want to know what your adversary’s strategy is? What kind of a litigator are you then? Give me a break.

Communications between lawyer and client should be privileged no matter the form of communication. It is disturbing to see Americans asleep at the wheel as our civil liberties over the past decade have eroded with little resistance.

So, the crux of the matter is that if the law is denied to some, we are all at risk.

The majority who say that they “have nothing to hide” do not understand this. They do not understand that for democracy to be worth its salt, it must defend the rights of everyone, in particular, those with whom we disagree, those who live differently from us, or who think differently from the majority.

America as we know it can easily survive without everyone having access to assault rifles, but it cannot survive without everyone having access to due process.

As go our due process rights, so will go our democracy.

Facebooklinkedinrss