Is it true that the Amazon Echo records everything I’m saying to it and that someone has figured out how to hack it?
The popularity of “smart speakers” that are voice-controlled has grown to more than 35 million users, and Amazon’s Echo is far and away the most popular.
The small cylinder with a seven-microphone array is powered by the Alexa intelligent personal assistant, so users can interact with it via voice commands to control a wide variety of services ranging from music to smart home devices.
Is my Echo storing my voice commands?
Just about any device that you use via voice commands (Echo, Siri, Google Assistant, etc.) may retain your interactions as a way of identifying you and improving its comprehension of your commands.
Both the device and a remote web server will likely have your recorded commands as a means of personalizing your interactions.
Humans communicate in all types of accents, clarity and tone, so the audio data that are collected are useful in improving the accuracy of the ongoing interactions.
What is actually being stored?
Most voice-controlled systems are pretty much always listening to you waiting for you to say the “magic word” but not recording anything.
Once you use the wake word such as “Alexa” (which can be changed to “Amazon,” “Echo” or “Computer” in the Alexa app) the Echo knows that you’re giving it a command and it stores every command that you’ve ever given it by default.
The stored recordings actually include a brief moment just before the wake word, so this means that it’s possible that your recorded command includes small bits of a conversation preceding your use of the wake word.
How can I hear what’s been recorded?
Amazon makes it pretty easy to hear and manage what the Echo has recorded through its Alexa app.
Just tap into the “Settings” menu and scroll down to the “History” option to see everything in reverse chronological order — the most recent commands will be at the top.
When you tap on any entry in the History, you will be able to see the date and time of the command along with a play button if you want to hear it. If you want to delete the recording, simply tap the “Delete Voice Recordings” bar and it’s gone.
Every command also has the question: “Did Alexa do what you wanted?” which, when you respond, will help the system get better at recognizing your way of speaking.
Hacking the Echo
A recent report by a British security researcher detailed a method of modifying older versions of the Echo by physically interacting with it.
This “proof of concept” hack required that the hacker be in physical possession of the device so it could be disassembled, a connector soldered and code inserted via an SD card. This only worked on pre-2017 models.
These requirements eliminate the possibility of a random remote internet hacker turning your Echo into a snooping device, but it does underscore that buying a used pre-2017 Echo from a stranger isn’t such a good idea.
Ken Colburn is founder and CEO of Data Doctors Computer Services. Ask any tech question on Facebook or Twitter.
