Message from @°°°

Discord ID: 526064356073406480


2018-12-21 17:28:12 UTC  

Yuuup

2018-12-21 17:32:31 UTC  

What cracked me up was the dude that was interviewed and in perfect English he talked about missing buffalo wildwings

2018-12-21 17:32:47 UTC  

You KNOW he got deported and was just trying to get back in.

2018-12-22 00:27:30 UTC  

<:HMMM:513070140389326859>

2018-12-22 01:17:01 UTC  

@PreschoolFightClub. I saw stories like this and am like this is why I dont buy voice activated shit

2018-12-22 01:17:26 UTC  

Their camera doorbell also takes your face and puts the shit into a database

2018-12-22 02:04:58 UTC  

Prob working up to minority report level

2018-12-22 07:55:24 UTC  

I have interesting things about Amazon's home products as I did some software work on them

2018-12-22 09:56:35 UTC  

Do tell

2018-12-22 10:58:12 UTC  

They're listening to me poop arnt they

2018-12-22 13:03:27 UTC  

@Whats gay anymoreand every time you touch yourself

2018-12-22 15:42:18 UTC  

so i did firmware reliability testing on the previous generation of amazon's echo and nest devices

2018-12-22 15:43:36 UTC  

the company i worked for got what is typically known as "breadbox" versions of each device (proof of concept builds) as well as alpha and beta builds of production models

2018-12-22 15:46:19 UTC  

on the back end, there was about .9gb of allocated memory we could not access through python but when we ran any voice command tests or paired bluetooth devices, we noticed that allocated memory would increase. not a significant amount, usually around a few hundred kb, but at times it got up to a mb.

2018-12-22 15:46:55 UTC  

however, when the device would sync with amazon cloud servers, the next morning, the allocated memory would decrease to around .9gb again

2018-12-22 15:47:46 UTC  

the tools we used to monitor bluetooth radio activity, wifi activity, and ethernet activity all tracked packets that were being sent from the amazon echo devices around that time

2018-12-22 15:49:10 UTC  

so while none of us were testing or even active with the devices, and they were off (no power indicator lights, ensured not in sleep mode prior to completing our shifts) they were sending data

2018-12-22 15:49:29 UTC  

one of the builds amazon gave us to test wasn't as locked down as the others

2018-12-22 15:49:42 UTC  

so we got to see the data that was being recorded and sent

2018-12-22 15:49:56 UTC  

and it was not good

2018-12-22 15:51:56 UTC  

gps data, device id's of bluetooth devices paired as well as network information, the voice data being collected was not surprising as the amazon devs were forward with that information being collected

2018-12-22 15:52:45 UTC  

however, when we logged into one of our vm's with the test email we used for an amazon id, we noticed we were getting ads based off of the devices connected to the amazon products

2018-12-22 15:52:57 UTC  

specifically amazon counterparts

2018-12-22 15:53:32 UTC  

I knew from the get go that Alexa and similar home appliances were cataloging and sending off data from connected devices

2018-12-22 15:53:51 UTC  

the only shady thing, is that's not mentioned up front.

2018-12-22 15:53:58 UTC  

at all

2018-12-22 15:54:00 UTC  

Of course not

2018-12-22 15:54:36 UTC  

but i cannot effectively communicate the sheer amount of ads we got from amazon, affiliates, and sponsored ads based off of the devices we had connected

2018-12-22 15:55:06 UTC  

and sure that may seem meaningless, but we ran python commands to kill these things as we were told to do in test parameters

2018-12-22 15:55:17 UTC  

they turned themselves back on to transmit the data

2018-12-22 15:55:18 UTC  

LMAO

2018-12-22 15:55:35 UTC  

Jesus if that doesnt sound like malware, I dont know what is

2018-12-22 15:55:46 UTC  

the gps info being sent sucks too

2018-12-22 15:55:57 UTC  

because part of it was going to cloud servers

2018-12-22 15:55:59 UTC  

Can you gain access to the source code?

2018-12-22 15:56:07 UTC  

not anymore, laid off last year

2018-12-22 15:56:14 UTC  

But could you

2018-12-22 15:56:24 UTC  

that's a hard maybe

2018-12-22 15:56:34 UTC  

I wonder if removing the command lines would solve that issue

2018-12-22 15:56:59 UTC  

that's beyond my expertise with python and adb

2018-12-22 15:57:39 UTC  

so besides cloud servers' default location, the data was sent somewhere in washington and colorado