Smart TVs Just as George Orwell Envisioned

You Are Being Film
You Are Being Film. 

As I mentioned recently, I’ve been immersed in dystopian novels. George Orwell would mutter I told you so about these latest Smart TV revelations if he was still around.

Careful what you say around your TV. It may be listening. And blabbing. A single sentence buried in a dense “privacy policy” for Samsung’s Internet-connected SmartTV advises users that its nifty voice command feature might capture more than just your request to play the latest episode of Downton Abbey. “Please be aware that if your spoken words include personal or other sensitive information, that information will be among the data captured and transmitted to a third party,” the policy reads.

Samsung’s privacy policy notes that in addition to voice commands being transmitted, information about your device, “including device identifiers,” may also be beamed over the Internet to the third-party service, “or to the extent necessary to provide Voice Recognition features to you.”
McSherry called that bit of qualifying language “worrisome.”

“Samsung may just be giving itself some wiggle room as the service evolves, but that language could be interpreted pretty broadly,” she said.

(click here to continue reading Your Samsung SmartTV Is Spying on You, Basically – The Daily Beast.)

Samsung eventually admitted the 3rd party:

Samsung has confirmed that its “smart TV” sets are listening to customers’ every word, and the company is warning customers not to speak about personal information while near the TV sets.

The company revealed that the voice activation feature on its smart TVs will capture all nearby conversations. The TV sets can share the information, including sensitive data, with Samsung as well as third-party services.

Samsung has updated its policy and named the third party in question, Nuance Communications, Inc.

(click here to continue reading Samsung warns customers not to discuss personal information in front of smart TVs.)

Lonely Zenith
Lonely Zenith

Hmm, sounds familiar. Remember this from a few weeks ago:

Consumers have bought more than 11 million internet-connected Vizio televisions since 2010. But according to a complaint filed by the FTC and the New Jersey Attorney General, consumers didn’t know that while they were watching their TVs, Vizio was watching them. The lawsuit challenges the company’s tracking practices and offers insights into how established consumer protection principles apply to smart technology.

Starting in 2014, Vizio made TVs that automatically tracked what consumers were watching and transmitted that data back to its servers. Vizio even retrofitted older models by installing its tracking software remotely. All of this, the FTC and AG allege, was done without clearly telling consumers or getting their consent.

What did Vizio know about what was going on in the privacy of consumers’ homes? On a second-by-second basis, Vizio collected a selection of pixels on the screen that it matched to a database of TV, movie, and commercial content. What’s more, Vizio identified viewing data from cable or broadband service providers, set-top boxes, streaming devices, DVD players, and over-the-air broadcasts. Add it all up and Vizio captured as many as 100 billion data points each day from millions of TVs.

Vizio then turned that mountain of data into cash by selling consumers’ viewing histories to advertisers and others. And let’s be clear: We’re not talking about summary information about national viewing trends. According to the complaint, Vizio got personal. The company provided consumers’ IP addresses to data aggregators, who then matched the address with an individual consumer or household. Vizio’s contracts with third parties prohibited the re-identification of consumers and households by name, but allowed a host of other personal details – for example, sex, age, income, marital status, household size, education, and home ownership.  And Vizio permitted these companies to track and target its consumers across devices.

(click here to continue reading What Vizio was doing behind the TV screen | Federal Trade Commission.)

Continuous Video Recording in Progress
Continuous Video Recording in Progress

You didn’t realize that your habits were worth so much money to the corporate surveillance world did you? Too bad the data mining industry doesn’t share in any of the profits they’ve harvested from your habits and propensities.

Plus the whole listening to you every second might not always be in your own best interests:

Upon further investigation, however, police began suspecting foul play: Broken knobs and bottles, as well as blood spots around the tub, suggested there had been a struggle. A few days later, the Arkansas chief medical examiner ruled Collins’s death a homicide — and police obtained a search warrant for Bates’s home.

Inside, detectives discovered a bevy of “smart home” devices, including a Nest thermostat, a Honeywell alarm system, a wireless weather monitoring system and an Amazon Echo. Police seized the Echo and served a warrant to Amazon, noting in the affidavit there was “reason to believe that Amazon.com is in possession of records related to a homicide investigation being conducted by the Bentonville Police Department.”

That warrant threw a wrinkle into what might have been a traditional murder investigation, as first reported by the Information, a news site that covers the technology industry.

While police have long seized computers, cellphones and other electronics to investigate crimes, this case has raised fresh questions about privacy issues regarding devices like the Amazon Echo or the Google Home, voice-activated personal command centers that are constantly “listening.” Namely, is there a difference in the reasonable expectation of privacy one should have when dealing with a device that is “always on” in one’s own home?

The Echo is equipped with seven microphones and responds to a “wake word,” most commonly “Alexa.” When it detects the wake word, it begins streaming audio to the cloud, including a fraction of a second of audio before the wake word, according to the Amazon website.

A recording and transcription of the audio is logged and stored in the Amazon Alexa app and must be manually deleted later. For instance, if you asked your Echo, “Alexa, what is the weather right now?” you could later go back to the app to find out exactly what time that question was asked.

(click here to continue reading Can Alexa help solve a murder? Police think so — but Amazon won’t give up her data. – The Washington Post.)

Luckily, my “dumb” tv still chugs along…

 

Update: the Samsung story is from 2015, the Amazon and the Vizio stories are more recent. Main point still stands however…

REAL ID Boondoggle Continues

Complex Citizen
The continuing saga of the Complex Citizen.

Sigh. The REAL ID boondoggle isn’t dead yet. Doesn’t it sound like everything the Big Govment’ haters rail against? And yet, it was passed “in the wake of 9/11”…

Currently, Illinois licenses and identification cards do not meet minimum standards mandated by the Real ID Act, which passed in 2005 in the wake of 9/11. If the Department of Homeland Security does not grant Illinois an extension, residents would need additional identification like a passport or face additional security checks to get on planes.

The act aims to thwart efforts by terrorists, con artists and immigrants in the country illegally to obtain government-issued identification. Arguments about costs, privacy and whether the additional information would actually reduce threats have delayed implementation of the law for more than a decade.

A major feature of Real ID is the verification of birth certificates, which Illinois currently does not require. The information is electronically scanned and stored in a federal database, and data can be shared easily among states and the federal government.

“It’s a large database that allows us to verify birth certificates and death certificates, things of that nature,” said Henry Haupt, spokesman for Secretary of State Jesse White. “It’s quite costly. We estimate, in order to utilize it and have all the birth certificates verified for Illinois drivers, it would cost about $3.75 million each year.”

White’s office estimated it would cost $100 to $150 million just for staffing, equipment and data storage. A Real ID driver’s licenses could cost an estimated $75 in Illinois. A license currently costs $30 for ages 21-68, according to CyberDrive Illinois.

That cost would largely be shouldered by Illinois drivers and taxpayers. The Homeland Security estimates it could cost $4 billion nationwide to implement the act.

States and territories were initially required to implement the program by May 2008, but the federal government delayed its start four times. Twenty-one states and four territories have been granted extensions to meet the law’s standards; 22 states and Washington, D.C., have implemented the act, according to a Jan. 30 Homeland Security statement.

Seven states — Arizona, Idaho, Louisiana, Maine, Minnesota, New Hampshire, New York — have no plans to implement Real ID. Residents of five of those states will not be able to board airplanes without additional identification like a passport starting in 2016; New York and Minnesota have driver’s licenses with enhanced security measures that will allow their residents to board airplanes, according to Homeland Security.

(click here to continue reading State eyes more secure driver’s license to avoid flying restrictions – Chicago Tribune.)

Back Seat Drivers
Back Seat Drivers

Sen. Iris Martinez (D-Chicago), a long-time opponent of the bill, says:

“I viewed Real ID as yet another unfunded federal mandate on state governments already facing tough budgets for important priorities,” Martinez said. “The proposition of a creation of a ‘one size fits all’ ID card necessary to travel was of great concern.”

 and the price of implementation to the states is steep:

Brian Zimmer, president of the Coalition for a Secure Driver’s License who helped draft the law’s provisions on driver’s licenses as a congressional committee staffer, said Illinois would have to construct or renovate buildings that issue licenses in order to meet security criteria, which could prove challenging.

The law prompted some states, like Wisconsin and Texas, to consolidate facilities. In Tennessee, licenses are issued from a single, secure location, he said. That means applicants get their license via mail instead of in person.

“Real ID required states to move from a business model where licensing was a revenue source to a business model where money needs to be invested in it to ensure it was done more securely,” Zimmer said. “The new model is security first, and security comes with a price.”

May Day rally 2007
Line at the REAL ID DMV station

price, confusion, long lines, and of course, privacy theft concerns:

Critics of Real ID have complained that it is a blatant invasion of privacy and would make people vulnerable to identity theft.

Ed Yohnka, a spokesman for the American Civil Liberties Union of Illinois, said a government database of citizens and some of their personal information smacks of Big Brotherism and would be a gold mine for identity thieves.

“One of the troubling things is that the system to protect our data will no longer be dependent about what happens here in Illinois,” Yohnka said. “What happens in Mississippi or Maine or Montana will be a conduit to get to our data. If hackers can get into those systems, they can get to the national system.”

He noted that the state’s database of driver’s licenses has fought off tens of thousands of improper access attempts.

“From a pragmatic point of view, all this furor over something that doesn’t provide safety and security is ridiculous,” Yohnka said.

https://farm9.staticflickr.com/8591/16639540626_809dfb3b7c_z.jpg
It’s the Future…

Sounds great! Can’t wait! Especially since I had such a bitch of a time getting my passport due to bureaucratic SNAFU ingrained in that system.