Home / News & Analysis / Bug Allowed Google Home Mini Speakers to Record Everything

Bug Allowed Google Home Mini Speakers to Record Everything

Smart speakers are only meant to listen when you want them to, which is why they have wake-up words and phrases. But that's not the case for Google's Home Mini speaker. Some of them have been listening to everything, recording it all, and transmitting the audio back to Google's servers. The good news is, Google isn't being purposefully evil.

As The Verge reports, the reason the Home Mini speakers record all sounds is due to a fault with the touch sensor on the top of the device. Google issued a software patch to stop the constant recording happening, and the company must be somewhat relieved it can be fixed remotely with a software update rather than a recall.

The fault was discovered by Artem Russakovskii from Android Police. His report of the "near-constant" listening and recording prompted a quick response from Google. Apparently the touch sensor fault is limited to Home Mini speakers given out at Made by Google events.

Related

It's estimated there's at least 4,000 affected devices. So if you own a Home Mini and it wasn't acquired from such an event, you don't need to worry. The fault won't impact the Google Home Max of course as it isn't launching until December.

As an added precaution and way of Google demonstrating they take privacy "very seriously," all activity and queries created by long pressing the touch sensor on Home Mini speakers between October 4-7 has been wiped and will no longer show up on owner's My Activity Page. Further information for those affected can be found on the Google Support page for the issue. It advises that if you apply the software update and still experience a problem Google will send out a replacement Home Mini to you.

Read more

Check Also

Facebook mistakenly leaked developer analytics reports to testers

Set the “days without a Facebook’s privacy problem” counter to zero. This week, an alarmed developer contacted TechCrunch, informing us that their Facebook App Analytics weekly summary email had been delivered to someone outside their company. It contains sensitive business information including weekly average users, page views, and new users. 43 hours after we contacted Facebook about the issue, the social network now confirms to TechCrunch that 3 percent of apps using Facebook Analytics had their weekly summary reports sent to their app’s testers, instead of only the app’s developers, admins, and analysts. Testers are often people outside of a developer’s company. If the leaked info got to an app’s competitors, it could provide them an advantage. At least they weren’t allowed to click through to view more extensive historical analytics data on Facebook’s site. Facebook tells us it has fixed the problem and no personally identifiable information or contact info was improperly disclosed. It plans to notify all impacted developers about the leak today and has already begun. Below you can find the email the company is sending: Subject line: We recently resolved an error with your weekly summary email We wanted to let you know about a recent error where a summary e-mail from Facebook Analytics about your app was sent to testers of your app ‘[APP NAME WILL BE DYNAMICALLY INSERTED HERE]’. As you know, we send weekly summary emails to keep you up to date with some of your top-level metrics — these emails go to people you’ve identified as Admins, Analysts and Developers. You can also add Testers to your account, people designated by you to help test your apps when they’re in development. We mistakenly sent the last weekly email summary to your Testers, in addition to the usual group of Admins, Analysts and Developers who get updates. Testers were only able to see the high-level summary information in the email, and were not able to access any other account information; if they clicked “View Dashboard” they did not have access to any of your Facebook Analytics information. We apologize for the error and have made updates to prevent this from happening again. One affected developer told TechCrunch “Not sure why it would ever be appropriate to send business metrics to an app user. When I created my app (in beta) I added dozens of people as testers as it only meant they could login to the app…not access info!” They’re still waiting for the disclosure from Facebook. Facebook wouldn’t disclose a ballpark number of apps impacted by the error. Last year it announced 1 million apps, sites, and bots were on Facebook Analytics. However, this issue only affected apps, and only 3% of them. The mistake comes just weeks after a bug caused 14 million users’ Facebook status update composers to change their default privacy setting to public. And Facebook has had problems with misdelivering business information before. In 2014, Facebook accidentally sent advertisers receipts for other business’ ad campaigns, causing significant confusion. The company has also misreported metrics about Page reach and more on several occasions. Though user data didn’t leak and today’s issue isn’t as severe as others Facebook has dealt with, developers still consider their business metrics to be private, making this a breach of that privacy. While Facebook has been working diligently to patch app platform privacy holes since the Cambridge Analytica scandal, removing access to many APIs and strengthening human reviews of apps, issues like today’s make it hard to believe Facebook has a proper handle on the data of its 2 billion users.

Leave a Reply

Your email address will not be published. Required fields are marked *

Disclaimer: Trading in bitcoins or other digital currencies carries a high level of risk and can result in the total loss of the invested capital. theonlinetech.org does not provide investment advice, but only reflects its own opinion. Please ensure that if you trade or invest in bitcoins or other digital currencies (for example, investing in cloud mining services) you fully understand the risks involved! Please also note that some external links are affiliate links.