“The unfortunate reality is there’s a microphone connected to a computer that’s connected to the network,” says Nyx. “And there’s no software patching that will make that not possible to use as a listening device.”
An interesting article and tbh, I’d actually support the device (… and I’m usually very privacy focused).
According to the article the purpose of the microphone is to listen for certain keywords (ie: “help”, “call 911”, gunshots, etc) and to detect when people are vaping, etc.
I mean, I would never install one in my home, due to privacy and security concerns. But if you’re in a public place, like a school such features make sense.
If you’re being bullied or need help, having a facility member “hanging out” in the schools public bathroom would be weird, creepy, and more of an invasion of privacy than a mic in a smoke detector.
That said, students and facility should be aware of what this device is doing and why. However, this article does a very good job of summarizing that.
Yes, the devices security is rubbish, but was patched. It’s not the first IoT device to do that and it won’t be the last (unfortunately).
Thanks for sharing the article OP.
A better device would simply be a switch on the wall to press an emergency button. Very little technology required or security patching.
I feel like surveilling a bathroom used by minors goes beyond the pale though. If the technology exists, it will be abused.
How do you think this technology would be abused?
If the device included full audio and video surveillance - I’d totally agree. However, the device does not include video (and it would be a real hard sell to include that).
If all parties are aware that monitoring will occur (maybe include a sign in the door), I’d argue that minors are aware of what this means.
Perhaps, it would mean that students “finish up” faster, rather than loitering and vaping (or bullying, etc)… and if that’s the case, I guess the device has fulfilled it’s purpose.
The article did mention how a hacked device could be used to “play sounds” or trigger false calls for “help”, or gunshots. But I’d argue this would be the modern day equivalent of falsely pulling the fire alarm.
Schools around the country will disable the keyword functionality very soon. It’s useless in such an environment. Kids can and will say “help 911” every time they leave the bathroom simply “for the lulz”. And there’s no video so they can’t be caught doing it unless you station someone right outside to catch them, rendering the feature useless. Malicious actors are the most difficult design requirement for any system.
You talk like those fire alarm levers don’t exist.
That’s a very binary mechanism with little excuse for pulling. And there are typically cameras nowadays. No cameras in the bathroom.
If all parties are aware that monitoring will occur (maybe include a sign in the door), I’d argue that minors are aware of what this means.
What, exactly, would be the alternative for a minor in school? Piss themselves back in class instead?
There’s a way to detect when students yell “help” or “call 911” from the bathroom that doesn’t require any technology.
You have a staff member within earshot of the bathroom.
In theory it sounds reasonable, but recording people in the bathroom at all is pretty creepy.
Not to mention once the kids learn about this, they’ll start shouting the keywords every time they’re in there.
The security wasn’t patched. Any firmware update can be modified since the keys are provided with the update. So while the patch may have been applied, it’s not permanent.
I feel like the article could have done a slightly better job of pointing this out to the layperson. But yeah, it is trivially easy to get the key off the manufacturer’s own website. Easy enough for a high school teen to do it in my opinion.
Just install a panic button. The microphone is not reasonable since there are way less intrusive options available.
