Amazon

The mind-bending amount that Amazon knows about you

Leo Kelion, BBC News:

I submitted a subject data access request, asking Amazon to disclose everything it knows about me

Scanning through the hundreds of files I received in response, the level of detail is, in some cases, mind-bending.

One database contains transcriptions of all 31,082 interactions my family has had with the virtual assistant Alexa. Audio clips of the recordings are also provided.

And:

Clicking on another file reveals 2,670 product searches I had carried out within its store since 2017. There are more than 60 supplementary columns for each one, containing information such as what device I’d been using, how many items I subsequently clicked on, and a string of numbers that hint at my location.

One spreadsheet actually triggers a warning message saying it is too big for my software to handle. It contains details of the 83,657 Kindle interactions I’ve had since 2018, including the exact time of day for each tap.

This great read is the story of how this all evolved. Chock full of detail, chock full of links. Well done Leo.

Handy disk price tracker

In the market for a new SSD or other form of mass storage? Follow the headline link, check the appropriate boxes, see what’s cheapest.

Worth bookmarking.

Ring Doorbell Android app packed with third-party trackers

The original headline from the Electronic Freedom Foundation was:

Ring Doorbell App Packed with Third-Party Trackers

To me, that gave the appearance that the iOS app was packed with trackers. But the article itself doesn’t have a single mention of Apple or iOS, makes it clear the issue is with the Android app. Just wanted to call that out.

On to the article itself:

An investigation by EFF of the Ring doorbell app for Android found it to be packed with third-party trackers sending out a plethora of customers’ personally identifiable information (PII). Four main analytics and marketing companies were discovered to be receiving information such as the names, private IP addresses, mobile network carriers, persistent identifiers, and sensor data on the devices of paying customers.

The issue is not that the danger of your doorbell video or statistics being leaked, but that the trackers can be used to connect your IP address and other identifying info to other devices, building an on-line profile showing where you live and what other on-line information is linked to you.

This cohesive whole represents a fingerprint that follows the user as they interact with other apps and use their device, in essence providing trackers the ability to spy on what a user is doing in their digital lives and when they are doing it.

I hate this behavior. I love the idea of a video doorbell, but I continue to wait for one that is devoid of trackers, truly anonymized.

Amazon and PayPal war over browser plug-in

Louise Matsakis, Wired:

Days before Christmas, at the height of the last-minute holiday shopping rush, an ominous message appeared on Amazon.com. It warned shoppers who used a popular browser extension called Honey that the service, which promises to track prices and discount codes, was “a security risk.”

“Honey tracks your private shopping behavior, collects data like your order history and items saved, and can read or change any of your data on any website you visit,” the message read. “To keep your data private and secure, uninstall this extension immediately.”

If you’ve logged into PayPal lately, you’ve no doubt seen heavy duty marketing for the Honey plug-in. It’s a nice idea, looking out for coupons and discount codes for things you are buying.

Amazon flagged it as a security risk. Genuine concern for your safety?

Amazon has a browser extension of its own called Amazon Assistant. It also tracks prices, just like Honey, and allows you to compare items on other retailers to those on Amazon.

Reading the article, seems like this is more about thwarting competition on Amazon’s part, not at all about safety.

Motherboard: We tested Ring’s security. It’s awful

Joseph Cox, Motherboard:

From across the other side of the world, a colleague has just accessed my Ring account, and in turn, a live-feed of a Ring camera in my apartment. He sent a screenshot of me stretching, getting ready for work. Then a second colleague accessed the camera from another country, and started talking to me through the Ring device.

Earlier today, we posted about the Apple, Amazon, Google alliance designing an IoT open standard. I’d love to see Amazon close up these security holes.

Until then, I’ll limit my video doorbell candidates to those who sign up for HomeKit Secure Video.

Amazon, Apple, Google, Zigbee Alliance to develop open standard for smart home devices

Apple:

Amazon, Apple, Google, and the Zigbee Alliance today announced a new working group that plans to develop and promote the adoption of a new, royalty-free connectivity standard to increase compatibility among smart home products, with security as a fundamental design tenet.

This has huge potential. It will be interesting to see if Amazon opens up their Ring doorbell protocol. All the Ring doorbell hacking stories, true or not, are hurting their brand, and likely hurting the overall product category trustability.

Would love to see a path where Apple forces stronger privacy/security, rather than a weaker standard that allows all entrants to play.

Here’s the link to the main alliance page. Note that Apple’s name (all the way at the bottom) is plain text, no logo. Odd.

Apple Podcasts now available on Echo devices

Amazon blog, Friday:

Beginning today, Alexa customers in the U.S. will be able to listen to more than 800,000 podcasts available through Apple Podcasts on their Alexa-enabled device.

Definitely cool, especially if you’ve got the Amazon ecosystem in your house. Be sure to make Apple Podcasts your default podcast app so you don’t repeatedly have to tell Alexa where to find your podcasts.

Whether you’re listening at home or on the go, you don’t need to worry about losing your spot. Link your account in the Alexa app using your Apple ID, and you can seamlessly pick up where you left off listening on the Apple Podcasts App or your Alexa device.

Would you “link your account in the Alexa app using your Apple ID”? This strikes me as a potential risk. Am I overworrying?

Alexa and Google Home devices leveraged to phish and eavesdrop on users, again

Catalin Cimpanu, ZDNet:

Hackers can abuse Amazon Alexa and Google Home smart assistants to eavesdrop on user conversations without users’ knowledge, or trick users into handing over sensitive information.

And regarding the word “again” in the headline:

The attacks aren’t technically new. Security researchers have previously found similar phishing and eavesdropping vectors impacting Amazon Alexa in April 2018; Alexa and Google Home devices in May 2018; and again Alexa devices in August 2018.

Whack-a-mole. Amazon and Google respond to attacks with countermeasures, new attacks pop up.

As to the specifics, watch the videos embedded in the linked article. The phishing attack asks you for your password. Though there are some people who might actually respond to this, I’d guess most users would instantly get the evil intent here. But still, the fact that such an action exists, that it passes muster enough to be demo-able, does give me pause.

More troubling is the eavesdropping issue shown in the second set of videos. The fact that an action continues, even after you ask Alexa/Google to stop, does seem like it should not be allowed to happen.

Is this lack of security the price you pay for customizable actions?

Amazon and Apple are quietly building networks that know the location of everything

Sophie Charara, Wired:

Amazon’s new Sidewalk protocol and Apple’s experiments with ultra-wideband signal a new battleground that gets Amazon out of the house and Apple inside it

Apple is strong outside the house, weakest inside. The U1 Wideband chip hopes to give Apple very precise location information inside your house.

Amazon’s problem is the opposite. They have great reach inside the house, via Echo devices, but without a phone of their own, they depend on Android and iPhone to go where you are outside the house.

One core point:

For Amazon, in fact, that work has already begun as Sidewalk originally came out of the Ring team’s ambition to extend its connected security devices out into gardens.

There are already efforts by Amazon to share Ring doorbell footage with police departments to help fight crime. Clearly, privacy is a major issue here.

Interesting to watch these opposing solution sets unfold.

Amazon brings Alexa to your glasses

[VIDEO] Amazon introduced a lot of new product yesterday, including Echo Ring and Echo Buds. But, to me, the most significant product they announced was a pair of glasses under the name Echo Frames.

Echo Frames brings Alexa to your ears, with new speaker designs that allow you to hear Alexa and listen to music, even in a noisy environment. Most significantly, Echo Frames are designed to take prescription lenses, so they’ll actually replace your own glasses, along with their treated lenses (my glasses are also my sunglasses, so this is important to me).

Apple does not have a solution like this. Yet. True, there’s Siri on your wrist, and in your pocket. And in your ears, at least some of the time.

Echo Frames is Alexa within whispering distance, every minute you are awake.

Watch the video (embedded in the main Loop post) to get a sense of this. Follow the headline link to see the Echo Frames product page, and to sign up for the chance to be one of the testers when the product starts its rollout later this year.

Apple Card vs Amazon Prime Rewards Visa: A privacy experiment

Geoffrey A. Fowler, Washington Post:

I recently used my credit card to buy a banana. Then I tried to figure out how my credit card let companies buy me.

And:

Despite a federal privacy law covering cards, I found that six types of businesses could mine and share elements of my purchase, multiplied untold times by other companies they might have passed it to.

And:

When I swiped my cards, of course my banks received data. What’s surprising is who they can share it with. My data helped identify me to Chase’s marketing partners, who send me junk mail. Some data even got fed to retail giant Amazon because it co-branded my card.

And:

This is where the Apple Card is different. In the Goldman Sachs privacy statement, its answer to most kinds of sharing is “no.” Goldman still shares information with credit agencies about whether you pay your bills. But it says it doesn’t feed transactions to marketers or a sister company that mines card data.

The whole article is a fascinating read. But if I had to highlight a single point, it’s that last quoted paragraph above. Yes, you can get more cash back, more frequent flyer miles, etc., but there’s a price, both in a yearly fee charged by most credit cards, and in data sharing.

What’s in your wallet?

Amazon introduces Prime Student Amazon Music Unlimited for just $0.99 a month

From the press release:

By adding Amazon Music Unlimited, Prime Student members can now get over 50 million songs, thousands of curated playlists and stations, and discover new music through voice with Alexa

  • Amazon Music: 50 million songs
  • Apple Music: 50 million songs
  • Spotify: 35 million songs

This is no small thing. Amazon is quickly gaining on both Apple Music and Spotify. In part, this is due to the wild success of Echo and Alexa. Imagine how this would be if Amazon had a successful phone and watch to add to the mix.

The systematic genius of Bezos and Amazon

Ben Evans:

Amazon is so new, and so dramatic in its speed and scale and aggression, that we can easily forget how many of the things it’s doing are actually very old. And, we can forget how many of the slightly dusty incumbent retailers we all grew up with were also once radical, daring, piratical new businesses that made people angry with their new ideas.

The linked piece by Ben Evans shows both how everything old is new again and how systematically Jeff Bezos is scouring the old for ideas to repurpose to keep Amazon growing.

One example:

In Émile Zola’s Au Bonheur des Dames, a tremendously entertaining novel about the creation of department stores in 1860s Paris, Octave Mouret builds a small shop into a vast new enterprise, dragging it into existence through force of will, inspiration, and genius. In the process, he creates fixed pricing, discounts, marketing, advertising, merchandising, display, and something called “returns.” He sends out catalogs across the country. His staff is appalled that he wants to sell a new fabric at less than cost; “that’s the whole idea!” he shouts. Loss leaders are nothing new.

Meanwhile, the other half of the story follows the small, traditional shopkeepers in the area, who are driven out of business one by one. Zola sees them as part of the past to be swept away. They’re doomed, and they don’t understand—indeed, they’re both baffled and outraged by Mouret’s new ideas.

Fantastic read.

Amazon Prime Day is today. Here are some Apple deals worth a look

Here are a few of the deals I found. As is our policy, there are no embedded affiliate links:

Some pretty good deals here. Looks like these go through all day Tuesday.

Amazon now fastest-growing music service, outpacing Apple & Spotify

Mike Wuerthele, AppleInsider:

According to sources familiar with the matter, Amazon has quietly outpaced subscriber additions versus its more well-known competitors. A report by the Financial Times claims that Amazon Music Unlimited subscribers have grown by about 70% in the last year.

Apple Music is said to be at a 60 million paid subscribers, Spotify at 100 million, and Amazon at about 32 million.

Spotify has done this with no hardware to leverage. Apple Music, obviously, has the iPhone and Apple Watch, with HomePod a small slice of the hardware listens.

Amazon has no phone, but Echo devices are a huge access point.

Will Apple pursue Amazon’s Echo, build out the HomePod space with more Siri access devices priced to compete with Echo?

To me, in the home, Amazon has an advantage, with low-priced Echos a Trojan horse for Amazon Music. Outside the home, on the road, Apple has the advantage, with iPhones, Apple Watch, and CarPlay all working in harmony to support the ecosystem.

Bottom line, I think it’s a matter of time until Spotify feels the squeeze from both sides.

Amazon and counterfeit products

The New York Times:

“The Sanford Guide to Antimicrobial Therapy” is a medical handbook that recommends the right amount of the right drug for treating ailments from bacterial pneumonia to infected wounds. Lives depend on it.

And:

Antimicrobial Therapy, which publishes “The Sanford Guide to Antimicrobial Therapy,” bought 34 of its handbooks from Amazon and Amazon’s third-party sellers. At least 30 were counterfeits.

And:

Amazon takes a hands-off approach to what goes on in its bookstore, never checking the authenticity, much less the quality, of what it sells. It does not oversee the sellers who have flocked to its site in any organized way.

That has resulted in a kind of lawlessness. Publishers, writers and groups such as the Authors Guild said counterfeiting of books on Amazon had surged. The company has been reactive rather than proactive in dealing with the issue, they said, often taking action only when a buyer complains.

I’ve written a bunch of books over the years and had a front row seat as counterfeiting grew from a clumsy, back-room business using hacksaws (to cut book spines) and copiers into a sophisticated factory, sucking in books and spitting out copies in mere minutes.

It has become harder and harder to make a living writing books, and nigh impossible to stop counterfeiting. Amazon selling counterfeit books and relying on customer complaints to spot counterfeits, in my opinion, is like a fence selling stolen goods. Just as an art patron might not know that their Picasso is a fake, the book buyer might never know that the forged book they just bought is fake.

The two terrible sides to fakes on Amazon? The original author/maker doesn’t see a penny for their hard work and, as called out above, real harm can be done where faulty information is sent out from a supposedly reliable source.

From Amazon’s response to this story (H/T Christopher Lloyd) on their blog:

A recent New York Times article claims that Amazon doesn’t care about counterfeits and takes a hands-off approach to what is sold in our stores. Nothing could be further from the truth. We invest substantial amounts of time and resources to protect our customers from counterfeit products, including books. We also stand behind every product sold in our stores with our A-to-z Guarantee.

Amazon strictly prohibits the sale of counterfeit products. We invest heavily in prevention and take proactive steps to drive counterfeits in our stores to zero. In 2018 alone, we invested over $400 million in personnel and tools built on machine learning and data science to protect our customers from fraud and abuse in our stores.

And:

One of the examples prominently featured by the Times, was the Sanford Guide. We’ve worked closely with Sanford Publishing and took additional action in November 2018 to address their concerns. Since these measures were put in place, the publisher has not submitted any further notices of infringement.

I’d love to see followup from the New York Times on this, both in continued investigation and in direct response to Amazon’s rebuttal.

Alexa Guard listens to all the sounds in your house

[VIDEO] Amazon just rolled out Alexa Guard (video embedded in main Loop post), a new feature that lets your Echo monitor all the sounds in your house while you are away. If it hears a smoke alarm, carbon monoxide alarm, or glass breaking, it will send you a smart alert, playing the sound on your phone.

On one hand, this is a clever idea and requires no extra purchase on your end. Just tell Alexa you are leaving the house and Alexa will vigilantly listen as instructed. This is great for Amazon, as I’m sure it’ll help them sell more Echo devices.

On the other hand, I’m not sure how I would feel about knowing that Alexa was always listening and, if the moment was right, always ready to record a sound for posterity, especially if you came home and forgot to turn Alexa Guard off.

This just strikes me as anti-privacy.

On the other, other hand, I can’t help but think this is a feature Apple could easily implement, if they so chose. Would I feel any different with Apple eavesdropping, vs Amazon? I’m not sure.

The making of Amazon Prime, the internet’s most successful and devastating membership program

Jason Del Rey, Vox:

In the fall of 2004, Jeff Bezos’s company was still mostly selling just books and DVDs.

That same year, Amazon was under siege from multiple sides. Some of its biggest competitors were brick-and-mortar chains like Best Buy, which was still in expansion mode at the time, with sales growing 17 percent annually.

And:

Amazon was worth $18 billion at the time.

And:

But 15 years later, Amazon is worth more than $900 billion, compared to just $33 billion for its old foe eBay, which spun off its (more valuable) payment division, PayPal. And the Amazon Prime membership program is perhaps the biggest reason why.

This is a fantastic, behind the scenes look at how Amazon Prime came to be, with interviews with people who were part of making it all happen. Great read.

What Amazon knows about you

Ina Fried lays out all the ways that Amazon harvests your personal data. The list is surprisingly long.

Don’t miss the links at the end for what Google, Facebook, Tesla, and Internet people finders know about you.

Amazon hiring editor-in-chief for Ring doorbell “crime news”

From the Amazon job description:

The Managing Editor, News will work on an exciting new opportunity within Ring to manage a team of news editors who deliver breaking crime news alerts to our neighbors.

Struggling to wrap my head around the implications here. Is this a publicity campaign? Is this part of a data-mining scenario? Is there money in the picture, or is this a pure loss for Amazon, pulled from the Ring marketing budget?

Is this the new crime beat?

The Information: Apple halved spending on Amazon Web Services last year, moved more cloud services in-house

Benjamin Mayo, 9to5Mac:

A report on Monday indicated that Apple is spending upwards of $30 million a month on Amazon Web Services, suggesting Apple’s spending had increased by about 10% over the previous year.

Today, The Information disputes these claims. It says that Apple spent about $370 million across 2018 (roughly $30m per month) but that is actually down compared to the year previously. In fact, Apple reportedly paid $775 million for AWS in 2017, which means 2018’s numbers represent a 50% drop.

The Information article indicates that Apple is aggressively transitioning its iCloud services to running on its own in-house servers.

Here’s a link to the paywalled Information article.

This makes a lot of sense. Apple has long shown that they want to own as much of their process as they can. As I said a few days ago, Apple’s continuing dependence on a competitors cloud services seems counter-intuitive.

Apple spends $30 million+/month on Amazon’s cloud, making it one AWS’s biggest customers

CNBC:

As Apple and Amazon compete for a greater share of consumer dollars and attention, they also have a particularly intimate business relationship: Apple is spending more than $30 million a month on Amazon’s cloud, according to people familiar with the arrangement.

Apple’s cloud expenditure reflects the company’s determination to deliver online services like iCloud quickly and reliably, even if it must depend on a rival to do so.

Add in this comment from John Gruber:

A decade ago, pre-iPhone, Apple was notoriously behind on large-scale cloud services. But AWS only got started as a service in 2006, the year before the iPhone debuted. It was based on infrastructure Amazon had been working on since the 90s, sure, but it wasn’t a service Apple could even consider until 2006.

iCloud was launched in 2011. That’s 8 years. If Apple is still largely reliant on AWS today, why? Maybe they just honestly figure they don’t need to do it all themselves.

I’ve long wondered why Apple makes such heavy use of AWS. Is this simply because they don’t have the internal chops to deliver bulletproof cloud in the same way as Amazon? Is there more to it, perhaps a subtle piece in the complex business relationship with Amazon (Amazon sells some, but not all Apple products, Amazon’s video streaming service competes with Apple’s coming TV+, Amazon Video lives on Apple TV, etc.)

Amazon is making a rival to Apple’s AirPods as first Alexa wearable

My immediate thought here is that Amazon still does not have a phone. They will never be a first class citizen on iPhone.

Sure, if you have an Alexa device in your kitchen, AmazonPods can rival AirPods in every way possible. But when you leave the house, that picture changes.

AmazonPods won’t have the pairing snappiness of AirPods when Amazon does not own both sides of the connection. Imagine you want to go for a run. Will AmazonPods pair with Apple Watch? Certainly, the connection with iPhone, Apple Watch, etc., will never be as easy as with AirPods.

I suspect AmazonPods will be cheaper than AirPods and will offer advantages when Alexa hardware is on the other end. Will those advantages be enough to pull Apple users from the comfort/snappiness of the ecosystem? We’ll see how this plays out.

Amazon and fake books

No Starch Press is a longtime publisher of books for developers. Over the weekend, they posted this tweet, calling out Amazon for selling a fake version of one of its books (H/T Robert Walter).

The book had the same title, same author, and a similar cover. But it was not printed by No Starch Press and, presumably, none of the money will make its way to No Starch or the author.

Book fakes have been around forever. Pretty early in my book writing career, I found out the ugly truth. When a book with any kind of demand appeared in print, the fake machinery kicked in. Someone (for me, it usually started in China) would buy a copy of the book, use a saw to cut off the spine/binding, then feed the pages into an optical character reader, creating a PDF of the book.

Once they had the fake book in hand, they could print a fake and sell it, or add the fake PDF to a torrent web site. Happened to me with every book I ever wrote.

But this particular fake appears to be surfaced by Amazon, the number one bookseller in the world. Here’s a link to what appears to be the fake. If I had not seen the original, I would never have known.

Amazon, you going to do anything about this?

“Alexa, play Bebe Rexha on Apple Music”

That headline is from Amazon’s blog post. Just a few weeks away:

We’re excited to announce that Apple Music will be available on Echo devices beginning the week of December 17.

Strong motivation to spur a wave of Echo purchases for the holidays.

Interesting to see Amazon embrace Apple Music. Feels like they’ve given up trying to compete with their music offerings. Smart, and good for both Amazon, and Apple.

Amazon chooses Virginia and New York City sites for split second HQ

Washington Post:

Amazon will open major new outposts in Northern Virginia’s Crystal City and in New York City, splitting its much-sought investment of up to 50,000 jobs between the two East Coast sites, according to people close to the decision-making process.

Crystal City is actually part of Arlington, VA, home of the Pentagon and Arlington National Cemetery and right next to National Airport.

The New York City location is Long Island City, which is in Queens, just east of Manhattan with access to the Queensboro Bridge and the Queens Midtown Tunnel, both of which connect Queens to Manhattan. Laguardia Airport is also in Queens.

The Crystal City location has long been a not so secret secret, widely rumored as the primary selection. Though Amazon still has not made an official announcement, this story appeared in this morning’s Washington Post, which is owned by Jeff Bezos.

Secret Amazon brands are quietly taking over Amazon.com

Quartz:

Arabella. Lark & Roe. Mae. NuPro. Small Parts.

You might not know it from their names, but these brands all belong to Amazon.

And:

Amazon’s private label business is booming, on pace to generate $7.5 billion this year and $25 billion by 2022, according to estimates from investment firm SunTrust Robinson Humphrey. To accelerate that growth, the company is inviting manufacturers to create products exclusively for its collection of private brands.

And:

Amazon’s push into private labels could threaten the third-party sellers who do business on its website, and are important to the company’s own bottom line.

And:

The massive volume of stuff peddled by third-party sellers also creates problems. Amazon at times has struggled to police offensive products, or to banish counterfeits from the marketplace. Private label brands created by Amazon and manufacturers it works with exclusively could help the company get a tighter grip on the quality of merchandise sold across the site.

I’ve long encountered AmazonBasics labeled products, such as these Lightning cables. But this is different. These appear as private-label brands and compete directly with all the other private-label brands but with a clear, home-field advantage.

Amazon raises minimum wage to $15 for all US employees

Amazon:

Amazon today announced it is increasing its minimum wage to $15 for all full-time, part-time, temporary (including those hired by agencies), and seasonal employees across the U.S.—effective November 1. The new Amazon $15 minimum wage will benefit more than 250,000 Amazon employees, as well as over 100,000 seasonal employees who will be hired at Amazon sites across the country this holiday.

This more than doubles the current hourly rate of $7.25.

Definitely a step in the right direction for Amazon, addressing one of its biggest criticisms. It’d be nice if they enhanced this move by making it easier for part time employees to work enough hours to get health benefits.

Amazon plants fake packages to catch dishonest drivers

Hayley Peterson, Business Insider:

Amazon uses fake packages to catch delivery drivers who are stealing, according to sources with knowledge of the practice.

The company plants the packages — internally referred to as “dummy” packages — in the trucks of drivers at random. The dummy packages have fake labels and are often empty.

Interesting read. You’d think this sort of strategy would stop working once word got out. But, since word getting out was intentional (Amazon commented for the record), perhaps putting this out there was the core of Amazon’s theft reduction strategy.