A recent study revealed that the police can potentially access crucial data from smart speakers present at crime scenes without the owner’s permission or assistance from the manufacturer. This information could prove to be invaluable in solving cases of murder or theft through hacking.
Researchers from the University of Erlangen-Nuremberg in Germany, Jona Crassel and Gaston Pulisa, conducted an investigation into the type of data that can be retrieved from these devices. Their research was prompted by a case where Amazon refused to hand over data from a smart speaker linked to a murder investigation.
The focus of the study was on the Amazon Echo Show 15, a smart assistant equipped with a camera, a large display, six microphones, and a light sensor. The researchers were able to gain access to an unencrypted file system on the device that contained logs of movements and recognized individuals.
Within the file system, they discovered an encrypted “update token” that allowed access to data stored in the cloud. By decrypting this token using a key found in an unencrypted file on the device and information from open-source code, the researchers were able to retrieve voice requests, calendars, contacts, conversations, photos, and videos.
Pulisa pointed out that obtaining local data required a certain level of technical expertise, but he found it surprising that the file system was not encrypted. An Amazon spokesperson stressed that the security of their devices and customer data is a top priority for the company, noting that extracting information from internal components requires direct physical access to the Echo device and specialized knowledge.
David Wilson, a criminologist from Birmingham City University in the UK, highlighted that the use of technology and science in murder investigations is not as prevalent as depicted in television crime shows. He mentioned that less than 2% of murder trials are based on DNA evidence.
While acknowledging that evidence from smart speakers can be beneficial in certain cases, Wilson raised concerns regarding the balance between safety and privacy. He emphasized the importance of considering human rights issues when implementing such technological advancements.