A couple of weeks ago, I spoke about Tile signing a deal to utilize Amazon’s ‘Sidewalk’ network so that it could better compete agains Apple’s Find My network. At the time I didn’t think it was going to do much for Tile. But it now appears that I might have wrong about that as more details about Amazon’s ‘Sidewalk’ network are starting to surface. And not all of those details are good:
The idea behind is actually really smart–make it possible for smart home devices to serve as a sort of bridge between your WiFi connection and one another. That way, if your Ring doorbell, for example, isn’t located close to your WiFi router, but it happens to near an Echo Dot, it can use Sidewalk to stay connected.
The same is true if your internet connection is down. Your smart devices can connect to other smart devices, even if they aren’t in your home. The big news on this front is that Tile is joining the Sidewalk network on June 14. That means that if you lose a Tile tracker, it can connect to any of the millions of Echo or Ring devices in your neighborhood and send its location back to you.
That’s definitely a nice benefit, but it’s also where things get a little murky from a privacy standpoint. That’s because other people’s devices, like your neighbor’s, can also connect to your network.
Amazon is pretty clear that Sidewalk uses three layers of encryption so that no data is shared between say, someone’s Tile tracker and your network. The signal from the Tile is encrypted all the way back to the Tile app on your iPhone or Android smartphone.
Still, a feature like this seems like the type of thing you’d want some control over. If suddenly my devices are going to start connecting to my neighbor’s WiFi, or theirs to mine, it seems like you’d have to opt-in, right?
Nope.
That’s because Amazon has enabled Sidewalk on every capable device by default. Whether or not you want your device connecting to other devices, or want your neighbors connecting to your WiFi, Amazon went ahead and made Sidewalk opt-out.
I can see why Amazon went this route. It needs all the devices that it can to make ‘Sidewalk’ work. But options like this should be opt-in rather than opt-out. Especially since I don’t exactly trust Amazon with my data. So if this bothers you, here’s how you can opt-out using the Alexa app’s More tab (at the bottom): Settings > Account Settings > Amazon Sidewalk > Enabled.
So this will lead to the inevitable question about whether Apple’s Find My functionality is on by default. From what I recall it isn’t and during the setup process of an iDevice you have to turn it on. But I would love confirmation of that. If you happen to know for sure, drop me a comment or leave a note and let me know.
Charities & Aid Organizations In Ukraine Attacked With Malware: Amazon
Posted in Commentary with tags Amazon, Russia on March 6, 2022 by itnerdThis morning I was directed to this post from Amazon who has been putting in a lot of effort and money to help the people of Ukraine. This part of the post caught my attention:
For several weeks, we have been partnering closely with Ukrainian IT organizations to fend off attacks and working with organizations in Ukraine, and around the world, to share real-time, relevant intelligence. As a result, our teams have seen new malware signatures and activity from a number of state actors we monitor. As this activity has ramped up, our teams and technologies detected the threats, learned the patterns, and placed remediation tools directly into the hands of customers. As always, our teams are constantly learning from the intelligence we collect to continue evolving protections for our infrastructure. We employ a ‘follow the sun’ model where our teams track new threat intelligence 24/7 and are able to quickly respond to issues. Our security teams are sharing this intelligence with governments and IT organizations that we partner closely with from Europe, North America, and around the world to equip critical infrastructure owners and operators with additional information to protect their facilities.
While we are seeing an increase in activity of malicious state actors, we are also seeing a higher operational tempo by other malicious actors. We have seen several situations where malware has been specifically targeted at charities, NGOs, and other aid organizations in order to spread confusion and cause disruption. In these particularly egregious cases, malware has been targeted at disrupting medical supplies, food, and clothing relief. We’ll continue to work hard to protect these customers and will continue to work closely with them as they carry out their much-needed work to help those impacted by this terrible conflict.
The fact that someone, presumably Russian and Belarusian threat actors are targeting charities, NGO’s and other aid organizations is completely reprehensible. I am glad that Amazon is stepping up to help defend these groups and I hope that other companies will do the same thing. I also hope that at some point in the future that the people behind these attacks are hunted down and brought to justice.
Leave a comment »