News: 1606250813

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Amazon's ad-hoc Ring, Echo mesh network can mooch off your neighbors' Wi-Fi if needed – and it's opt-out

(2020/11/24)


Amazon is close to launching Sidewalk – its ad-hoc wireless network for smart-home devices that taps into people's Wi-Fi – and it is pretty much an opt-out affair.

The gist of Sidewalk is this: nearby Amazon gadgets, regardless of who owns them, can automatically organize themselves into their own private wireless network mesh, communicating primarily using Bluetooth Low Energy over short distances, and 900MHz LoRa over longer ranges.

At least one device in a mesh will likely be connected to the internet via someone's Wi-Fi, and so, every gadget in the mesh can reach the 'net via that bridging device. This means all the gadgets within a mesh can be remotely controlled via an app or digital assistant, either through their owners' internet-connected Wi-Fi or by going through a suitable bridge in the mesh. If your internet goes down, your Amazon home security gizmo should still be reachable, and send out alerts, via the mesh.

Amazon tells ISPs: I can be your Eero, baby. I can ease your Wi-Fi pain. I will block bad sites forever... [1]READ MORE

It also means if your neighbor loses broadband connectivity, their devices in the Sidewalk mesh can still work over the 'net by routing through your Sidewalk bridging device and using your home ISP connection.

The range is also said to be greater than that of Wi-Fi, meaning you can place Sidewalk-capable smart-home devices where Wi-Fi can't reach them yet where they can join a nearby Sidewalk mesh. And it's hoped the mesh can be used to locate missing items or pets: fit them with a Sidewalk-capable widget, such as a Tile, and they can be found within the range of a mesh.

Amazon Echoes, Ring Floodlight Cams, and Ring Spotlight Cams will be the first Sidewalk bridging devices as well as Sidewalk endpoints. The internet giant hopes to encourage third-party manufacturers to produce equipment that is also Sidewalk compatible, extending meshes everywhere.

Crucially, it appears Sidewalk is opt-out for those who already have the hardware, and will be opt-in for those buying new gear. From Amazon's privacy whitepaper

[2]PDF

on this new, proprietary technology:

When customers first turn on a new Sidewalk gateway device, they will be asked whether they want to join the network. For customers with existing devices that are Sidewalk capable, an over-the-air (OTA) update will connect them to the network — no action is needed. These customers will first receive an email about the pending update and instructions for how to disable, if that is their choice.

In other words, if you already have, say, an Amazon Ring, it will soon get a software update that will automatically enable Sidewalk connectivity, and you'll get an email explaining how to switch that off. When powering up a new gizmo, you'll at least get the chance to opt in or out.

Amazon says it employs encryption and related techniques so that owners of Sidewalk bridges "have no idea what types of endpoints are connected, times in which they are connected, or information about the owner of the endpoint." These gateways can't inspect packets between endpoints in the mesh and Amazon's back-end servers. Similarly, we're told, endpoints can't discern information about the gateways they are using.

There are more technical details on the design of the cryptography involved in the above PDF.

We're told Sidewalk will only sip your internet connection rather than hog it, limiting itself to half a gigabyte a month. "The maximum bandwidth of a Sidewalk bridge to the Sidewalk server is 80Kbps, which is about 1/40th of the bandwidth used to stream a typical high definition video," Amazon [3]claimed .

"Today, when you share your bridge’s connection with Sidewalk, total monthly data used by Sidewalk, per account, is capped at 500MB, which is equivalent to streaming about 10 minutes of high definition video."

US not UK at launch

Amazon sent out emails this week to folks in the United States, alerting them to a launch of Sidewalk expected this year. Confusingly, some people in the UK got the messages, too, though Amazon has stressed the service will kick off solely in America first. Software updates switching on the functionality will be rolled out, and it's up to you to read the email and opt out. One way to do that is to open your Amazon Alexa app and disable Sidewalk from the account settings screen.

We previously [4]wrote about Sidewalk in August, and noted that, opt-outs aside, the idea behind it – community-sized resilient meshes of devices – wasn't necessarily a bad one.

Just don't forget that Ring and the police, in the US at least, have a [5]rather cosy relationship . While Amazon stresses that Ring owners are in control of the footage recorded by their camera-fitted doorbells, homeowners are often [6]pressured into turning their equipment into surveillance systems for the cops. ®

Get our [7]Tech Resources



[1] https://www.theregister.com/2020/10/07/amazon_eero_for_service_providers/

[2] https://m.media-amazon.com/images/G/01/sidewalk/privacy_security_whitepaper_final.pdf

[3] https://www.amazon.com/Amazon-Sidewalk/b?ie=UTF8&node=21328123011

[4] https://www.theregister.com/2020/09/28/amazon_data_trojan/

[5] https://www.theregister.com/2019/11/20/ring_police_spying/

[6] https://www.eff.org/deeplinks/2019/08/five-concerns-about-amazon-rings-deals-police

[7] https://whitepapers.theregister.com/

Popcorn?

MatthewSt

Oh I'm going to enjoy reading the comments for this one!

Opted out should be the default.

Foxglove

The option to consent should be decided by the consumer not the vendor.

It's pretty scummy in my opinion to opt existing users in by default.

Does anyone know if this would be legal in the UK?

Genuine question as I don't know and I'm not sure how to even start a search for the topic.

I appreciate it hasn't happened in the UK yet.

Illegal

Colonel Mad

Stealing bandwith is a capital offence.

Re: Illegal

Mike the FlyingRat

Sorry, but we get the Tech company leaders because they know that they can get away with almost anything. (You should see some of the Right wing columns on the Big Tech / MSM complicity in getting Biden elected.... )

Seriously though... extra bits from your Android phone sending data back to Google?

Now this?

Its small, just a bit of a user tax. So to speak.

Would make for an interesting class action lawsuit.

encourage third-party manufacturers to produce equipment that is also Sidewalk compatible

Howard Sway

Such as the "steal all your neighbours data allowance for free" portable mini wifi router.

Doctor Syntax

What could possibly go wrong?

And do Amazon care?

The real problem is the data caps

martinusher

What Amazon is trying to do with Sidewalk is to build a comprehensive, reliable, network for low bandwidth devices using existing resources. The engineer in me thinks this is a clever idea that makes use of a pooled resource to provide optimum performance for everyone. A bit like the Internet as a whole, really. It works only if the 'net is seen as a shared resource rather than something that needs to be doled out a teaspoonful at a time to individual users. Here data tiers are the big issue because the need to monetize the connection makes a connection 'owner' want to jealously guard their little slice of the pie.

I daresay the goal of Sidewalk will not be achieved until we've ditched our current slate of ISPs for next generation ones who will probably include, or at least be partnered with, Amazon. (The current generation of ISPs probably have a vested interest in cellular wireless anyway so they won't want compeition from IoT devices that using non-cellular -- and so non-billable -- data.) We need much better management of Internet connections anyway -- the current setup doesn't manage abuse, like any common resource its prone to abuse by the less than socialized.

So... want to pay Amazon to spy on you?

Blackjack

No Amazon Prime needed!

No evil can happen to a good man.
-- Plato