Skip to main content

Purchasing a used smart speaker? A hacker could be listening to you

Robert Couse-Baker/Flickr

It seems like there are smart speakers just about everywhere these days. For folks looking to get in on the action without reaching too far into the couch cushions for cash, second-hand devices can seem like a viable option for enjoying the benefits of the hot tech tools at a budget-friendly price. But security experts warn smart speakers from secondary sellers could be used to spy on unsuspecting consumers, according to Forbes.

Ariel Hochstadt, the co-founder of online privacy company vpnMentor, warned that it’s possible for hackers and malicious actors to manipulate smart home speakers, and specifically to bug the device and insert spying tools. “The buyer would not be aware that they have purchased a pre-hacked device and, therefore, once in the home, the hackers would be able to access it remotely without ever having to enter the home,” he warned, per Forbes.

Primarily at risk to this type of attack is the first-generation Amazon Echo — the original model of Amazon’s wildly popular smart speaker equipped with voice assistant Alexa, which has been discontinued. That speaker in particular sports a physical device that makes it possible for an attacker to crack open the case and manipulate the internal components. Hochstadt said that an SD card could be used to turn the Echo into a spying machine that could “livestream audio from its microphone, and remotely use its services.”

When reached for comment, an Amazon spokesperson told us the following: “Customer trust is very important to us. Safeguards for customer privacy were built into the Echo from day one, including a microphone off button that electronically disconnects the microphone on the device so that no audio is recorded. We recommend that people purchase Echo devices from Amazon or authorized retailers.”

Unfortunately, because the attack isn’t software based, defending against it is tricky; simply undergoing a factory reset won’t cut it. Instead, it’s recommended that you purchase the device from first-party sellers and certified resellers. If you’re buying a used device, check for any signs of physical manipulation and make sure the device doesn’t come with any accessories like SD cards from unknown sources. These types of attacks aren’t necessarily common, but they are possible and something to be aware of when buying used devices.

There are also software vulnerabilities that smart speakers can introduce to your home, so if you’re purchasing one, make sure to always install the most recent update available. Doing so will often address known software vulnerabilities and bugs. Hochstadt also recommends keeping smart devices like the Echo and other Alexa devices, Google Home, and Apple HomePod connected to separate wireless networks so they can’t be used to intercept data and information that you transmit across your primary network.

Editors' Recommendations

AJ Dellinger
AJ Dellinger is a freelance reporter from Madison, Wisconsin with an affinity for all things tech. He has been published by…
Alexa vs. HomeKit: Which smart home platform is best?
Apple HomePod 2023

When it comes to building a smart home, few steps are as important as choosing your smart home platform. Pick the wrong one, and you could be left using dozens of separate smartphone apps to control all your gadgets.

Apple HomeKit and Amazon Alexa are two of the best options available today -- but which one is better for you? Here’s a comparison of the two platforms to help you decide.
What is a smart home platform?

Read more
Here’s how to throw a killer Halloween party with your smart home
spooky halloween lighting haunted house

The spooky season is almost here, and if you’re worried about throwing the perfect Halloween party, consider using your smart home to do the heavy lifting. Common smart home gadgets such as motion sensors, light bulbs, and smart plugs make it easy to pull off a horrifying Halloween party for your guests. From assisting with your playlist and movie selections to creating a chilling ambiance, here’s a look at all the ways your smart home can help you throw a killer Halloween party.
Use motion sensors to trigger spooky sounds
Have a smart home security system? Then you can probably rig up your motion sensors to play a spooky noise. It doesn't necessarily have to be a motion sensor, either -- your smart camera can trigger other devices in your smart home when it detects motion.

Just place a speaker on your porch, perhaps tucked away behind a pumpkin or a bit of straw. When a group of unsuspecting kids shows up to ask for candy, they set off the motion sensor on the camera, which triggers the speaker to play the sound of a zombie's moan or the cackle of a witch. Bonus points if you set up an animatronic hand to rise up out of the straw.

Read more
Are smart blinds worth it?
Controlling smart blinds with a remote.

As far as smart home gadgets are concerned, smart blinds are pretty niche. Unlike smart displays, video doorbells, or smart locks, it’s not often that you hear about smart blinds (or see them installed in a friend’s home). However, these unique products offer the same luxuries as their smart siblings -- and some might even be able to save you money.

But are smart blinds worth it? Or is the upfront investment too steep in relation to the conveniences they offer? Here’s a closer look at these products to help you decide if you should upgrade your traditional blinds to something with a bit more brains.
What are smart blinds?

Read more