TV News anchor says 'Alexa, buy me a dollhouse' with predictable results...

Change your Alexa settings if you don’t want to make unexpected purchases.

TV News anchor says 'Alexa, buy me a dollhouse' with predictable results...

Call me a luddite if you like, but the idea of having a company like Amazon always listening to what's being said in my house gives me the creeps.

And, as this TV news report makes all too clear, Amazon's voice-activated assistant Alexa - which powers the likes of the Amazon Echo and Echo Dot - has a problem.

It can't tell the difference between you ordering a product, or your toddler, or (gulp!) someone speaking on the TV or radio.

Yup. Jim Patton, a TV news anchor on San Diego's CW-6, was bantering about a media report of a young girl ordering a dollhouse, and - lo-and-behold - viewers' homes across the region reported that their Alexa devices had then attempted to make similar purchases.

If you're one of those who has surrendered to the seemingly inevitable intrusion into our private lives that Amazon's Alexa (and similar gadgets) brings, then please consider disabling voice purchasing or enabling a four digit confirmation code to prevent accidental purchases.

Amazon, of course, enables voice purchases by default. That's in their interest. They want to sell lots of dollhouses (and more besides).

To change the settings to something more sensible:

  • Open the Alexa app.
  • Open the left navigation panel, and then select Settings > Voice Purchasing.
  • Select appropriate settings (such as disabling voice purchases or enabling the confirmation code).

It goes without saying that Alexa can do a fair bit more than make purchases from the Amazon store, and there is the potential for mischief makers to abuse the system in other ways if it can't tell the difference between the voices of authorised and unauthorised users.

Don't say I didn't warn you.

Update: An Amazon spokesperson has been in touch with the following statement:

"You must ask Alexa to order a product and then confirm the purchase with a “yes” response to purchase via voice. If you asked Alexa to order something on accident, simply say “no” when asked to confirm. You can also manage your shopping settings in the Alexa app, such as turning off voice purchasing or requiring a confirmation code before every order. To learn more, go to Manage Voice Purchasing Settings. Additionally, orders you place for physical products are eligible for free returns."

Tags: ,

Smashing Security audio podcast
Check out "Smashing Security", the new weekly audio podcast, with Graham Cluley, Carole Theriault, and special guests from the world of information security.

"Three people having fun in an industry often focused on bad news" • "It's brilliant!" • "The Top Gear of computer security"

Latest episode:

Listen now

Subscribe to the free GCHQ newsletter

,

8 Responses

  1. Etaoin Shrdlu

    January 9, 2017 at 8:54 am #

    I would have gotten a droll blouse anyway, even with a PIN set.

  2. graphicequaliser

    January 9, 2017 at 10:46 am #

    I ended up with seasons 1 and 2 of "Dollhouse" – sheesh!

  3. James

    January 9, 2017 at 12:26 pm #

    what a load of old rubbish. I have one echo and one dot and neither had voice purchasing enabled by default

    • Graham Cluley in reply to James.

      January 9, 2017 at 12:38 pm #

      That may have been your experience, however it's different from what Amazon itself describes at https://www.amazon.com/gp/help/customer/display.html?nodeId=201952610 :

      "Note: After you register your Alexa device, voice purchasing is on by default."

  4. Callum Finlayson

    January 9, 2017 at 1:19 pm #

    "… please consider disabling voice purchasing or enabling a four digit confirmation code to prevent accidental purchases …"

    So only half the audience will get affected depending on whether the presenter says "Alexa order me a dollhouse … zero zero zero zero" or " … one two three four" :)

  5. Alex

    January 9, 2017 at 2:12 pm #

    Also, if you'allow the Echo or Dot to control your smart home door locks, at least move it far enough from a window or audible answering machine so a thief outside cannot gain verbal access and order Alexa to unlock your doors.

    Since I use my Echo just a few hours a day for timers, music, audio books, news and such, I have mine on a manual power switch. When I am not actively using it, it's switched off at the power source.

  6. AJC

    January 9, 2017 at 2:56 pm #

    When will Alexa/Amazon start offering other services?

    "Who will rid me of this troublesome priest?"

  7. J. D.

    January 17, 2017 at 7:09 pm #

    It's important to clarify that all voice purchases still require a confirmation. Once Alexa hears your request, she says "The ABC Dollhouse is 123 dollars. Would you like me to order that for you?" If one do not say "Yes" within about 5 seconds the request is dismissed. So — that may not protect you from kids/guests, but it's not very likely your TV is actually going to order anything.

Leave a Reply