3 ms·
Exactly. Wouldn't we have to have access to all the relevant source code, both for the devices and the server-side components, to tell what Alexa and other home
by nathanaldensr 9y ago
Exactly. Wouldn't we have to have access to all the relevant source code, both for the devices and the server-side components, to tell what Alexa and other home assistant devices are actually doing and storing?
- eckza 9y agoAnd rolling hashes of every build. And a device to constantly cross-check the hashes. And a device to constantly verify that the cross-checker was working. And a workflow to show diffs of each commit. And time to read through them, grok them, and sandbox-test that they weren't doing anything nasty in an obfuscated way. At the end of the day, you really can't trust anything completely, and the only real solution is to 1) trust Amazon (which doesn't seem like a great bet right now), or 2) don't own one.